Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 244

Export CSV
CVE-2019-3996

ELOG 3.1.4-57bea22 and below can be used as an HTTP GET request proxy when unauthenticated remote attackers send crafted HTTP POST requests.

CVSS 3.1 · 6.5 Medium EPSS 6.6% KEV · Not listed
Vendors
Elog Project Fedoraproject
Products
Elog Fedora
CVE-2018-1999038

A confused deputy vulnerability exists in Jenkins Publisher Over CIFS Plugin 0.10 and earlier in CifsPublisherPluginDescriptor.java that allows attackers to have Jenkins connect to an attacker specified CIFS server with attacker specified credentials.

CVSS 3.0 · 4.2 Medium EPSS < 1% KEV · Not listed
Vendors
Jenkins
Products
Publish Over Cifs
CVE-2018-16598

An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component. In xProcessReceivedUDPPacket and prvParseDNSReply, any received DNS response is accepted, without confirming it matches a sent DNS request.

CVSS 3.0 · 5.9 Medium EPSS 1.5% KEV · Not listed
Vendors
Amazon
Products
Amazon Web Services Freertos Freertos
CVE-2018-12182

edk2: insufficient memory write in SMM service leads to privilege escalation

Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.

CVSS 3.0 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Tianocore
Products
Edk Ii