CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 30, 02:14 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2019-11884 | KE Kernel Linux | 3.3 | May 10 | The do_hidp_sock_ioctl function in net/bluetooth/hidp/sock.c in the Linux kernel before 5.0.15 allows a local user to obtain potentially sensitive information from kernel stack… |
| CVE-2019-4207 | TA Tririga Application Platform Ibm | 3.3 | May 7 | IBM TRIRIGA Application Platform 3.5.3 and 3.6.0 may disclose sensitive information only available to a local user that could be used in further attacks against the system |
| CVE-2019-11808 | RA Ratpack Ratpack Project | 3.7 | May 7 | Ratpack versions before 1.6.1 generate a session ID using a cryptographically weak PRNG in the JDK's ThreadLocalRandom |
| CVE-2019-4146 | SB Sterling B2b Integrator Ibm | 3.1 | Apr 25 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 could allow an authenticated user to obtain sensitive document information under unusual circumstances |
| CVE-2019-3868 | KE Keycloak Redhat | 3.8 | Apr 24 | Keycloak up to version 6.0.0 allows the end user token (access or id token JWT) to be used as the session cookie for browser sessions for OIDC |
| CVE-2019-2720 | DI Data Integrator Oracle | 3.1 | Apr 23 | Vulnerability in the Oracle Data Integrator component of Oracle Fusion Middleware (subcomponent: ODI Tools) |
| CVE-2019-2708 | BD Berkeley DB Oracle | 3.3 | Apr 23 | Vulnerability in the Data Store component of Oracle Berkeley DB |
| CVE-2019-2605 | BI Business Intelligence Oracle | 3.4 | Apr 23 | Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: Web Catalog) |
| CVE-2019-2577 | SO Solaris Oracle | 3.3 | Apr 23 | Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: File Locking Services) |
| CVE-2019-0162 | Product not mapped yet | 3.8 | Apr 17 | Memory access in virtual memory mapping for some microprocessors may allow an authenticated user to potentially enable information disclosure via local access |
| CVE-2019-9219 | GI GitLab GitLab | 3.7 | Apr 17 | An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1 |
| CVE-2019-9179 | GI GitLab GitLab | 3.7 | Apr 17 | An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1 |
| CVE-2019-9171 | GI GitLab GitLab | 3.7 | Apr 17 | An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1 |
| CVE-2019-9495 | DL Debian Linux Debian | 3.7 | Apr 17 | The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns |
| CVE-2019-11191 | KE Kernel Linux | 2.5 | Apr 12 | The Linux kernel through 5.0.7, when CONFIG_IA32_AOUT is enabled and ia32_aout is loaded, allows local users to bypass ASLR on setuid a.out programs (if any exist) because… |
| CVE-2019-6156 | 5F 510-15ikl Firmware Lenovo | 3.3 | Apr 10 | In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash |
| CVE-2019-1573 | PA PAN-OS Palo Alto Networks | 2.5 | Apr 9 | GlobalProtect Agent 4.1.0 for Windows and GlobalProtect Agent 4.1.10 and earlier for macOS may allow a local authenticated attacker who has compromised the end-user account and… |
| CVE-2018-4470 | MO Mac OS X Apple | 3.3 | Apr 3 | A privacy issue in the handling of Open Directory records was addressed with improved indexing |
| CVE-2018-4446 | IO iOS Apple | 3.3 | Apr 3 | This issue was addressed with improved entitlements |
| CVE-2018-4430 | IO iOS Apple | 2.4 | Apr 3 | A lock screen issue allowed access to contacts on a locked device |
| CVE-2018-4387 | IO iOS Apple | 2.4 | Apr 3 | A lock screen issue allowed access to photos via Reply With Message on a locked device |
| CVE-2018-4352 | IO iOS Apple | 3.3 | Apr 3 | A consistency issue existed in the handling of application snapshots |
| CVE-2018-4325 | IO iOS Apple | 2.4 | Apr 3 | A logic issue was addressed with improved restrictions |
| CVE-2018-4322 | IO iOS Apple | 3.3 | Apr 3 | This issue was addressed with improved entitlements |
| CVE-2018-1623 | SP Security Privileged Identity Manager Ibm | 3.3 | Apr 2 | IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 allows web pages to be stored locally which can be read by another user on the system |
| CVE-2017-2752 | TH Tommy Hilfiger Th24/7 HP | 2.1 | Mar 27 | A potential security vulnerability caused by incomplete obfuscation of application configuration information was discovered in Tommy Hilfiger TH24/7 Android app versions 2.0.0.11,… |
| CVE-2019-9942 | DL Debian Linux Debian | 3.7 | Mar 23 | A sandbox information disclosure exists in Twig before 1.38.0 and 2.x before 2.7.0 because, under some circumstances, it is possible to call the __toString() method on an object… |
| CVE-2019-9889 | VA Vanilla Vanillaforums | 2.7 | Mar 20 | In Vanilla before 2.6.4, a flaw exists within the getSingleIndex function of the AddonManager class |
| CVE-2018-17502 | TR The Receptionist for iPad Los Trigos, Inc | 3.3 | Mar 19 | The Receptionist for iPad could allow a local attacker to obtain sensitive information, caused by an error in the contact.json file |
| CVE-2018-15532 | ST Synaptics Touchpad Driver HP | 3.8 | Mar 17 | SynTP.sys in Synaptics Touchpad drivers before 2018-06-06 allows local users to obtain sensitive information about freed kernel addresses |
| CVE-2019-8934 | LE Leap Opensuse | 3.3 | Mar 17 | hw/ppc/spapr.c in QEMU through 3.1.0 allows Information Exposure because the hypervisor shares the /proc/device-tree/system-id and /proc/device-tree/model system attributes with a… |
| CVE-2018-12218 | IG Intel(R) Graphics Driver for Windows Intel Corporation | 3.3 | Mar 14 | Unhandled exception in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063… |
| CVE-2018-12224 | IG Intel(R) Graphics Driver for Windows Intel Corporation | 3.3 | Mar 14 | Buffer leakage in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka… |
| CVE-2018-12209 | IG Intel(R) Graphics Driver for Windows Intel Corporation | 3.3 | Mar 14 | Insufficient access control in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057),… |
| CVE-2018-12222 | IG Intel(R) Graphics Driver for Windows Intel Corporation | 3.3 | Mar 14 | Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057),… |
| CVE-2018-12217 | IG Intel(R) Graphics Driver for Windows Intel Corporation | 2.3 | Mar 14 | Insufficient access control in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057),… |
| CVE-2019-7729 | SC Smart Camera Bosch | 3.3 | Feb 22 | An issue was discovered in the Bosch Smart Camera App before 1.3.1 for Android |
| CVE-2019-1667 | CH Cisco HyperFlex HX-Series Cisco | 3.3 | Feb 21 | Cisco HyperFlex Arbitrary Statistics Write Vulnerability |
| CVE-2019-0127 | OP Openvino Intel | 3.9 | Feb 18 | Logic error in the installer for Intel(R) OpenVINO(TM) 2018 R3 and before for Linux may allow a privileged user to potentially enable information disclosure via local access |
| CVE-2018-1962 | SI Security Identity Manager IBM | 3.3 | Feb 4 | IBM Security Identity Manager 7.0.1 Virtual Appliance does not invalidate session tokens when the logout button is pressed |
| CVE-2018-19004 | LL LCDS Laquis SCADA ICS-CERT | 3.3 | Feb 1 | LCDS Laquis SCADA prior to version 4.1.0.4150 allows out of bounds read when opening a specially crafted project file, which may allow data exfiltration |
| CVE-2019-3815 | SY systemd The systemd Project | 3.3 | Jan 28 | A memory leak was discovered in the backport of fixes for CVE-2018-16864 in Red Hat Enterprise Linux |
| CVE-2018-10910 | BL bluez The Bluez Project | 3.3 | Jan 28 | A bug in Bluez may allow for the Bluetooth Discoverable state being set to on when no Bluetooth agent is registered with the system |
| CVE-2017-3142 | B9 BIND 9 ISC | 3.7 | Jan 16 | An error in TSIG authentication can permit unauthorized zone transfers |
| CVE-2019-2553 | VV VM VirtualBox Oracle Corporation | 3.8 | Jan 16 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) |
| CVE-2019-2501 | VV VM VirtualBox Oracle Corporation | 3.8 | Jan 16 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) |
| CVE-2019-2506 | VV VM VirtualBox Oracle Corporation | 3.8 | Jan 16 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) |
| CVE-2019-2505 | VV VM VirtualBox Oracle Corporation | 3.8 | Jan 16 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) |
| CVE-2019-2504 | VV VM VirtualBox Oracle Corporation | 3.8 | Jan 16 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) |
| CVE-2019-2426 | JA Java Oracle Corporation | 3.7 | Jan 16 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Networking) |