Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by NVD-CWE-noinfo
Total 22706 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-3405 1 360 2 360f5, 360f5 Firmware 2021-07-21 5.0 MEDIUM 5.3 MEDIUM
In the 3.1.3.64296 and lower version of 360F5, the third party can trigger the device to send a deauth frame by constructing and sending a specific illegal 802.11 Null Data Frame, which will cause other wireless terminals connected to disconnect from the wireless, so as to attack the router wireless by DoS. At present, the vulnerability has been effectively handled, and users can fix the vulnerability after updating the firmware version.
CVE-2019-3430 1 Zte 1 Zxcloud Goldendata Vap 2021-07-21 4.0 MEDIUM 4.9 MEDIUM
All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have an information disclosure vulnerability. Attackers could use this vulnerability to collect data information and damage the system.
CVE-2019-3476 1 Microfocus 1 Data Protector 2021-07-21 7.5 HIGH 9.8 CRITICAL
Remote arbitrary code execution in Micro Focus Data Protector, version 10.03 this vulnerability could allow remote arbitrary code execution.
CVE-2019-3479 1 Hp 1 Arcsight Logger 2021-07-21 7.5 HIGH 9.8 CRITICAL
Mitigates a potential remote code execution issue in ArcSight Logger versions prior to 6.7.
CVE-2019-3483 1 Hp 1 Arcsight Logger 2021-07-21 6.8 MEDIUM 6.5 MEDIUM
Mitigates a potential information leakage issue in ArcSight Logger versions prior to 6.7.
CVE-2019-3484 1 Hp 1 Arcsight Logger 2021-07-21 7.2 HIGH 7.8 HIGH
Mitigates a remote code execution issue in ArcSight Logger versions prior to 6.7.
CVE-2019-3493 1 Microfocus 2 Network Automation, Network Operations Management 2021-07-21 6.5 MEDIUM 8.8 HIGH
A potential security vulnerability has been identified in Micro Focus Network Automation Software 9.20, 9.21, 10.00, 10.10, 10.20, 10.30, 10.40, 10.50, 2018.05, 2018.08, 2018.11, and Micro Focus Network Operations Management (NOM) all versions. The vulnerability could be remotely exploited to Remote Code Execution.
CVE-2019-3650 1 Mcafee 1 Advanced Threat Defense 2021-07-21 4.0 MEDIUM 6.5 MEDIUM
Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD prior to 4.8 allows remote authenticated attackers to gain access to the atduser credentials via carefully constructed GET request extracting insecurely information stored in the database.
CVE-2019-4036 1 Ibm 1 Security Access Manager 2021-07-21 5.0 MEDIUM 7.5 HIGH
IBM Security Access Manager Appliance could allow unauthenticated attacker to cause a denial of service in the reverse proxy component. IBM X-Force ID: 156159.
CVE-2019-4288 1 Ibm 1 Maximo Anywhere 2021-07-21 2.1 LOW 4.3 MEDIUM
IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 could disclose highly senstiive user information to an authenticated user with physical access to the device. IBM X-Force ID: 160631.
CVE-2019-4366 1 Ibm 1 Cognos Analytics 2021-07-21 5.0 MEDIUM 5.3 MEDIUM
IBM Cognos Analytics 11.0 and 11.1 is susceptible to an information disclosure vulnerability where an attacker could gain access to cached browser data. IBM X-Force ID: 161748.
CVE-2019-7246 1 Amd 1 Atillk64 2021-07-21 4.6 MEDIUM 6.7 MEDIUM
An issue was discovered in atillk64.sys in AMD ATI Diagnostics Hardware Abstraction Sys/Overclocking Utility 5.11.9.0. The vulnerable driver exposes a wrmsr instruction and does not properly filter the Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges.
CVE-2019-4394 1 Ibm 1 Cloud Orchestrator 2021-07-21 2.1 LOW 2.3 LOW
IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 contain APIs that could be used by a local user to send email. IBM X-Force ID: 162232.
CVE-2019-4406 1 Ibm 1 Spectrum Protect Backup-archive Client 2021-07-21 2.1 LOW 4.4 MEDIUM
IBM Spectrum Protect Backup-Archive Client 7.1 and 8.1 may be vulnerable to a denial of service attack due to a timing issue between client and server TCP/IP communications. IBM X-Force ID: 162477.
CVE-2019-4446 1 Ibm 19 Control Desk, Maximo Asset Configuration Manager, Maximo Asset Health Insights and 16 more 2021-07-21 5.5 MEDIUM 5.4 MEDIUM
IBM Maximo Asset Management 7.6 could allow an authenticated user perform actions they are not authorized to by modifying request parameters. IBM X-Force ID: 163490.
CVE-2019-4478 1 Ibm 1 Maximo Asset Management 2021-07-21 4.0 MEDIUM 6.5 MEDIUM
IBM Maximo Asset Management 7.6.0, and 7.6.1 could allow an authenticated user to obtain highly sensitive information that they should not normally have access to. IBM X-Force ID: 163998.
CVE-2019-4541 1 Ibm 1 Security Directory Server 2021-07-21 6.5 MEDIUM 7.2 HIGH
IBM Security Directory Server 6.4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 165814.
CVE-2019-4560 1 Ibm 1 Mq Appliance 2021-07-21 4.0 MEDIUM 6.5 MEDIUM
IBM MQ and IBM MQ Appliance 9.1 CD, 9.1 LTS, 9.0 LTS, and 8.0 is vulnerable to a denial of service attack caused by channels processing poorly formatted messages. IBM X-Force ID: 166357.
CVE-2019-4568 5 Hp, Ibm, Linux and 2 more 7 Hp-ux, Aix, Mq and 4 more 2021-07-21 4.3 MEDIUM 5.9 MEDIUM
IBM MQ and IBM MQ Appliance 8.0 and 9.0 LTS could allow a remote attacker with intimate knowledge of the server to cause a denial of service when receiving data on the channel. IBM X-Force ID: 166629.
CVE-2019-4655 1 Ibm 2 Mq, Mq Appliance 2021-07-21 4.0 MEDIUM 4.3 MEDIUM
IBM MQ 9.1.0.0, 9.1.0.1, 9.1.0.2, 9.1.0.3, 9.1.1, 9.1.2, and 9.1.3 is vulnerable to a denial of service attack that would allow an authenticated user to reset client connections due to an error within the Data Conversion routine. IBM X-Force ID: 170966.