Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cve-2018-13379 vulnerabilities and exploits

(subscribe to this query)

5.5
CVSSv2
CVE-2019-6582
A vulnerability has been identified in Siveillance VMS 2017 R2 (All versions < V11.2a), Siveillance VMS 2018 R1 (All versions < V12.1a), Siveillance VMS 2018 R2 (All versions < V12.2a), Siveillance VMS 2018 R3 (All versions < V12.3a), Siveillance VMS 2019 R1 (All...
Siemens Siveillance Video Management Software 2017 R2Siemens Siveillance Video Management Software 2018 R1Siemens Siveillance Video Management Software 2018 R2Siemens Siveillance Video Management Software 2018 R3Siemens Siveillance Video Management Software 2019 R1
4.6
CVSSv2
CVE-2019-0158
Insufficient path checking in the installation package for Intel(R) Graphics Performance Analyzer for Linux version 18.4 and before may allow an authenticated user to potentially enable escalation of privilege via local access....
Intel Graphics Performance Analyzer
4.3
CVSSv2
CVE-2019-0870
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from...
Microsoft Azure Devops Server 2019Microsoft Team Foundation Server 2017Microsoft Team Foundation Server 2018
4.3
CVSSv2
CVE-2019-0871
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from...
Microsoft Team Foundation Server 2017Microsoft Team Foundation Server 2018Microsoft Azure Devops Server 2019
6.8
CVSSv2
CVE-2019-7359
An exploitable heap overflow vulnerability in the AcCellMargin handling code in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018, Autodesk AutoCAD Mechanical 2018, Autodesk...
Autodesk Advance Steel 2018Autodesk Autocad 2018Autodesk Autocad Architecture 2018Autodesk Autocad Electrical 2018Autodesk Autocad Lt 2018Autodesk Autocad Map 3d 2018Autodesk Autocad Mechanical 2018Autodesk Autocad Mep 2018Autodesk Autocad P\\&id 2018Autodesk Autocad Plant 3d 2018Autodesk Civil 3d 2018
6.4
CVSSv2
CVE-2020-13379
The avatar feature in Grafana 3.0.1 through 7.0.1 has an SSRF Incorrect Access Control issue. This vulnerability allows any unauthenticated user/client to make Grafana send HTTP requests to any URL and return its result to the user/client. This can be used to gain information...
Grafana GrafanaFedoraproject Fedora 31Fedoraproject Fedora 32Netapp E-series Performance Analyzer -Opensuse Leap 15.2Opensuse Backports Sle 15.0
6.8
CVSSv2
CVE-2019-7358
An exploitable heap overflow vulnerability in the DXF-parsing functionality in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018, Autodesk AutoCAD Mechanical 2018, Autodesk...
Autodesk Advance Steel 2018Autodesk Autocad 2018Autodesk Autocad Architecture 2018Autodesk Autocad Electrical 2018Autodesk Autocad Lt 2018Autodesk Autocad Map 3d 2018Autodesk Autocad Mechanical 2018Autodesk Autocad Mep 2018Autodesk Autocad P\\&id 2018Autodesk Autocad Plant 3d 2018Autodesk Civil 3d 2018
6.8
CVSSv2
CVE-2019-7361
An attacker may convince a victim to open a malicious action micro (.actm) file that has serialized data, which may trigger a code execution in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk...
Autodesk Advance Steel 2018Autodesk Autocad 2018Autodesk Autocad Architecture 2018Autodesk Autocad Electrical 2018Autodesk Autocad Lt 2018Autodesk Autocad Map 3d 2018Autodesk Autocad Mechanical 2018Autodesk Autocad Mep 2018Autodesk Autocad P\\&id 2018Autodesk Autocad Plant 3d 2018Autodesk Civil 3d 2018
4.3
CVSSv2
CVE-2019-0868
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from...
Microsoft Team Foundation Server 2017Microsoft Team Foundation Server 2018Microsoft Azure Devops Server 2019
4.6
CVSSv2
CVE-2018-12174
Heap overflow in Intel Trace Analyzer 2018 in Intel Parallel Studio XE 2018 Update 3 may allow an authenticated user to potentially escalate privileges via local access....
Intel Parallel Studio Xe 2018
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-24686CVE-2021-21298CVE-2021-69420server-side request forgeryCVE-2021-23957microsoftSSTI.netSQLCVE-2021-21273CVE-2021-25281