cve-2019-2725 vulnerabilities and exploits

(subscribe to this query)

9.3

CVSSv2

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1034....

Microsoft Office 2016 Microsoft Office 2019 Microsoft Office 365 Proplus -Microsoft Office Online Server -Microsoft Sharepoint Server 20193 Articles available

5

CVSSv2

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Easily exploitable vulnerability allows unauthenticated attacker with...

Oracle Jdk 1.7.0 Oracle Jdk 1.8.0 Oracle Jdk 11.0.2 Oracle Jdk 12 Oracle Jre 1.7.0 Oracle Jre 1.8.0 Oracle Jre 11.0.2 Oracle Jre 12 Redhat Openshift Container Platform 3.11 Opensuse Leap 15.0

4.3

CVSSv2

A vulnerability was found in mod_auth_mellon before v0.14.2. An open redirect in the logout URL allows requests with backslashes to pass through by assuming that it is a relative URL, while the browsers silently convert backslash characters into forward slashes treating them as...

Mod Auth Mellon Project Mod Auth Mellon Fedoraproject Fedora 29 Redhat Enterprise Linux 7.0 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 18.10

4.6

CVSSv2

In QEMU 3.0.0, tcp_emu in slirp/tcp_subr.c has a heap-based buffer overflow....

Qemu Qemu 3.0.0 Opensuse Leap 15.0 Opensuse Leap 42.3 Fedoraproject Fedora 29 Fedoraproject Fedora 30 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 18.107 Github repositories available

9

CVSSv2

VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) and Fusion (11.x before 11.0.3, 10.x before 10.1.6) updates address an out-of-bounds write vulnerability in the e1000 and e1000e virtual network adapters. Exploitation of this issue may lead to code execution on the...

Vmware Fusion Vmware Workstation

4.3

CVSSv2

If REST API is enabled, the Junos OS login credentials are vulnerable to brute force attacks. The high default connection limit of the REST API may allow an attacker to brute-force passwords using advanced scripting techniques. Additionally, administrators who do not enforce a...

Juniper Junos Juniper Junos 15.1r7-s3 Juniper Junos 15.1x53-d69 Juniper Junos 15.1x53-d495 Juniper Junos 15.1x53-d591 Juniper Junos 16.1r4-s12 Juniper Junos 16.1r6-s6 Juniper Junos 16.1r7-s3 Juniper Junos 17.1r3 Juniper Junos 17.2r3-s1 Juniper Junos 17.4r2-s2 Juniper Junos 18.1r3-s1

6.1

CVSSv2

Crafted packets destined to the management interface (fxp0) of an SRX340 or SRX345 services gateway may create a denial of service (DoS) condition due to buffer space exhaustion. This issue only affects the SRX340 and SRX345 services gateways. No other products or platforms are...

Juniper Junos 15.1x49 Juniper Junos 17.3 Juniper Junos 17.4 Juniper Junos 18 Juniper Junos 18.1 Juniper Junos 18.2 Juniper Junos 18.3

5.5

CVSSv2

A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from...

Microsoft Windows 10 -Microsoft Windows 10 1607 Microsoft Windows 10 1703 Microsoft Windows 10 1709 Microsoft Windows 10 1803 Microsoft Windows 10 1809 Microsoft Windows 7 -Microsoft Windows 8.1 -Microsoft Windows Server 2008 -Microsoft Windows Server 2012 -Microsoft Windows Server 2012 R2 Microsoft Windows Server 2016 -Microsoft Windows Server 2016 1709 Microsoft Windows Server 2016 1803 Microsoft Windows Server 2019 -1 Article available

7.5

CVSSv2

A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0698, CVE-2019-0726....

Microsoft Windows 10 1803 Microsoft Windows 10 1809 Microsoft Windows Server 2016 1803 Microsoft Windows Server 20193 Articles available

7.5

CVSSv2

A use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is obtained using JavaScript and the element is then removed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 60.6, Firefox ESR...

Mozilla Firefox Mozilla Firefox Esr Mozilla Thunderbird

« PREV 1 2 3 4 5 6 7 8 9 10 NEXT »