CVE Vulnerability Catalog

An elevation of privilege vulnerability in Windows Error Reporting (WER), due to improper file handling. A local attacker could exploit this to gain elevated privileges.

A remote code execution vulnerability in Remote Desktop Services allows an unauthenticated attacker to execute code by sending specially crafted requests to the target system via RDP.

The LG N1A1 NAS device is vulnerable to remote command execution via HTTP POST requests with specific parameters, allowing arbitrary code execution.

A buffer overflow vulnerability in the WhatsApp VOIP stack allows remote code execution via specially crafted RTCP packets sent to a target phone number.

A vulnerability in Pulse Connect Secure allows an unauthenticated remote attacker to read arbitrary files by sending a specially crafted URI.

A remote code execution vulnerability in the upload.cgi functionality of Sierra Wireless AirLink ES450 (FW 4.9.3). A specially crafted HTTP request can upload a file that can be executed on the webserver.

The ZyXEL P660HN-T1A router has a command injection vulnerability in the Remote System Log forwarding function, accessible by an unauthenticated user via the remote_host parameter on the ViewLog.asp page.

Multiple wireless presentation devices (including Crestron AM-100, Barco wePresent, Extron ShareLink) have a command injection vulnerability in the file_transfer.cgi HTTP endpoint, allowing a remote unauthenticated attacker to execute OS commands as root.

An SSRF vulnerability in the ProxyServlet component of Zimbra Collaboration Suite. It allows an attacker to send requests from the server to internal resources.

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8.

A vulnerability in the admin web interface of Pulse Secure (Pulse Connect Secure and Pulse Policy Secure) allows an authenticated attacker to inject and execute commands.

A vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware. An unauthenticated attacker with network access via HTTP can compromise data integrity and confidentiality.

A path traversal vulnerability in the downloadallattachments resource in Confluence Server and Data Center. It allows writing files to arbitrary locations, potentially leading to remote code execution.

An elevation of privilege vulnerability in Windows, caused by improper handling of objects in memory by the Win32k component. A local attacker could exploit this to gain elevated privileges.

An elevation of privilege vulnerability in Windows AppX Deployment Service (AppXSVC), due to improper handling of hard links. A local attacker could exploit this to gain elevated privileges.

An elevation of privilege vulnerability in Windows, caused by improper handling of objects in memory by the Win32k component. A local attacker could exploit this to gain elevated privileges.

A remote code execution vulnerability exists in the scripting engine of Internet Explorer when handling objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0739, CVE-2019-0753, and CVE-2019-0862.

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0797.

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0808.

An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0704 and CVE-2019-0821.