InfoSec Signals™
Sign InStart Free

CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,177 CVEs published, 329 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

Published in the last 7 days
5,177
Show in the list
Critical, last 7 days
329
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,748
Show in the list
Clear
101,449 CVEs, showing 1051 to 1100PreviousPage 22 of 2,029Next
CVESeverityTitlePublished
CVE-2018-17152
Healthcare
Medium 6.4Intersystems Cache 2017.2.2.865.0 allows XXE.
Assigned by mitre
Jul 11, 2019
CVE-2018-17151
Healthcare
Medium 5.4Intersystems Cache 2017.2.2.865.0 has Incorrect Access Control.
Assigned by mitre
Jul 11, 2019
CVE-2019-11360Medium 4.2A buffer overflow in iptables-restore in netfilter iptables 1.8.2 allows an attacker to (at least) crash the program or potentially gain code execution via a specially crafted iptables-save file.
Assigned by mitre
Jul 12, 2019
CVE-2018-20852Medium 4.3http.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3 does not correctly validate the domain: it can be tricked into sending existing cookies to the wrong serv…Jul 13, 2019
CVE-2019-13602High 7.8An Integer Underflow in MP4_EIA608_Convert() in modules/demux/mp4/mp4.c in VideoLAN VLC media player through 3.0.7.1 allows remote attackers to cause a denial of service (heap-based buffer overflow a…
Assigned by mitre
Jul 14, 2019
CVE-2019-1010022Critical 9.8GNU Libc current is affected by: Mitigation bypass.
Assigned by dwf
Jul 15, 2019
CVE-2019-1010024Medium 5.3GNU Libc current is affected by: Mitigation bypass.
Assigned by dwf
Jul 15, 2019
CVE-2019-1010023Medium 5.4GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file.
Assigned by dwf
Jul 15, 2019
CVE-2019-1010025Medium 5.3GNU Libc current is affected by: Mitigation bypass.
Assigned by dwf
Jul 15, 2019
CVE-2019-0880
Known exploited
High 7.8A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'.
Assigned by microsoft
Jul 15, 2019
CVE-2019-1068
Known exploited
High 8.8A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.
Assigned by microsoft
Jul 15, 2019
CVE-2019-12991
Known exploited
High 8.8Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 5 of 6).
Assigned by mitre
Jul 16, 2019
CVE-2019-12989
Known exploited
Critical 9.8Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow SQL Injection.
Assigned by mitre
Jul 16, 2019
CVE-2019-13272
Known exploited
High 7.8In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obta…
Assigned by mitre
Jul 17, 2019
CVE-2019-13962Critical 9.8lavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has a heap-based buffer over-read because it does not properly validate the width and height.
Assigned by mitre
Jul 18, 2019
CVE-2019-1579
Known exploited
High 8.1Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or GlobalProtect Gateway Interface enabled may allow an unauth…
Assigned by palo_alto
Jul 19, 2019
CVE-2019-1010228
Healthcare
Critical 9.8OFFIS.de DCMTK 3.6.3 and below is affected by: Buffer Overflow.
Assigned by dwf
Jul 22, 2019
CVE-2019-11708
Known exploited
Critical 10.0Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process opening web content chosen by a compromise…
Assigned by mozilla
Jul 23, 2019
CVE-2019-11707
Known exploited
High 8.8A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop.
Assigned by mozilla
Jul 23, 2019
CVE-2019-14250Medium 5.5An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32.
Assigned by mitre
Jul 24, 2019
CVE-2019-1010180High 7.8GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access.
Assigned by dwf
Jul 24, 2019
CVE-2019-10968
Healthcare
Medium 4.4Philips Holter 2010 Plus, all versions.
Assigned by icscert
Jul 24, 2019
CVE-2019-13057Medium 4.9An issue was discovered in the server in OpenLDAP before 2.4.48.
Assigned by mitre
Jul 26, 2019
CVE-2019-13565High 7.5An issue was discovered in OpenLDAP 2.x before 2.4.48.
Assigned by mitre
Jul 26, 2019
CVE-2019-14379Critical 9.8SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typing when ehcache is used (because of net.sf.ehcache.transaction.manager.DefaultTransactionManagerLookup), lead…
Assigned by mitre
Jul 29, 2019
CVE-2019-1129
Known exploited
High 7.8An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'.
Assigned by microsoft
Jul 29, 2019
CVE-2019-1130
Known exploited
High 7.8An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'.
Assigned by microsoft
Jul 29, 2019
CVE-2019-1132
Known exploited
High 7.8An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.
Assigned by microsoft
Jul 29, 2019
CVE-2019-14439High 7.5A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2.
Assigned by mitre
Jul 30, 2019
CVE-2019-5459High 7.1An Integer underflow in VLC Media Player versions < 3.0.7 leads to an out-of-band read.
Assigned by hackerone
Jul 30, 2019
CVE-2019-5460Medium 5.5Double Free in VLC versions <= 3.0.6 leads to a crash.
Assigned by hackerone
Jul 30, 2019
CVE-2019-0193
Known exploited
High 7.2In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's "d…
Assigned by apache
Aug 1, 2019
CVE-2019-14529
Healthcare
Critical 9.8OpenEMR before 5.0.2 allows SQL Injection in interface/forms/eye_mag/save.php.
Assigned by mitre
Aug 2, 2019
CVE-2019-11581
Known exploited
Critical 9.8There was a server-side template injection vulnerability in Jira Server and Data Center, in the ContactAdministrators and the SendBulkMail actions.
Assigned by atlassian
Aug 9, 2019
CVE-2019-14530
Healthcare
High 8.8An issue was discovered in custom/ajax_download.php in OpenEMR before 5.0.2 via the fileName parameter.
Assigned by mitre
Aug 13, 2019
CVE-2019-0344
Known exploited
Critical 9.8Due to unsafe deserialization used in SAP Commerce Cloud (virtualjdbc extension), versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, 1905, it is possible to execute arbitrary code on a target machine with 'Hyb…
Assigned by sap
Aug 14, 2019
CVE-2019-15107
Known exploited
Critical 9.8An issue was discovered in Webmin <=1.920.
Assigned by mitre
Aug 16, 2019
CVE-2019-15219Medium 4.6An issue was discovered in the Linux kernel before 5.1.8.
Assigned by mitre
Aug 19, 2019
CVE-2019-15218Medium 4.6An issue was discovered in the Linux kernel before 5.1.8.
Assigned by mitre
Aug 19, 2019
CVE-2019-15217Medium 4.6An issue was discovered in the Linux kernel before 5.2.3.
Assigned by mitre
Aug 19, 2019
CVE-2019-3963
Healthcare
Medium 6.1In OpenEMR 5.0.1 and earlier, controller.php contains a reflected XSS vulnerability in the patient_id parameter.
Assigned by tenable
Aug 20, 2019
CVE-2019-3964
Healthcare
Medium 6.1In OpenEMR 5.0.1 and earlier, controller.php contains a reflected XSS vulnerability in the doc_id parameter.
Assigned by tenable
Aug 20, 2019
CVE-2019-3965
Healthcare
Medium 6.1In OpenEMR 5.0.1 and earlier, controller.php contains a reflected XSS vulnerability in the document_id parameter.
Assigned by tenable
Aug 20, 2019
CVE-2019-3966
Healthcare
Medium 6.1In OpenEMR 5.0.1 and earlier, controller.php contains a reflected XSS vulnerability in the foreign_id parameter.
Assigned by tenable
Aug 20, 2019
CVE-2019-3967
Healthcare
Medium 6.5In OpenEMR 5.0.1 and earlier, the patient file download interface contains a directory traversal flaw that allows authenticated attackers to download arbitrary files from the host system.
Assigned by tenable
Aug 20, 2019
CVE-2019-3968
Healthcare
High 8.8In OpenEMR 5.0.1 and earlier, an authenticated attacker can execute arbitrary commands on the host system via the Scanned Forms interface when creating a new form.
Assigned by tenable
Aug 20, 2019
CVE-2019-10086
Healthcare
High 7.3In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Ja…
Assigned by apache
Aug 20, 2019
CVE-2019-15752
Known exploited
High 7.8Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\DockerDesktop\version-bin\ as a low…
Assigned by mitre
Aug 28, 2019
CVE-2019-15807Medium 4.7In the Linux kernel before 5.1.13, there is a memory leak in drivers/scsi/libsas/sas_expander.c when SAS expander discovery fails.
Assigned by mitre
Aug 29, 2019
CVE-2019-13608
Known exploited
High 7.5Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 (3.12.4000), and 7.6 LTSR before CU8 (3.0.8000) allows XXE attacks.
Assigned by mitre
Aug 29, 2019
PreviousPage 22 of 2,029Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.