CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 23/04/2019 |
| CVE-2019-2697 | HOCH8.1 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE: 7u211 and 8u202. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability ca | 23/04/2019 |
| CVE-2019-2684 | MITTEL5.9 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to comprom | 23/04/2019 |
| CVE-2019-2602 | HOCH7.5 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to com | 23/04/2019 |
| CVE-2018-7118 | HOCH7.8 | A local access restriction bypass vulnerability was identified in HPE Service Pack for ProLiant (SPP) Bundled Software earlier than version 2018.09.0. | 09/04/2019 |
| CVE-2017-2752 | NIEDRIG2.1 | A potential security vulnerability caused by incomplete obfuscation of application configuration information was discovered in Tommy Hilfiger TH24/7 Android app versions 2.0.0.11, 2.0.1.14, 2.1.0.16, and 2.2.0.19. HP has no access to customer data as a result of this issue. | 27/03/2019 |
| CVE-2017-2748 | HOCH7.5 | A potential security vulnerability caused by the use of insecure (http) transactions during login has been identified with early versions of the Isaac Mizrahi Smartwatch mobile app. HP has no access to customer data as a result of this issue. | 27/03/2019 |
| CVE-2018-5927 | HOCH7.3 | HP Support Assistant before 8.7.50.3 allows an unauthorized person with local access to load arbitrary code. | 27/03/2019 |
| CVE-2018-5926 | KRITISCH9.1 | A potential vulnerability has been identified in HP Remote Graphics Software’s certificate authentication process version 7.5.0 and earlier. | 27/03/2019 |
| CVE-2019-3484 | HOCH7.8 | Mitigates a remote code execution issue in ArcSight Logger versions prior to 6.7. | 25/03/2019 |
| CVE-2019-3483 | MITTEL6.5 | Mitigates a potential information leakage issue in ArcSight Logger versions prior to 6.7. | 25/03/2019 |
| CVE-2019-3482 | MITTEL6.5 | Mitigates a directory traversal issue in ArcSight Logger versions prior to 6.7. | 25/03/2019 |
| CVE-2019-3481 | HOCH7.1 | Mitigates a XML External Entity Parsing issue in ArcSight Logger versions prior to 6.7. | 25/03/2019 |
| CVE-2019-3480 | MITTEL6.1 | Mitigates a stored/reflected XSS issue in ArcSight Logger versions prior to 6.7. | 25/03/2019 |
| CVE-2019-3479 | KRITISCH9.8 | Mitigates a potential remote code execution issue in ArcSight Logger versions prior to 6.7. | 25/03/2019 |
| CVE-2018-15532 | NIEDRIG3.8 | SynTP.sys in Synaptics Touchpad drivers before 2018-06-06 allows local users to obtain sensitive information about freed kernel addresses. | 21/03/2019 |
| CVE-2019-7317 | MITTEL5.3 | png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute. | 04/02/2019 |
| CVE-2019-2426 | NIEDRIG3.7 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1; Java SE Embedded: 8u191. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Su | 16/01/2019 |