CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 20/02/2019 |
| CVE-2019-3474 | MÉDIO6.5 | A path traversal vulnerability in the web application component of Micro Focus Filr 3.x allows a remote attacker authenticated as a low privilege user to download arbitrary files from the Filr server. This vulnerability affects all versions of Filr 3.x prior to Security Update 6. | 20/02/2019 |
| CVE-2018-19645 | CRÍTICO9.8 | An Authentication Bypass issue exists in Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5. | 12/02/2019 |
| CVE-2019-5736 | ALTO8.6 | runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, | 11/02/2019 |
| CVE-2018-7691 | MÉDIO6.5 | A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center (SSC), versions 17.10, 17.20, 18.10 this exploitation could allow Remote Unauthorized Access | 13/12/2018 |
| CVE-2018-7690 | MÉDIO6.5 | A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center (SSC), versions 17.10, 17.20, 18.10 this exploitation could allow Remote Unauthorized Access | 13/12/2018 |
| CVE-2018-17952 | MÉDIO6.1 | Cross site scripting vulnerability in eDirectory prior to 9.1 SP2 | 12/12/2018 |
| CVE-2018-17950 | ALTO7.5 | Incorrect enforcement of authorization checks in eDirectory prior to 9.1 SP2 | 12/12/2018 |
| CVE-2018-17949 | MÉDIO6.1 | Cross site scripting vulnerability in iManager prior to 3.1 SP2. | 12/12/2018 |
| CVE-2009-5153 | CRÍTICO9.8 | In Novell NetWare before 6.5 SP8, a stack buffer overflow in processing of CALLIT RPC calls in the NFS Portmapper daemon in PKERNEL.NLM allowed remote unauthenticated attackers to execute code, because a length field was incorrectly trusted. | 21/11/2018 |
| CVE-2018-17948 | MÉDIO6.1 | An open redirect vulnerability exists in the Access Manager Identity Provider prior to 4.4 SP3. | 20/11/2018 |
| CVE-2018-12480 | MÉDIO6.1 | Mitigates an XSS issue in NetIQ Access Manager versions prior to 4.4 SP3. | 15/11/2018 |
| CVE-2018-18591 | MÉDIO6.5 | A potential unauthorized disclosure of data vulnerability has been identified in Micro Focus Service Manager versions: 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51. The vulnerability could be exploited to release unauthorized disclosure of data. | 13/11/2018 |
| CVE-2018-18590 | ALTO8.8 | A potential remote code execution and information disclosure vulnerability exists in Micro Focus Operations Bridge containerized suite versions 2017.11, 2018.02, 2018.05, 2018.08. This vulnerability could allow for information disclosure. | 07/11/2018 |
| CVE-2018-18589 | ALTO8.8 | A potential Remote Arbitrary Code Execution vulnerability has been identified in Micro Focus' Real User Monitoring software, versions 9.26IP, 9.30, 9.40 and 9.50. The vulnerability could be exploited to execute arbitrary code. | 23/10/2018 |
| CVE-2018-12469 | ALTO7.5 | Incorrect handling of an invalid value for an HTTP request parameter by Directory Server (aka Enterprise Server Administration web UI) in Micro Focus Enterprise Developer and Enterprise Server 2.3 Update 2 and earlier, 3.0 before Patch Update 12, and 4.0 before Patch Update 2 causes a null pointer dereference (CWE-476) | 12/10/2018 |
| CVE-2018-6504 | ALTO8.8 | A potential Cross-Site Request Forgery (CSRF) vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be exploited to allow for Cross-Site Request Forgery (CSRF). | 20/09/2018 |