CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 23/04/2019 |
| CVE-2019-2697 | 高危8.1 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE: 7u211 and 8u202. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability ca | 23/04/2019 |
| CVE-2019-2684 | 中危5.9 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to comprom | 23/04/2019 |
| CVE-2019-2602 | 高危7.5 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to com | 23/04/2019 |
| CVE-2018-7118 | 高危7.8 | A local access restriction bypass vulnerability was identified in HPE Service Pack for ProLiant (SPP) Bundled Software earlier than version 2018.09.0. | 09/04/2019 |
| CVE-2017-2752 | 低危2.1 | A potential security vulnerability caused by incomplete obfuscation of application configuration information was discovered in Tommy Hilfiger TH24/7 Android app versions 2.0.0.11, 2.0.1.14, 2.1.0.16, and 2.2.0.19. HP has no access to customer data as a result of this issue. | 27/03/2019 |
| CVE-2017-2748 | 高危7.5 | A potential security vulnerability caused by the use of insecure (http) transactions during login has been identified with early versions of the Isaac Mizrahi Smartwatch mobile app. HP has no access to customer data as a result of this issue. | 27/03/2019 |
| CVE-2018-5927 | 高危7.3 | HP Support Assistant before 8.7.50.3 allows an unauthorized person with local access to load arbitrary code. | 27/03/2019 |
| CVE-2018-5926 | 严重9.1 | A potential vulnerability has been identified in HP Remote Graphics Software’s certificate authentication process version 7.5.0 and earlier. | 27/03/2019 |
| CVE-2019-3484 | 高危7.8 | Mitigates a remote code execution issue in ArcSight Logger versions prior to 6.7. | 25/03/2019 |
| CVE-2019-3483 | 中危6.5 | Mitigates a potential information leakage issue in ArcSight Logger versions prior to 6.7. | 25/03/2019 |
| CVE-2019-3482 | 中危6.5 | Mitigates a directory traversal issue in ArcSight Logger versions prior to 6.7. | 25/03/2019 |
| CVE-2019-3481 | 高危7.1 | Mitigates a XML External Entity Parsing issue in ArcSight Logger versions prior to 6.7. | 25/03/2019 |
| CVE-2019-3480 | 中危6.1 | Mitigates a stored/reflected XSS issue in ArcSight Logger versions prior to 6.7. | 25/03/2019 |
| CVE-2019-3479 | 严重9.8 | Mitigates a potential remote code execution issue in ArcSight Logger versions prior to 6.7. | 25/03/2019 |
| CVE-2018-15532 | 低危3.8 | SynTP.sys in Synaptics Touchpad drivers before 2018-06-06 allows local users to obtain sensitive information about freed kernel addresses. | 21/03/2019 |
| CVE-2019-7317 | 中危5.3 | png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute. | 04/02/2019 |
| CVE-2019-2426 | 低危3.7 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1; Java SE Embedded: 8u191. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Su | 16/01/2019 |