CVE Browser

Today 86 Last 7 days 2,635 CISA KEV 1,734 Critical 42,416 All stats

Page 1

CVE-2019-18642 CRITICAL

Rock RMS version before 8.6 is vulnerable to account takeover by tampering with the user ID parameter in the profile update feature. The lack of validation and…

CVSS 9.8 EPSS 1.70% Jan 7, 2021

CVE-2019-18643 CRITICAL

Rock RMS versions before 8.10 and versions 9.0 through 9.3 fails to properly validate files uploaded in the application. The only protection mechanism is a fil…

CVSS 9.8 EPSS 4.28% Jan 7, 2021

CVE-2019-18641 CRITICAL

Rock RMS before 1.8.6 mishandles vCard access control within the People/GetVCard/REST controller.

CVSS 9.8 EPSS 3.43% Mar 20, 2020

CVE ID	Description	Severity	CVSS	EPSS	Published
CVE-2019-18642	Rock RMS version before 8.6 is vulnerable to account takeover by tampering with the user ID parameter in the profile update feature. The lack of validation and…	CRITICAL	9.8	1.70%	Jan 7, 2021
CVE-2019-18643	Rock RMS versions before 8.10 and versions 9.0 through 9.3 fails to properly validate files uploaded in the application. The only protection mechanism is a fil…	CRITICAL	9.8	4.28%	Jan 7, 2021
CVE-2019-18641	Rock RMS before 1.8.6 mishandles vCard access control within the People/GetVCard/REST controller.	CRITICAL	9.8	3.43%	Mar 20, 2020

Rows per page

Showing 1 to 3 CVEs · page 1