|
223441
|
7.8 |
HIGH
Local
|
git-scm debian fedoraproject opensuse
|
git debian_linux fedora leap
|
Arbitrary command execution is possible in Git before 2.20.2, 2.21.x before 2.21.1, 2.22.x before 2.22.2, 2.23.x before 2.23.1, and 2.24.x before 2.24.1 because a "git submodule update" operation can…
|
CWE-78 CWE-862
OS Command Missing Authorization
|
CVE-2019-19604
|
2024-11-21 13:35 |
2019-12-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223442
|
6.1 |
MEDIUM
Network
|
jetbrains
|
ktor
|
In Ktor through 1.2.6, the client resends data from the HTTP Authorization header to a redirect location.
|
CWE-601
Open Redirect
|
CVE-2019-19703
|
2024-11-21 13:35 |
2019-12-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223443
|
7.5 |
HIGH
Network
|
modoboa
|
modoboa-dmarc
|
The modoboa-dmarc plugin 1.1.0 for Modoboa is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this to perform a denial of service…
|
CWE-611
XXE
|
CVE-2019-19702
|
2024-11-21 13:35 |
2019-12-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223444
|
6.5 |
MEDIUM
Network
|
libwav_project
|
libwav
|
marc-q libwav through 2017-04-20 has a NULL pointer dereference in wav_content_read() at libwav.c.
|
CWE-476
NULL Pointer Dereference
|
CVE-2019-19698
|
2024-11-21 13:35 |
2019-12-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223445
|
9.8 |
CRITICAL
Network
|
sqlite siemens tenable oracle netapp
|
sqlite sinec_infrastructure_network_services tenable.sc mysql_workbench cloud_backup ontap_select_deploy_administration_utility
|
pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns.
|
CWE-754
Improper Check for Unusual or Exceptional Conditions
|
CVE-2019-19646
|
2024-11-21 13:35 |
2019-12-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223446
|
7.5 |
HIGH
Network
|
sqlite oracle siemens apache netapp
|
sqlite mysql_workbench sinec_infrastructure_network_services guacamole cloud_backup ontap_select_deploy_administration_utility
|
SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash.
|
NVD-CWE-noinfo
|
CVE-2019-19603
|
2024-11-21 13:35 |
2019-12-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223447
|
8.8 |
HIGH
Network
|
openstack
|
keystone
|
OpenStack Keystone 15.0.0 and 16.0.0 is affected by Data Leakage in the list credentials API. Any user with a role on a project is able to list any credentials with the /v3/credentials API when enfor…
|
CWE-522
Insufficiently Protected Credentials
|
CVE-2019-19687
|
2024-11-21 13:35 |
2019-12-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223448
|
8.8 |
HIGH
Network
|
nopcommerce
|
nopcommerce
|
RoxyFileman, as shipped with nopCommerce v4.2.0, is vulnerable to CSRF because GET requests can be used for renames and deletions.
|
CWE-352
Origin Validation Error
|
CVE-2019-19685
|
2024-11-21 13:35 |
2019-12-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223449
|
8.8 |
HIGH
Network
|
nopcommerce
|
nopcommerce
|
nopCommerce v4.2.0 allows privilege escalation via file upload in Presentation/Nop.Web/Admin/Areas/Controllers/PluginController.cs via Admin/FacebookAuthentication/Configure because it is possible to…
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2019-19684
|
2024-11-21 13:35 |
2019-12-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223450
|
9.1 |
CRITICAL
Network
|
nopcommerce
|
nopcommerce
|
RoxyFileman, as shipped with nopCommerce v4.2.0, is vulnerable to ../ path traversal via d or f to Admin/RoxyFileman/ProcessRequest because of Libraries/Nop.Services/Media/RoxyFileman/FileRoxyFileman…
|
CWE-22
Path Traversal
|
CVE-2019-19683
|
2024-11-21 13:35 |
2019-12-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|