|
224801
|
6.5 |
MEDIUM
Adjacent
|
august
|
august_home connect_wi-fi_bridge_firmware
|
Use of hard-coded cryptographic key vulnerability in August Connect Wi-Fi Bridge App, Connect Firmware allows an attacker to decrypt an intercepted payload containing the Wi-Fi network authentication…
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2019-17098
|
2024-11-21 13:31 |
2020-09-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224802
|
7.8 |
HIGH
Local
|
ivanti
|
workspace_control
|
In Ivanti WorkSpace Control before 10.4.40.0, a user can elevate rights on the system by hijacking certain user registries. This is possible because pwrgrid.exe first checks the Current User registry…
|
CWE-269
Improper Privilege Management
|
CVE-2019-17066
|
2024-11-21 13:31 |
2020-05-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224803
|
6.7 |
MEDIUM
Local
|
netatmo
|
smart_indoor_camera_firmware
|
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in firmware versions prior to x.xx of Netatmo Smart Indoor Camera allows an attacker to execute comma…
|
CWE-77
Command Injection
|
CVE-2019-17101
|
2024-11-21 13:31 |
2020-04-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224804
|
9.8 |
CRITICAL
Network
|
mysyngeryss
|
husky_rtu_6049-e70_firmware
|
The Synergy Systems & Solutions (SSS) HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has a Missing Authentication for Critical Function (CWE-306) vulnerability. The affected product does n…
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2019-16879
|
2024-11-21 13:31 |
2020-04-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224805
|
6.1 |
MEDIUM
Network
|
mageewp
|
onetone
|
includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress has multiple stored XSS issues.
|
CWE-79
Cross-site Scripting
|
CVE-2019-17231
|
2024-11-21 13:31 |
2020-04-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224806
|
5.3 |
MEDIUM
Network
|
mageewp
|
onetone
|
includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress allows unauthenticated options changes.
|
NVD-CWE-noinfo
|
CVE-2019-17230
|
2024-11-21 13:31 |
2020-04-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224807
|
7.5 |
HIGH
Network
|
freeradius opensuse
|
freeradius leap
|
In FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a global OpenSSL BN_CTX instance to handle all handshakes. This mean multiple threads use the same BN_CTX instance concurrently, resulting i…
|
CWE-662
Improper Synchronization
|
CVE-2019-17185
|
2024-11-21 13:31 |
2020-03-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224808
|
8.8 |
HIGH
Network
|
mozilla canonical
|
firefox thunderbird firefox_esr ubuntu_linux
|
Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability aff…
|
CWE-843
Type Confusion
|
CVE-2019-17026
|
2024-11-21 13:31 |
2020-03-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224809
|
6.1 |
MEDIUM
Network
|
stylemixthemes
|
motors_-_car_dealer\ _classifieds_\&_listing
|
includes/options.php in the motors-car-dealership-classified-listings (aka Motors - Car Dealer & Classified Ads) plugin through 1.4.0 for WordPress has multiple stored XSS issues.
|
CWE-79
Cross-site Scripting
|
CVE-2019-17229
|
2024-11-21 13:31 |
2020-02-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224810
|
6.5 |
MEDIUM
Network
|
stylemixthemes
|
motors_-_car_dealer\ _classifieds_\&_listing
|
includes/options.php in the motors-car-dealership-classified-listings (aka Motors - Car Dealer & Classified Ads) plugin through 1.4.0 for WordPress allows unauthenticated options changes.
|
CWE-345
Insufficient Verification of Data Authenticity
|
CVE-2019-17228
|
2024-11-21 13:31 |
2020-02-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|