|
224901
|
5.3 |
MEDIUM
Network
|
yandex
|
clickhouse
|
ClickHouse before 19.13.5.44 allows HTTP header injection via the url table function.
|
CWE-74
Injection
|
CVE-2019-18657
|
2024-11-21 13:33 |
2019-11-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224902
|
6.1 |
MEDIUM
Network
|
pimcore
|
pimcore
|
Pimcore 6.2.3 has XSS in the translations grid because bundles/AdminBundle/Resources/public/js/pimcore/settings/translations.js mishandles certain HTML elements.
|
CWE-79
Cross-site Scripting
|
CVE-2019-18656
|
2024-11-21 13:33 |
2019-11-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224903
|
9.8 |
CRITICAL
Network
|
ipswitch
|
moveit_transfer
|
In Progress MOVEit Transfer 11.1 before 11.1.3, a vulnerability has been found that could allow an attacker to sign in without full credentials via the SSH (SFTP) interface. The vulnerability affects…
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2019-18465
|
2024-11-21 13:33 |
2019-11-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224904
|
9.8 |
CRITICAL
Network
|
ipswitch
|
moveit_transfer
|
In Progress MOVEit Transfer 10.2 before 10.2.6 (2018.3), 11.0 before 11.0.4 (2019.0.4), and 11.1 before 11.1.3 (2019.1.3), multiple SQL Injection vulnerabilities have been found in the REST API that …
|
CWE-89
SQL Injection
|
CVE-2019-18464
|
2024-11-21 13:33 |
2019-11-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224905
|
5.3 |
MEDIUM
Network
|
jetbrains
|
youtrack
|
In JetBrains YouTrack before 2019.2.55152, removing tags from the issues list without the corresponding permission was possible.
|
CWE-276
Incorrect Default Permissions
|
CVE-2019-18369
|
2024-11-21 13:33 |
2019-11-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224906
|
7.3 |
HIGH
Network
|
jetbrains
|
toolbox
|
In JetBrains Toolbox App before 1.15.5666 for Windows, privilege escalation was possible.
|
NVD-CWE-noinfo
|
CVE-2019-18368
|
2024-11-21 13:33 |
2019-11-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224907
|
5.3 |
MEDIUM
Network
|
jetbrains
|
teamcity
|
In JetBrains TeamCity before 2019.1.2, a non-destructive operation could be performed by a user without the corresponding permissions.
|
CWE-276
Incorrect Default Permissions
|
CVE-2019-18367
|
2024-11-21 13:33 |
2019-11-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224908
|
5.3 |
MEDIUM
Network
|
jetbrains
|
teamcity
|
In JetBrains TeamCity before 2019.1.2, secure values could be exposed to users with the "View build runtime parameters and data" permission.
|
CWE-276
Incorrect Default Permissions
|
CVE-2019-18366
|
2024-11-21 13:33 |
2019-11-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224909
|
4.3 |
MEDIUM
Network
|
jetbrains
|
teamcity
|
In JetBrains TeamCity before 2019.1.4, reverse tabnabbing was possible on several pages.
|
NVD-CWE-noinfo CWE-269
Improper Privilege Management
|
CVE-2019-18365
|
2024-11-21 13:33 |
2019-11-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224910
|
9.8 |
CRITICAL
Network
|
jetbrains
|
teamcity
|
In JetBrains TeamCity before 2019.1.4, insecure Java Deserialization could potentially allow remote code execution.
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2019-18364
|
2024-11-21 13:33 |
2019-11-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|