|
222111
|
5.5 |
MEDIUM
Local
|
xen debian
|
xen debian_linux
|
An issue was discovered in Xen through 4.12.x allowing Arm domU attackers to cause a denial of service (infinite loop) involving a compare-and-exchange operation.
|
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
|
CVE-2019-17350
|
2024-11-21 13:32 |
2019-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222112
|
7.2 |
HIGH
Network
|
sugarcrm
|
sugarcrm
|
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the Configurator module by an Admin user.
|
CWE-22
Path Traversal
|
CVE-2019-17314
|
2024-11-21 13:32 |
2019-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222113
|
8.8 |
HIGH
Network
|
sugarcrm
|
sugarcrm
|
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the Studio module by a Developer user.
|
CWE-22
Path Traversal
|
CVE-2019-17313
|
2024-11-21 13:32 |
2019-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222114
|
8.8 |
HIGH
Network
|
sugarcrm
|
sugarcrm
|
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the file function by a Regular user.
|
CWE-22
Path Traversal
|
CVE-2019-17312
|
2024-11-21 13:32 |
2019-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222115
|
8.8 |
HIGH
Network
|
sugarcrm
|
sugarcrm
|
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the attachment function by a Regular user.
|
CWE-22
Path Traversal
|
CVE-2019-17311
|
2024-11-21 13:32 |
2019-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222116
|
7.2 |
HIGH
Network
|
sugarcrm
|
sugarcrm
|
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Campaigns module by an Admin user.
|
CWE-94
Code Injection
|
CVE-2019-17310
|
2024-11-21 13:32 |
2019-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222117
|
7.2 |
HIGH
Network
|
sugarcrm
|
sugarcrm
|
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the EmailMan module by an Admin user.
|
CWE-94
Code Injection
|
CVE-2019-17309
|
2024-11-21 13:32 |
2019-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222118
|
8.8 |
HIGH
Network
|
sugarcrm
|
sugarcrm
|
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Emails module by a Regular user.
|
CWE-94
Code Injection
|
CVE-2019-17308
|
2024-11-21 13:32 |
2019-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222119
|
7.2 |
HIGH
Network
|
sugarcrm
|
sugarcrm
|
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Tracker module by an Admin user.
|
CWE-94
Code Injection
|
CVE-2019-17307
|
2024-11-21 13:32 |
2019-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222120
|
7.2 |
HIGH
Network
|
sugarcrm
|
sugarcrm
|
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Configurator module by an Admin user.
|
CWE-94
Code Injection
|
CVE-2019-17306
|
2024-11-21 13:32 |
2019-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|