|
211331
|
7.8 |
HIGH
Local
|
trendmicro
|
officescan
|
A DLL side-loading vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow an authenticated attacker to gain code execution and terminate the product's process - disabling endpoint protec…
|
CWE-426
Untrusted Search Path
|
CVE-2019-9492
|
2024-11-21 13:51 |
2019-07-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211332
|
8.8 |
HIGH
Adjacent
|
audiocodes
|
median_500l-msbr_firmware median_500-msbr_firmware median_m800b-msbr_firmware median_800c-msbr_firmware
|
An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A to F7.20A.251. An internal interface exposed to the link-local addres…
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2019-9229
|
2024-11-21 13:51 |
2019-07-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211333
|
7.5 |
HIGH
Network
|
audiocodes
|
median_500l-msbr_firmware median_500-msbr_firmware median_m800b-msbr_firmware median_800c-msbr_firmware
|
An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A at least to 7.20A.252.062. The (1) management SSH and (2) management …
|
NVD-CWE-noinfo
|
CVE-2019-9228
|
2024-11-21 13:51 |
2019-07-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211334
|
8.8 |
HIGH
Network
|
audiocodes
|
mediant_500l-msbr_firmware mediant_500-mbsr_firmware mediant_m800b-msbr_firmware mediant_800c-msbr_firmware
|
An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions before 7.20A.202.307. A Cross-Site Request Forgery (CSRF) vulnerability in t…
|
CWE-352
Origin Validation Error
|
CVE-2019-9231
|
2024-11-21 13:51 |
2019-07-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211335
|
6.1 |
MEDIUM
Network
|
audiocodes
|
mediant_500l-msbr_firmware mediant_500-mbsr_firmware mediant_m800b-msbr_firmware mediant_800c-msbr_firmware
|
An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A to F7.20A.253. A cross-site scripting (XSS) vulnerability in the sear…
|
CWE-79
Cross-site Scripting
|
CVE-2019-9230
|
2024-11-21 13:51 |
2019-07-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211336
|
5.3 |
MEDIUM
Network
|
mailvelope
|
mailvelope
|
Mailvelope prior to 3.3.0 does not require user interaction to import public keys shown on web page. This functionality can be tricked to either hide a key import from the user or obscure which key w…
|
CWE-320
Key Management Errors
|
CVE-2019-9150
|
2024-11-21 13:51 |
2019-07-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211337
|
6.5 |
MEDIUM
Network
|
mailvelope
|
mailvelope
|
Mailvelope prior to 3.3.0 allows private key operations without user interaction via its client-API. By modifying an URL parameter in Mailvelope, an attacker is able to sign (and encrypt) arbitrary m…
|
CWE-347 CWE-863
Improper Verification of Cryptographic Signature Incorrect Authorization
|
CVE-2019-9149
|
2024-11-21 13:51 |
2019-07-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211338
|
4.3 |
MEDIUM
Network
|
mailvelope
|
mailvelope
|
Mailvelope prior to 3.3.0 accepts or operates with invalid PGP public keys: Mailvelope allows importing keys that contain users without a valid self-certification. Keys that are obviously invalid are…
|
CWE-295
Improper Certificate Validation
|
CVE-2019-9148
|
2024-11-21 13:51 |
2019-07-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211339
|
4.3 |
MEDIUM
Network
|
mailvelope
|
mailvelope
|
Mailvelope prior to 3.1.0 is vulnerable to a clickjacking attack against the settings page. As the settings page is intended to be accessible from web applications, the browser's extension isolation …
|
CWE-1021
Improper Restriction of Rendered UI Layers or Frames
|
CVE-2019-9147
|
2024-11-21 13:51 |
2019-07-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211340
|
9.8 |
CRITICAL
Network
|
jetbrains
|
intellij_idea
|
In several JetBrains IntelliJ IDEA versions, a Spring Boot run configuration with the default setting allowed remote attackers to execute code when the configuration is running, because a JMX server …
|
CWE-668
Exposure of Resource to Wrong Sphere
|
CVE-2019-9186
|
2024-11-21 13:51 |
2019-07-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|