|
213831
|
7.8 |
HIGH
Local
|
autodesk
|
advance_steel autocad autocad_architecture autocad_electrical autocad_lt autocad_map_3d autocad_mechanical autocad_mep autocad_p\&id autocad_plant_3d civil_3d
|
An attacker may convince a victim to open a malicious action micro (.actm) file that has serialized data, which may trigger a code execution in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Aut…
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2019-7361
|
2024-11-21 13:48 |
2019-04-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213832
|
7.8 |
HIGH
Local
|
autodesk
|
advance_steel autocad autocad_architecture autocad_electrical autocad_lt autocad_map_3d autocad_mechanical autocad_mep autocad_p\&id autocad_plant_3d civil_3d
|
An exploitable use-after-free vulnerability in the DXF-parsing functionality in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 201…
|
CWE-416
Use After Free
|
CVE-2019-7360
|
2024-11-21 13:48 |
2019-04-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213833
|
7.8 |
HIGH
Local
|
autodesk
|
advance_steel autocad autocad_architecture autocad_electrical autocad_lt autocad_map_3d autocad_mechanical autocad_mep autocad_p\&id autocad_plant_3d civil_3d
|
An exploitable heap overflow vulnerability in the AcCellMargin handling code in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 201…
|
CWE-787
Out-of-bounds Write
|
CVE-2019-7359
|
2024-11-21 13:48 |
2019-04-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213834
|
7.8 |
HIGH
Local
|
autodesk
|
advance_steel autocad autocad_architecture autocad_electrical autocad_lt autocad_map_3d autocad_mechanical autocad_mep autocad_p\&id autocad_plant_3d civil_3d
|
An exploitable heap overflow vulnerability in the DXF-parsing functionality in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018…
|
CWE-787
Out-of-bounds Write
|
CVE-2019-7358
|
2024-11-21 13:48 |
2019-04-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213835
|
7.5 |
HIGH
Network
|
sonicwall
|
sonicos sonicosv
|
A vulnerability in SonicWall SonicOS and SonicOSv TLS CBC Cipher allow remote attackers to obtain sensitive plaintext data when CBC cipher suites are enabled. This vulnerability affected SonicOS Gen …
|
CWE-327
Use of a Broken or Risky Cryptographic Algorithm
|
CVE-2019-7477
|
2024-11-21 13:48 |
2019-04-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213836
|
9.8 |
CRITICAL
Network
|
sonicwall
|
sonicos sonicosv
|
A vulnerability in SonicWall SonicOS and SonicOSv with management enabled system on specific configuration allow unprivileged user to access advanced routing services. This vulnerability affected Son…
|
NVD-CWE-Other
|
CVE-2019-7475
|
2024-11-21 13:48 |
2019-04-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213837
|
6.5 |
MEDIUM
Network
|
sonicwall
|
sonicos sonicosv
|
A vulnerability in SonicWall SonicOS and SonicOSv, allow authenticated read-only admin to leave the firewall in an unstable state by downloading certificate with specific extension. This vulnerabilit…
|
CWE-755
Improper Handling of Exceptional Conditions
|
CVE-2019-7474
|
2024-11-21 13:48 |
2019-04-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213838
|
7.8 |
HIGH
Local
|
dovecot debian canonical opensuse
|
dovecot debian_linux ubuntu_linux leap
|
In Dovecot before 2.2.36.3 and 2.3.x before 2.3.5.1, a local attacker can cause a buffer overflow in the indexer-worker process, which can be used to elevate to root. This occurs because of missing c…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2019-7524
|
2024-11-21 13:48 |
2019-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213839
|
4.8 |
MEDIUM
Network
|
control-webpanel
|
webpanel
|
CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.763 is vulnerable to Stored/Persistent XSS for the "Package Name" field via the add_package module parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2019-7646
|
2024-11-21 13:48 |
2019-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213840
|
7.5 |
HIGH
Network
|
ghs
|
integrity_rtos
|
An issue was discovered in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. The main shell handler function uses the value of the environment variable ipcom.shell.greeting …
|
CWE-134
Use of Externally-Controlled Format String
|
CVE-2019-7715
|
2024-11-21 13:48 |
2019-03-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|