|
222521
|
9.8 |
CRITICAL
Network
|
centreon
|
centreon
|
SQL injection vulnerabilities in Centreon through 19.04 allow attacks via the svc_id parameter in include/monitoring/status/Services/xml/makeXMLForOneService.php.
|
CWE-89
SQL Injection
|
CVE-2019-16194
|
2024-11-21 13:30 |
2019-09-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222522
|
9.8 |
CRITICAL
Network
|
suricata-ids
|
suricata
|
An issue was discovered in Suricata 4.1.4. By sending multiple IPv4 packets that have invalid IPv4Options, the function IPV4OptValidateTimestamp in decode-ipv4.c tries to access a memory region that …
|
CWE-125
Out-of-bounds Read
|
CVE-2019-16411
|
2024-11-21 13:30 |
2019-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222523
|
9.1 |
CRITICAL
Network
|
suricata-ids
|
suricata
|
An issue was discovered in Suricata 4.1.4. By sending multiple fragmented IPv4 packets, the function Defrag4Reassemble in defrag.c tries to access a memory region that is not allocated, because of a …
|
CWE-125
Out-of-bounds Read
|
CVE-2019-16410
|
2024-11-21 13:30 |
2019-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222524
|
9.4 |
CRITICAL
Network
|
ipswitch
|
moveit_transfer
|
MOVEit.DMZ.WebApi.dll in Progress MOVEit Transfer 2018 SP2 before 10.2.4, 2019 before 11.0.2, and 2019.1 before 11.1.1 allows an unauthenticated attacker to gain unauthorized access to the database. …
|
CWE-89
SQL Injection
|
CVE-2019-16383
|
2024-11-21 13:30 |
2019-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222525
|
9.8 |
CRITICAL
Network
|
makandra
|
consul
|
The makandra consul gem through 1.0.2 for Ruby has Incorrect Access Control.
|
NVD-CWE-noinfo
|
CVE-2019-16377
|
2024-11-21 13:30 |
2019-09-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222526
|
4.3 |
MEDIUM
Adjacent
|
vandyvape
|
swell_kit_mod_firmware
|
An issue was discovered on Swell Kit Mod devices that use the Vandy Vape platform. An attacker may be able to trigger an unintended temperature in the victim's mouth and throat via Bluetooth Low Ener…
|
CWE-668
Exposure of Resource to Wrong Sphere
|
CVE-2019-16518
|
2024-11-21 13:30 |
2019-09-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222527
|
9.8 |
CRITICAL
Network
|
phpipam
|
phpipam
|
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter.php table parameter when action=add is used.
|
CWE-89
SQL Injection
|
CVE-2019-16695
|
2024-11-21 13:30 |
2019-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222528
|
9.8 |
CRITICAL
Network
|
phpipam
|
phpipam
|
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit-result.php table parameter when action=add is used.
|
CWE-89
SQL Injection
|
CVE-2019-16694
|
2024-11-21 13:30 |
2019-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222529
|
9.8 |
CRITICAL
Network
|
phpipam
|
phpipam
|
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/order.php table parameter when action=add is used.
|
CWE-89
SQL Injection
|
CVE-2019-16693
|
2024-11-21 13:30 |
2019-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222530
|
9.8 |
CRITICAL
Network
|
phpipam
|
phpipam
|
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter-result.php table parameter when action=add is used.
|
CWE-89
SQL Injection
|
CVE-2019-16692
|
2024-11-21 13:30 |
2019-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|