|
222701
|
8.8 |
HIGH
Network
|
bludit
|
bludit
|
Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .jpg file name, and then this PHP code can write other PHP code to a ../ pathname.
|
CWE-22
Path Traversal
|
CVE-2019-16113
|
2024-11-21 13:30 |
2019-09-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222702
|
5.3 |
MEDIUM
Network
|
plataformatec
|
devise
|
An issue was discovered in Plataformatec Devise before 4.7.1. It confirms accounts upon receiving a request with a blank confirmation_token, if a database record has a blank value in the confirmation…
|
NVD-CWE-noinfo
|
CVE-2019-16109
|
2024-11-21 13:30 |
2019-09-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222703
|
4.9 |
MEDIUM
Network
|
silver-peak
|
unity_edgeconnect_sd-wan_firmware
|
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows ..%2f directory traversal via a rest/json/configdb/download/ URI.
|
CWE-22
Path Traversal
|
CVE-2019-16105
|
2024-11-21 13:30 |
2019-09-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222704
|
6.1 |
MEDIUM
Network
|
silver-peak
|
unity_edgeconnect_sd-wan_firmware
|
Silver Peak EdgeConnect SD-WAN before 8.1.7.x has reflected XSS via the rest/json/configdb/download/ PATH_INFO.
|
CWE-79
Cross-site Scripting
|
CVE-2019-16104
|
2024-11-21 13:30 |
2019-09-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222705
|
7.2 |
HIGH
Network
|
silver-peak
|
unity_edgeconnect_sd-wan_firmware
|
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows privilege escalation (by administrators) from the menu to a root Bash OS shell via the spsshell feature.
|
NVD-CWE-noinfo
|
CVE-2019-16103
|
2024-11-21 13:30 |
2019-09-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222706
|
9.8 |
CRITICAL
Network
|
silver-peak
|
unity_edgeconnect_sd-wan_firmware
|
Silver Peak EdgeConnect SD-WAN before 8.1.7.x has an SNMP service with a public value for rocommunity and trapcommunity.
|
CWE-1188
Insecure Default Initialization of Resource
|
CVE-2019-16102
|
2024-11-21 13:30 |
2019-09-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222707
|
5.3 |
MEDIUM
Network
|
silver-peak
|
unity_edgeconnect_sd-wan_firmware
|
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to obtain potentially sensitive stack traces by sending incorrect JSON data to the REST API, such as the rest/json/banners URI.
|
CWE-209
Information Exposure Through an Error Message
|
CVE-2019-16101
|
2024-11-21 13:30 |
2019-09-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222708
|
7.5 |
HIGH
Network
|
silver-peak
|
unity_edgeconnect_sd-wan_firmware
|
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to trigger a web-interface outage via slow client-side HTTP traffic from a single source.
|
NVD-CWE-noinfo
|
CVE-2019-16100
|
2024-11-21 13:30 |
2019-09-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222709
|
8.8 |
HIGH
Network
|
silver-peak
|
unity_edgeconnect_sd-wan_firmware
|
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows CSRF via JSON data to a .swf file.
|
CWE-352
Origin Validation Error
|
CVE-2019-16099
|
2024-11-21 13:30 |
2019-09-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222710
|
6.5 |
MEDIUM
Network
|
linuxfoundation
|
harbor
|
core/api/user.go in Harbor 1.7.0 through 1.8.2 allows non-admin users to create admin accounts via the POST /api/users API, when Harbor is setup with DB as authentication backend and allow user to do…
|
CWE-862
Missing Authorization
|
CVE-2019-16097
|
2024-11-21 13:30 |
2019-09-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|