|
212771
|
4.9 |
MEDIUM
Network
|
onefilecms
|
onefilecms
|
OneFileCMS 3.6.13 allows remote attackers to modify onefilecms.php by clicking the Copy button twice.
|
NVD-CWE-noinfo
|
CVE-2019-8408
|
2024-11-21 13:49 |
2019-02-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212772
|
6.5 |
MEDIUM
Network
|
hongcms_project
|
hongcms
|
HongCMS 3.0.0 allows arbitrary file read and write operations via a ../ in the filename parameter to the admin/index.php/language/edit URI.
|
CWE-22
Path Traversal
|
CVE-2019-8407
|
2024-11-21 13:49 |
2019-02-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212773
|
9.8 |
CRITICAL
Network
|
hotels_server_project
|
hotels_server
|
Hotels_Server through 2018-11-05 has SQL Injection via the API because the controller/api/login.php telephone parameter is mishandled.
|
CWE-89
SQL Injection
|
CVE-2019-8393
|
2024-11-21 13:49 |
2019-02-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212774
|
6.1 |
MEDIUM
Network
|
ory
|
hydra
|
ORY Hydra before v1.0.0-rc.3+oryOS.9 has Reflected XSS via the oauth2/fallbacks/error error_hint parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2019-8400
|
2024-11-21 13:49 |
2019-02-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212775
|
6.5 |
MEDIUM
Network
|
hdfgroup
|
hdf5
|
An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5T_get_size in H5T.c.
|
CWE-125
Out-of-bounds Read
|
CVE-2019-8398
|
2024-11-21 13:49 |
2019-02-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212776
|
6.5 |
MEDIUM
Network
|
hdfgroup
|
hdf5
|
An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5T_close_real in H5T.c.
|
CWE-125
Out-of-bounds Read
|
CVE-2019-8397
|
2024-11-21 13:49 |
2019-02-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212777
|
6.5 |
MEDIUM
Network
|
hdfgroup
|
hdf5
|
A buffer overflow in H5O__layout_encode in H5Olayout.c in the HDF HDF5 through 1.10.4 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while rep…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2019-8396
|
2024-11-21 13:49 |
2019-02-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212778
|
9.8 |
CRITICAL
Network
|
zohocorp
|
manageengine_servicedesk_plus
|
An Insecure Direct Object Reference (IDOR) vulnerability exists in Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10007 via an attachment to a request.
|
CWE-22 CWE-706
Path Traversal Use of Incorrectly-Resolved Name or Reference
|
CVE-2019-8395
|
2024-11-21 13:49 |
2019-02-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212779
|
6.5 |
MEDIUM
Network
|
zohocorp
|
manageengine_servicedesk_plus
|
Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10012 allows remote attackers to upload arbitrary files via login page customization.
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2019-8394
|
2024-11-21 13:49 |
2019-02-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212780
|
7.5 |
HIGH
Network
|
dlink
|
dir-823g_firmware
|
An issue was discovered on D-Link DIR-823G devices with firmware 1.02B03. There is incorrect access control allowing remote attackers to enable Guest Wi-Fi via the SetWLanRadioSettings HNAP API to th…
|
NVD-CWE-noinfo
|
CVE-2019-8392
|
2024-11-21 13:49 |
2019-02-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|