|
222531
|
6.5 |
MEDIUM
Network
|
eset
|
cyber_security
|
ESET Cyber Security before 6.8.1.0 is vulnerable to a denial-of-service allowing any user to stop (kill) ESET processes. An attacker can abuse this bug to stop the protection from ESET and launch his…
|
NVD-CWE-Other
|
CVE-2019-17549
|
2024-11-21 13:32 |
2020-03-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222532
|
7.5 |
HIGH
Network
|
moxa
|
iologik_2512_firmware iologik_2512-t_firmware iologik_2512-hspa_firmware iologik_2512-hspa-t_firmware iologik_2512-wl1-eu_firmware iologik_2512-wl1-eu-t_firmware iologik_2512-wl1-us…
|
In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, sensitive information is stored in configuration files without encryption, whic…
|
CWE-312
Cleartext Storage of Sensitive Information
|
CVE-2019-18238
|
2024-11-21 13:32 |
2020-02-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222533
|
9.8 |
CRITICAL
Network
|
netapp
|
oncommand_cloud_manager
|
OnCommand Cloud Manager versions prior to 3.8.0 are susceptible to arbitrary code execution by remote attackers.
|
NVD-CWE-noinfo
|
CVE-2019-17275
|
2024-11-21 13:32 |
2020-02-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222534
|
7.8 |
HIGH
Local
|
netapp
|
fabric-attached_storage_8700_firmware fabric-attached_storage_8300_firmware all_flash_fabric-attached_storage_a400_firmware
|
NetApp FAS 8300/8700 and AFF A400 Baseboard Management Controller (BMC) firmware versions 13.x prior to 13.1P1 were shipped with a default account enabled that could allow unauthorized arbitrary comm…
|
CWE-1188
Insecure Default Initialization of Resource
|
CVE-2019-17274
|
2024-11-21 13:32 |
2020-02-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222535
|
4.8 |
MEDIUM
Network
|
apache opensuse netapp debian oracle
|
tomcat tomee leap oncommand_system_manager data_availability_services debian_linux transportation_management hospitality_guest_access agile_plm instantis_enterprisetrack
|
The refactoring present in Apache Tomcat 9.0.28 to 9.0.30, 8.5.48 to 8.5.50 and 7.0.98 to 7.0.99 introduced a regression. The result of the regression was that invalid Transfer-Encoding headers were …
|
CWE-444
HTTP Request Smuggling
|
CVE-2019-17569
|
2024-11-21 13:32 |
2020-02-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222536
|
9.8 |
CRITICAL
Network
|
pacman_project fedoraproject
|
pacman fedora
|
pacman before 5.2 is vulnerable to arbitrary command injection in lib/libalpm/sync.c in the apply_deltas() function. This can be exploited when unsigned databases are used. To exploit the vulnerabili…
|
CWE-78
OS Command
|
CVE-2019-18183
|
2024-11-21 13:32 |
2020-02-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222537
|
9.8 |
CRITICAL
Network
|
pacman_project fedoraproject
|
pacman fedora
|
pacman before 5.2 is vulnerable to arbitrary command injection in conf.c in the download_with_xfercommand() function. This can be exploited when unsigned databases are used. To exploit the vulnerabil…
|
CWE-78
OS Command
|
CVE-2019-18182
|
2024-11-21 13:32 |
2020-02-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222538
|
5.4 |
MEDIUM
Network
|
tibco
|
ebx
|
The Web server component of TIBCO Software Inc.'s TIBCO EBX contains a vulnerability that theoretically allows authenticated users to perform stored cross-site scripting (XSS) attacks. Affected relea…
|
CWE-79
Cross-site Scripting
|
CVE-2019-17333
|
2024-11-21 13:32 |
2020-02-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222539
|
8.8 |
HIGH
Adjacent
|
nxp
|
mcuxpresso_software_development_kit
|
The Bluetooth Low Energy implementation on NXP SDK through 2.2.1 for KW41Z devices does not properly restrict the Link Layer payload length, allowing attackers in radio range to cause a buffer overfl…
|
CWE-120
Classic Buffer Overflow
|
CVE-2019-17519
|
2024-11-21 13:32 |
2020-02-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222540
|
5.4 |
MEDIUM
Network
|
moodle
|
moodle
|
Persistent XSS in /course/modedit.php of Moodle through 3.7.2 allows authenticated users (Teacher and above) to inject JavaScript into the session of another user (e.g., enrolled student or site admi…
|
CWE-79
Cross-site Scripting
|
CVE-2019-18210
|
2024-11-21 13:32 |
2020-02-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|