|
222741
|
7.5 |
HIGH
Network
|
ptarmigan_project
|
ptarmigan
|
Ptarmigan before 0.2.3 lacks API token validation, e.g., an "if (token === apiToken) {return true;} return false;" code block.
|
CWE-295
Improper Certificate Validation
|
CVE-2019-16281
|
2024-11-21 13:30 |
2020-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222742
|
6.8 |
MEDIUM
Physics
|
microchip
|
cryptoauthlib
|
Microchip CryptoAuthentication Library CryptoAuthLib prior to 20191122 has a Buffer Overflow (issue 1 of 2).
|
CWE-120
Classic Buffer Overflow
|
CVE-2019-16128
|
2024-11-21 13:30 |
2020-10-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222743
|
6.8 |
MEDIUM
Physics
|
microchip
|
cryptoauthlib
|
Microchip CryptoAuthentication Library CryptoAuthLib prior to 20191122 has a Buffer Overflow (issue 2 of 2).
|
CWE-120
Classic Buffer Overflow
|
CVE-2019-16129
|
2024-11-21 13:30 |
2020-10-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222744
|
9.1 |
CRITICAL
Network
|
microchip
|
advanced_software_framework_4
|
Atmel Advanced Software Framework (ASF) 4 has an Integer Overflow.
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2019-16127
|
2024-11-21 13:30 |
2020-10-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222745
|
7.5 |
HIGH
Network
|
mikrotik
|
routeros
|
An integer underflow in the SMB server of MikroTik RouterOS before 6.45.5 allows remote unauthenticated attackers to crash the service.
|
CWE-191
Integer Underflow (Wrap or Wraparound)
|
CVE-2019-16160
|
2024-11-21 13:30 |
2020-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222746
|
8.8 |
HIGH
Network
|
broadcom
|
brocade_sannav
|
A vulnerability in Brocade SANnav versions before v2.1.0 could allow a remote authenticated attacker to conduct an LDAP injection. The vulnerability could allow a remote attacker to bypass the authen…
|
NVD-CWE-Other
|
CVE-2019-16212
|
2024-11-21 13:30 |
2020-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222747
|
9.8 |
CRITICAL
Network
|
broadcom
|
brocade_sannav
|
Brocade SANnav versions before v2.1.0, contain a Plaintext Password Storage vulnerability.
|
CWE-522
Insufficiently Protected Credentials
|
CVE-2019-16211
|
2024-11-21 13:30 |
2020-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222748
|
9.8 |
CRITICAL
Network
|
pega
|
platform
|
Pega Platform 8.2.1 allows LDAP injection because a username can contain a * character and can be of unlimited length. An attacker can specify four characters of a username, followed by the * charact…
|
NVD-CWE-Other
|
CVE-2019-16374
|
2024-11-21 13:30 |
2020-08-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222749
|
9.8 |
CRITICAL
Network
|
openmicroscopy
|
omero.server
|
OMERO.server before 5.6.1 allows attackers to bypass the security filters and access hidden objects via a crafted query.
|
NVD-CWE-noinfo
|
CVE-2019-16244
|
2024-11-21 13:30 |
2020-07-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222750
|
8.8 |
HIGH
Network
|
tendacn
|
pa6_firmware
|
Tenda PA6 Wi-Fi Powerline extender 1.0.1.21 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially crafted string, an attacker could modify th…
|
CWE-78
OS Command
|
CVE-2019-16213
|
2024-11-21 13:30 |
2020-06-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|