|
222751
|
5.3 |
MEDIUM
Network
|
openmicroscopy
|
omero
|
OMERO before 5.6.1 makes the details of each user available to all users.
|
NVD-CWE-noinfo
|
CVE-2019-16245
|
2024-11-21 13:30 |
2020-06-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222752
|
5.9 |
MEDIUM
Network
|
nutfind
|
nutfind
|
Missing SSL Certificate Validation in the Nutfind.com application through 3.9.12 for Android allows a man-in-the-middle attacker to sniff and manipulate all API requests, including login credentials …
|
CWE-295
Improper Certificate Validation
|
CVE-2019-16252
|
2024-11-21 13:30 |
2020-06-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222753
|
6.1 |
MEDIUM
Network
|
cybelesoft
|
thinfinity_virtualui
|
Cybele Thinfinity VirtualUI 2.5.17.2 allows HTTP response splitting via the mimetype parameter within a PDF viewer request, as demonstrated by an example.pdf?mimetype= substring. The victim user must…
|
CWE-79 CWE-74
Cross-site Scripting Injection
|
CVE-2019-16385
|
2024-11-21 13:30 |
2020-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222754
|
6.5 |
MEDIUM
Network
|
cybelesoft
|
thinfinity_virtualui
|
Cybele Thinfinity VirtualUI 2.5.17.2 allows ../ path traversal that can be used for data exfiltration. This enables files outside of the web directory to be retrieved if the exact location is known a…
|
CWE-22
Path Traversal
|
CVE-2019-16384
|
2024-11-21 13:30 |
2020-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222755
|
5.5 |
MEDIUM
Local
|
fortinet
|
forticlient
|
Use of a hard-coded cryptographic key to encrypt security sensitive data in local storage and configuration in FortiClient for Windows prior to 6.4.0 may allow an attacker with access to the local st…
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2019-16150
|
2024-11-21 13:30 |
2020-06-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222756
|
8.8 |
HIGH
Network
|
tylertech
|
eagle
|
TylerTech Eagle 2018.3.11 deserializes untrusted user input, resulting in remote code execution via a crafted Java object to the recorder/ServiceManager?service=tyler.empire.settings.SettingManager U…
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2019-16112
|
2024-11-21 13:30 |
2020-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222757
|
8.8 |
HIGH
Network
|
geniusbytes
|
genius_server
|
An application plugin in Genius Bytes Genius Server (Genius CDDS) 3.2.2 allows remote authenticated users to gain admin privileges.
|
NVD-CWE-noinfo
|
CVE-2019-16653
|
2024-11-21 13:30 |
2020-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222758
|
7.2 |
HIGH
Network
|
geniusbytes
|
genius_server
|
The BPM component in Genius Bytes Genius Server (Genius CDDS) 3.2.2 allows remote authenticated users to execute arbitrary commands.
|
NVD-CWE-noinfo
|
CVE-2019-16652
|
2024-11-21 13:30 |
2020-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222759
|
7.5 |
HIGH
Network
|
mediawiki
|
abusefilter
|
An issue was discovered in the AbuseFilter extension for MediaWiki. includes/special/SpecialAbuseLog.php allows attackers to obtain sensitive information, such as deleted/suppressed usernames and sum…
|
CWE-532
Inclusion of Sensitive Information in Log Files
|
CVE-2019-16528
|
2024-11-21 13:30 |
2020-03-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222760
|
6.8 |
MEDIUM
Physics
|
hom.ee
|
brain_cube_core
|
The bootloader of the homee Brain Cube V2 through 2.23.0 allows attackers with physical access to gain root access by manipulating the U-Boot environment via the CLI after connecting to the internal …
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2019-16258
|
2024-11-21 13:30 |
2020-03-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|