|
213541
|
8.8 |
HIGH
Network
|
seacms
|
seacms
|
SeaCMS 7.2 mishandles member.php?mod=repsw4 requests.
|
NVD-CWE-noinfo
|
CVE-2019-8418
|
2024-11-21 13:49 |
2019-02-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213542
|
5.5 |
MEDIUM
Local
|
mi
|
mi_mix_2_firmware
|
On Xiaomi MIX 2 devices with the 4.4.78 kernel, a NULL pointer dereference in the ioctl interface of the device file /dev/elliptic1 or /dev/elliptic0 causes a system crash via IOCTL 0x4008c575 (aka d…
|
CWE-476
NULL Pointer Dereference
|
CVE-2019-8413
|
2024-11-21 13:49 |
2019-02-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213543
|
8.8 |
HIGH
Network
|
feifeicms
|
feifeicms
|
FeiFeiCms 4.0.181010 on Windows allows remote attackers to read or delete arbitrary files via index.php?s=Admin-Data-Down-id-..\ or index.php?s=Admin-Data-Del-id-..\ directory traversal.
|
CWE-22
Path Traversal
|
CVE-2019-8412
|
2024-11-21 13:49 |
2019-02-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213544
|
7.5 |
HIGH
Network
|
zzcms
|
zzcms
|
admin/dl_data.php in zzcms 2018 (2018-10-19) allows remote attackers to delete arbitrary files via action=del&filename=../ directory traversal.
|
CWE-22
Path Traversal
|
CVE-2019-8411
|
2024-11-21 13:49 |
2019-02-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213545
|
4.9 |
MEDIUM
Network
|
onefilecms
|
onefilecms
|
OneFileCMS 3.6.13 allows remote attackers to modify onefilecms.php by clicking the Copy button twice.
|
NVD-CWE-noinfo
|
CVE-2019-8408
|
2024-11-21 13:49 |
2019-02-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213546
|
6.5 |
MEDIUM
Network
|
hongcms_project
|
hongcms
|
HongCMS 3.0.0 allows arbitrary file read and write operations via a ../ in the filename parameter to the admin/index.php/language/edit URI.
|
CWE-22
Path Traversal
|
CVE-2019-8407
|
2024-11-21 13:49 |
2019-02-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213547
|
9.8 |
CRITICAL
Network
|
hotels_server_project
|
hotels_server
|
Hotels_Server through 2018-11-05 has SQL Injection via the API because the controller/api/login.php telephone parameter is mishandled.
|
CWE-89
SQL Injection
|
CVE-2019-8393
|
2024-11-21 13:49 |
2019-02-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213548
|
6.1 |
MEDIUM
Network
|
ory
|
hydra
|
ORY Hydra before v1.0.0-rc.3+oryOS.9 has Reflected XSS via the oauth2/fallbacks/error error_hint parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2019-8400
|
2024-11-21 13:49 |
2019-02-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213549
|
6.5 |
MEDIUM
Network
|
hdfgroup
|
hdf5
|
An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5T_get_size in H5T.c.
|
CWE-125
Out-of-bounds Read
|
CVE-2019-8398
|
2024-11-21 13:49 |
2019-02-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213550
|
6.5 |
MEDIUM
Network
|
hdfgroup
|
hdf5
|
An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5T_close_real in H5T.c.
|
CWE-125
Out-of-bounds Read
|
CVE-2019-8397
|
2024-11-21 13:49 |
2019-02-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|