|
222971
|
6.1 |
MEDIUM
Network
|
mozilla
|
firefox
|
An object tag with a data URI did not correctly inherit the document's Content Security Policy. This allowed a CSP bypass in a cross-origin frame if the document's policy explicitly allowed data: URI…
|
CWE-79
Cross-site Scripting
|
CVE-2019-17000
|
2024-11-21 13:31 |
2020-01-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222972
|
9.8 |
CRITICAL
Network
|
jamf
|
jamf
|
An issue was discovered in Jamf Pro 9.x and 10.x before 10.15.1. Deserialization of untrusted data when parsing JSON in several APIs may cause Denial of Service (DoS), remote code execution (RCE), an…
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2019-17076
|
2024-11-21 13:31 |
2020-01-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222973
|
5.4 |
MEDIUM
Network
|
tencent
|
wechat
|
This vulnerability allows remote attackers redirect users to an external resource on affected installations of Tencent WeChat Prior to 7.0.9. User interaction is required to exploit this vulnerabilit…
|
CWE-601
Open Redirect
|
CVE-2019-17151
|
2024-11-21 13:31 |
2020-01-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222974
|
7.8 |
HIGH
Local
|
parallels
|
parallels_desktop
|
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop version 14.1.3 (45485). An attacker must first obtain the ability to …
|
CWE-78
OS Command
|
CVE-2019-17148
|
2024-11-21 13:31 |
2020-01-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222975
|
8.8 |
HIGH
Network
|
tp-link
|
tl-wr841n_firmware
|
This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-LINK TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific…
|
CWE-120
Classic Buffer Overflow
|
CVE-2019-17147
|
2024-11-21 13:31 |
2020-01-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222976
|
9.8 |
CRITICAL
Network
|
dlink
|
dcs-935l_firmware dcs-960l_firmware
|
This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link DCS-960L v1.07.102. Authentication is not required to exploit this vulnerability. The specific…
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2019-17146
|
2024-11-21 13:31 |
2020-01-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222977
|
6.1 |
MEDIUM
Network
|
open-xchange
|
open-xchange_appsuite
|
OX App Suite through 7.10.2 has XSS.
|
CWE-79
Cross-site Scripting
|
CVE-2019-16717
|
2024-11-21 13:31 |
2020-01-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222978
|
6.6 |
MEDIUM
Network
|
open-xchange
|
open-xchange_appsuite
|
OX App Suite through 7.10.2 has Incorrect Access Control.
|
CWE-276
Incorrect Default Permissions
|
CVE-2019-16716
|
2024-11-21 13:31 |
2020-01-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222979
|
8.8 |
HIGH
Network
|
tiny_file_manager_project
|
tiny_file_manager
|
In Tiny File Manager before 2.3.9, there is a remote code execution via Upload from URL and Edit/Rename files. Only authenticated users are impacted.
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2019-16790
|
2024-11-21 13:31 |
2019-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222980
|
7.8 |
HIGH
Local
|
k7computing
|
k7_ultimate_security
|
In K7 Ultimate Security 16.0.0117, the module K7BKCExt.dll (aka the backup module) improperly validates the administrative privileges of the user, allowing an arbitrary file write via a symbolic link…
|
CWE-59
Link Following
|
CVE-2019-16896
|
2024-11-21 13:31 |
2019-12-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|