|
213371
|
8.1 |
HIGH
Network
|
tibco
|
activematrix_businessworks
|
The HTTP Connector component of TIBCO Software Inc.'s TIBCO ActiveMatrix BusinessWorks contains a vulnerability that theoretically allows unauthenticated HTTP requests to be processed by the Business…
|
CWE-287
Improper Authentication
|
CVE-2019-8990
|
2024-11-21 13:50 |
2019-04-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213372
|
7.8 |
HIGH
Local
|
linux canonical
|
linux_kernel ubuntu_linux
|
In the Linux Kernel before versions 4.20.8 and 4.19.21 a use-after-free error in the "sctp_sendmsg()" function (net/sctp/socket.c) when handling SCTP_SENDALL flag can be exploited to corrupt memory.
|
CWE-787 CWE-416
Out-of-bounds Write Use After Free
|
CVE-2019-8956
|
2024-11-21 13:50 |
2019-04-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213373
|
4.3 |
MEDIUM
Network
|
tibco
|
data_science_for_aws spotfire_data_science
|
The application server component of TIBCO Software Inc.'s TIBCO Data Science for AWS, and TIBCO Spotfire Data Science contains a vulnerability that theoretically enables a user to spoof their account…
|
NVD-CWE-noinfo
|
CVE-2019-8989
|
2024-11-21 13:50 |
2019-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213374
|
8.1 |
HIGH
Network
|
tibco
|
data_science_for_aws spotfire_data_science
|
The application server component of TIBCO Software Inc.'s TIBCO Data Science for AWS, and TIBCO Spotfire Data Science contains a persistent cross-site contains a vulnerability that theoretically allo…
|
NVD-CWE-noinfo
|
CVE-2019-8988
|
2024-11-21 13:50 |
2019-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213375
|
5.4 |
MEDIUM
Network
|
tibco
|
data_science_for_aws spotfire_data_science
|
The application server component of TIBCO Software Inc.'s TIBCO Data Science for AWS, and TIBCO Spotfire Data Science contains a persistent cross-site scripting vulnerability that theoretically allow…
|
CWE-79
Cross-site Scripting
|
CVE-2019-8987
|
2024-11-21 13:50 |
2019-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213376
|
8.8 |
HIGH
Network
|
cmsmadesimple
|
cms_made_simple
|
An issue was discovered in CMS Made Simple 2.2.8. In the module ModuleManager (in the file action.installmodule.php), it is possible to reach an unserialize call with untrusted input and achieve auth…
|
CWE-502 CWE-1321
Deserialization of Untrusted Data Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
|
CVE-2019-9061
|
2024-11-21 13:50 |
2019-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213377
|
7.2 |
HIGH
Network
|
cmsmadesimple
|
cms_made_simple
|
An issue was discovered in CMS Made Simple 2.2.8. It is possible, with an administrator account, to achieve command injection by modifying the path of the e-mail executable in Mail Settings, setting …
|
CWE-77
Command Injection
|
CVE-2019-9059
|
2024-11-21 13:50 |
2019-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213378
|
7.2 |
HIGH
Network
|
cmsmadesimple
|
cms_made_simple
|
An issue was discovered in CMS Made Simple 2.2.8. In the administrator page admin/changegroupperm.php, it is possible to send a crafted value in the sel_groups parameter that leads to authenticated o…
|
CWE-1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
|
CVE-2019-9058
|
2024-11-21 13:50 |
2019-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213379
|
8.8 |
HIGH
Network
|
cmsmadesimple
|
cms_made_simple
|
An issue was discovered in CMS Made Simple 2.2.8. In the module FilePicker, it is possible to reach an unserialize call with an untrusted parameter, and achieve authenticated object injection.
|
CWE-502 CWE-915
Deserialization of Untrusted Data Improperly Controlled Modification of Dynamically-Determined Object Attributes
|
CVE-2019-9057
|
2024-11-21 13:50 |
2019-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213380
|
8.8 |
HIGH
Network
|
cmsmadesimple
|
cms_made_simple
|
An issue was discovered in CMS Made Simple 2.2.8. In the module DesignManager (in the files action.admin_bulk_css.php and action.admin_bulk_template.php), with an unprivileged user with Designer perm…
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2019-9055
|
2024-11-21 13:50 |
2019-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|