|
213261
|
9.1 |
CRITICAL
Network
|
druide
|
antidote
|
Druide Antidote RX, HD, 8 before 8.05.2287, 9 before 9.5.3937 and 10 before 10.1.2147 allows remote attackers to steal NTLM hashes or perform SMB relay attacks upon a direct launch of the product, or…
|
NVD-CWE-noinfo
|
CVE-2019-9565
|
2024-11-21 13:51 |
2019-03-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213262
|
7.5 |
HIGH
Network
|
bluemind
|
bluemind
|
In BlueMind 3.5.x before 3.5.11 Hotfix 7 and 4.x before 4.0-beta3, the contact application mishandles temporary uploads.
|
CWE-19
Data Processing Errors
|
CVE-2019-9563
|
2024-11-21 13:51 |
2019-03-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213263
|
9.8 |
CRITICAL
Network
|
eloan_project
|
eloan
|
Eloan V3.0 through 2018-09-20 allows remote attackers to list files via a direct request to the p2p/api/ or p2p/lib/ or p2p/images/ URI.
|
CWE-425
Direct Request ('Forced Browsing')
|
CVE-2019-9552
|
2024-11-21 13:51 |
2019-03-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213264
|
4.8 |
MEDIUM
Network
|
wdoyo
|
doyocms
|
An issue was discovered in DOYO (aka doyocms) 2.3 through 2015-05-06. It has admin.php XSS.
|
CWE-79
Cross-site Scripting
|
CVE-2019-9551
|
2024-11-21 13:51 |
2019-03-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213265
|
4.8 |
MEDIUM
Network
|
dhcms_project
|
dhcms
|
DhCms through 2017-09-18 has admin.php?r=admin/Index/index XSS.
|
CWE-79
Cross-site Scripting
|
CVE-2019-9550
|
2024-11-21 13:51 |
2019-03-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213266
|
8.8 |
HIGH
Network
|
popojicms
|
popojicms
|
An issue was discovered in PopojiCMS v2.0.1. It has CSRF via the po-admin/route.php?mod=user&act=addnew URI, as demonstrated by adding a level=1 account, a similar issue to CVE-2018-18935.
|
CWE-352
Origin Validation Error
|
CVE-2019-9549
|
2024-11-21 13:51 |
2019-03-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213267
|
5.3 |
MEDIUM
Network
|
spdk
|
storage_performance_development_kit
|
In Storage Performance Development Kit (SPDK) before 19.01, a malicious vhost client (i.e., virtual machine) could carefully construct a circular descriptor chain that would result in a partial denia…
|
CWE-834
Excessive Iteration
|
CVE-2019-9547
|
2024-11-21 13:51 |
2019-03-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213268
|
9.8 |
CRITICAL
Network
|
solarwinds
|
orion_platform
|
SolarWinds Orion Platform before 2018.4 Hotfix 2 allows privilege escalation through the RabbitMQ service.
|
CWE-427
Uncontrolled Search Path Element
|
CVE-2019-9546
|
2024-11-21 13:51 |
2019-03-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213269
|
8.8 |
HIGH
Network
|
freedesktop
|
poppler
|
An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readTextRegion() located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file to (for example) the p…
|
CWE-674
Uncontrolled Recursion
|
CVE-2019-9545
|
2024-11-21 13:51 |
2019-03-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213270
|
8.8 |
HIGH
Network
|
axiosys
|
bento4
|
An issue was discovered in Bento4 1.5.1-628. An out of bounds write occurs in AP4_CttsTableEntry::AP4_CttsTableEntry() located in Core/Ap4Array.h. It can be triggered by sending a crafted file to (fo…
|
CWE-787
Out-of-bounds Write
|
CVE-2019-9544
|
2024-11-21 13:51 |
2019-03-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|