|
212981
|
8.8 |
HIGH
Network
|
hdfgroup
|
hdf5
|
An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5VM_memcpyvv in H5VM.c when called from H5D__compact_readvv in H5Dcompact.c.
|
CWE-125
Out-of-bounds Read
|
CVE-2019-9151
|
2024-11-21 13:51 |
2019-02-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212982
|
7.5 |
HIGH
Adjacent
|
jamf
|
self_service
|
Jamf Self Service 10.9.0 allows man-in-the-middle attackers to obtain a root shell by leveraging the "publish Bash shell scripts" feature to insert "/Applications/Utilities/Terminal app/Contents/MacO…
|
NVD-CWE-noinfo
|
CVE-2019-9146
|
2024-11-21 13:51 |
2019-02-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212983
|
6.1 |
MEDIUM
Network
|
hsycms
|
hsycms
|
An issue was discovered in Hsycms V1.1. There is an XSS vulnerability via the name field to the /book page.
|
CWE-79
Cross-site Scripting
|
CVE-2019-9145
|
2024-11-21 13:51 |
2019-02-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212984
|
8.8 |
HIGH
Network
|
exiv2
|
exiv2
|
An issue was discovered in Exiv2 0.27. There is infinite recursion at BigTiffImage::printIFD in the file bigtiffimage.cpp. This can be triggered by a crafted file. It allows an attacker to cause Deni…
|
CWE-674
Uncontrolled Recursion
|
CVE-2019-9144
|
2024-11-21 13:51 |
2019-02-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212985
|
8.8 |
HIGH
Network
|
exiv2
|
exiv2
|
An issue was discovered in Exiv2 0.27. There is infinite recursion at Exiv2::Image::printTiffStructure in the file image.cpp. This can be triggered by a crafted file. It allows an attacker to cause D…
|
CWE-674
Uncontrolled Recursion
|
CVE-2019-9143
|
2024-11-21 13:51 |
2019-02-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212986
|
6.1 |
MEDIUM
Network
|
b3log
|
symphony
|
An issue was discovered in b3log Symphony (aka Sym) before v3.4.7. XSS exists via the userIntro and userNickname fields to processor/SettingsProcessor.java.
|
CWE-79
Cross-site Scripting
|
CVE-2019-9142
|
2024-11-21 13:51 |
2019-02-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212987
|
7.5 |
HIGH
Network
|
dlink
|
dir-825_rev.b_firmware
|
An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. There is an information disclosure vulnerability via requests for the router_info.xml document. This will reveal the PIN code, MAC addres…
|
CWE-200
Information Exposure
|
CVE-2019-9126
|
2024-11-21 13:51 |
2019-02-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212988
|
9.8 |
CRITICAL
Network
|
d-link
|
dir-878_firmware
|
An issue was discovered on D-Link DIR-878 1.12B01 devices. Because strncpy is misused, there is a stack-based buffer overflow vulnerability that does not require authentication via the HNAP_AUTH HTTP…
|
CWE-787 CWE-306
Out-of-bounds Write Missing Authentication for Critical Function
|
CVE-2019-9125
|
2024-11-21 13:51 |
2019-02-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212989
|
9.8 |
CRITICAL
Network
|
d-link
|
dir-878_firmware
|
An issue was discovered on D-Link DIR-878 1.12B01 devices. At the /HNAP1 URI, an attacker can log in with a blank password.
|
CWE-287
Improper Authentication
|
CVE-2019-9124
|
2024-11-21 13:51 |
2019-02-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212990
|
9.8 |
CRITICAL
Network
|
dlink
|
dir-825_rev.b_firmware
|
An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. The "user" account has a blank password.
|
CWE-521
Weak Password Requirements
|
CVE-2019-9123
|
2024-11-21 13:51 |
2019-02-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|