|
212591
|
7.5 |
HIGH
Network
|
bluemind
|
bluemind
|
In BlueMind 3.5.x before 3.5.11 Hotfix 7 and 4.x before 4.0-beta3, the contact application mishandles temporary uploads.
|
CWE-19
Data Processing Errors
|
CVE-2019-9563
|
2024-11-21 13:51 |
2019-03-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212592
|
9.8 |
CRITICAL
Network
|
eloan_project
|
eloan
|
Eloan V3.0 through 2018-09-20 allows remote attackers to list files via a direct request to the p2p/api/ or p2p/lib/ or p2p/images/ URI.
|
CWE-425
Direct Request ('Forced Browsing')
|
CVE-2019-9552
|
2024-11-21 13:51 |
2019-03-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212593
|
4.8 |
MEDIUM
Network
|
wdoyo
|
doyocms
|
An issue was discovered in DOYO (aka doyocms) 2.3 through 2015-05-06. It has admin.php XSS.
|
CWE-79
Cross-site Scripting
|
CVE-2019-9551
|
2024-11-21 13:51 |
2019-03-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212594
|
4.8 |
MEDIUM
Network
|
dhcms_project
|
dhcms
|
DhCms through 2017-09-18 has admin.php?r=admin/Index/index XSS.
|
CWE-79
Cross-site Scripting
|
CVE-2019-9550
|
2024-11-21 13:51 |
2019-03-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212595
|
8.8 |
HIGH
Network
|
popojicms
|
popojicms
|
An issue was discovered in PopojiCMS v2.0.1. It has CSRF via the po-admin/route.php?mod=user&act=addnew URI, as demonstrated by adding a level=1 account, a similar issue to CVE-2018-18935.
|
CWE-352
Origin Validation Error
|
CVE-2019-9549
|
2024-11-21 13:51 |
2019-03-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212596
|
5.3 |
MEDIUM
Network
|
spdk
|
storage_performance_development_kit
|
In Storage Performance Development Kit (SPDK) before 19.01, a malicious vhost client (i.e., virtual machine) could carefully construct a circular descriptor chain that would result in a partial denia…
|
CWE-834
Excessive Iteration
|
CVE-2019-9547
|
2024-11-21 13:51 |
2019-03-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212597
|
9.8 |
CRITICAL
Network
|
solarwinds
|
orion_platform
|
SolarWinds Orion Platform before 2018.4 Hotfix 2 allows privilege escalation through the RabbitMQ service.
|
CWE-427
Uncontrolled Search Path Element
|
CVE-2019-9546
|
2024-11-21 13:51 |
2019-03-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212598
|
8.8 |
HIGH
Network
|
freedesktop
|
poppler
|
An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readTextRegion() located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file to (for example) the p…
|
CWE-674
Uncontrolled Recursion
|
CVE-2019-9545
|
2024-11-21 13:51 |
2019-03-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212599
|
8.8 |
HIGH
Network
|
axiosys
|
bento4
|
An issue was discovered in Bento4 1.5.1-628. An out of bounds write occurs in AP4_CttsTableEntry::AP4_CttsTableEntry() located in Core/Ap4Array.h. It can be triggered by sending a crafted file to (fo…
|
CWE-787
Out-of-bounds Write
|
CVE-2019-9544
|
2024-11-21 13:51 |
2019-03-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212600
|
8.8 |
HIGH
Network
|
freedesktop
|
poppler
|
An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readGenericBitmap() located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file to (for example) th…
|
CWE-674
Uncontrolled Recursion
|
CVE-2019-9543
|
2024-11-21 13:51 |
2019-03-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|