|
219481
|
3.7 |
LOW
Network
|
mikrotik
|
winbox routeros
|
MikroTik Winbox 3.20 and below is vulnerable to man in the middle attacks. A man in the middle can downgrade the client's authentication protocol and recover the user's username and MD5 hashed passwo…
|
NVD-CWE-Other
|
CVE-2019-3981
|
2024-11-21 13:42 |
2020-01-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219482
|
6.5 |
MEDIUM
Network
|
emc
|
rsa_authentication_manager
|
RSA Authentication Manager versions prior to 8.4 P7 contain an XML Entity Injection Vulnerability. A remote authenticated malicious user could potentially exploit this vulnerability to cause informat…
|
CWE-611
XXE
|
CVE-2019-3768
|
2024-11-21 13:42 |
2020-01-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219483
|
7.8 |
HIGH
Local
|
debian skolelinux canonical
|
debian-lan-config debian-edu-config debian_linux ubuntu_linux
|
Debian-edu-config all versions < 2.11.10, a set of configuration files used for Debian Edu, and debian-lan-config < 0.26, configured too permissive ACLs for the Kerberos admin server, which allowed p…
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2019-3467
|
2024-11-21 13:42 |
2019-12-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219484
|
9.8 |
CRITICAL
Network
|
zte
|
zxcloud_goldendata_vap
|
All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have encryption problems vulnerability. Attackers could sniff unencrypted account and password through the network for front-end s…
|
CWE-311 CWE-522
Missing Encryption of Sensitive Data Insufficiently Protected Credentials
|
CVE-2019-3431
|
2024-11-21 13:42 |
2019-12-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219485
|
4.9 |
MEDIUM
Network
|
zte
|
zxcloud_goldendata_vap
|
All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have an information disclosure vulnerability. Attackers could use this vulnerability to collect data information and damage the sy…
|
NVD-CWE-noinfo
|
CVE-2019-3430
|
2024-11-21 13:42 |
2019-12-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219486
|
5.3 |
MEDIUM
Network
|
zte
|
zxcloud_goldendata_vap
|
All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have a file reading vulnerability. Attackers could obtain log file information without authorization, causing the disclosure of se…
|
CWE-532
Inclusion of Sensitive Information in Log Files
|
CVE-2019-3429
|
2024-11-21 13:42 |
2019-12-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219487
|
9.8 |
CRITICAL
Network
|
advantech
|
webaccess
|
Advantech WebAccess before 8.4.3 allows unauthenticated remote attackers to execute arbitrary code or cause a denial of service (memory corruption) due to a stack-based buffer overflow when handling …
|
CWE-787
Out-of-bounds Write
|
CVE-2019-3951
|
2024-11-21 13:42 |
2019-12-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219488
|
7.8 |
HIGH
Local
|
mcafee
|
techcheck
|
DLL Search Order Hijacking vulnerability in the Microsoft Windows client in McAfee Tech Check 3.0.0.17 and earlier allows local users to execute arbitrary code via the local folder placed there by an…
|
CWE-427
Uncontrolled Search Path Element
|
CVE-2019-3667
|
2024-11-21 13:42 |
2019-12-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219489
|
7.8 |
HIGH
Local
|
opensuse
|
leap
|
The chkstat tool in the permissions package followed symlinks before commit a9e1d26cd49ef9ee0c2060c859321128a6dd4230 (please also check the additional hardenings after this fix). This allowed local a…
|
-
|
CVE-2019-3690
|
2024-11-21 13:42 |
2019-12-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219490
|
5.5 |
MEDIUM
Local
|
dell
|
command_update
|
Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A local authenticated malicious user with low privileges potentially could exploit this vulnerability to de…
|
CWE-59
Link Following
|
CVE-2019-3750
|
2024-11-21 13:42 |
2019-12-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|