|
222991
|
9.8 |
CRITICAL
Network
|
infradead fedoraproject debian canonical opensuse
|
openconnect fedora debian_linux ubuntu_linux leap
|
process_http_response in OpenConnect before 8.05 has a Buffer Overflow when a malicious server uses HTTP chunked encoding with crafted chunk sizes.
|
CWE-120
Classic Buffer Overflow
|
CVE-2019-16239
|
2024-11-21 13:30 |
2019-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222992
|
8.2 |
HIGH
Network
|
logmein
|
lastpass
|
LogMeIn LastPass before 4.33.0 allows attackers to construct a crafted web site that captures the credentials for a victim's account on a previously visited web site, because do_popupregister can be …
|
CWE-1021
Improper Restriction of Rendered UI Layers or Frames
|
CVE-2019-16371
|
2024-11-21 13:30 |
2019-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222993
|
5.9 |
MEDIUM
Network
|
gradle
|
gradle
|
The PGP signing plugin in Gradle before 6.0 relies on the SHA-1 algorithm, which might allow an attacker to replace an artifact with a different one that has the same SHA-1 message digest, a related …
|
CWE-327
Use of a Broken or Risky Cryptographic Algorithm
|
CVE-2019-16370
|
2024-11-21 13:30 |
2019-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222994
|
9.8 |
CRITICAL
Network
|
moddable
|
xs moddable
|
In XS 9.0.0 in Moddable SDK OS180329, there is a heap-based buffer overflow in fxBeginHost in xsAPI.c when called from fxRunDefine in xsRun.c, as demonstrated by crafted JavaScript code to xst.
|
CWE-787
Out-of-bounds Write
|
CVE-2019-16366
|
2024-11-21 13:30 |
2019-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222995
|
5.5 |
MEDIUM
Local
|
beego
|
beego
|
The File Session Manager in Beego 1.10.0 allows local users to read session files because of weak permissions for individual files.
|
CWE-276
Incorrect Default Permissions
|
CVE-2019-16355
|
2024-11-21 13:30 |
2019-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222996
|
4.7 |
MEDIUM
Local
|
beego
|
beego
|
The File Session Manager in Beego 1.10.0 allows local users to read session files because there is a race condition involving file creation within a directory with weak permissions.
|
CWE-362 CWE-732
Race Condition Incorrect Permission Assignment for Critical Resource
|
CVE-2019-16354
|
2024-11-21 13:30 |
2019-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222997
|
7.5 |
HIGH
Network
|
geautomation
|
proficy
|
Emerson GE Automation Proficy Machine Edition 8.0 allows an access violation and application crash via crafted traffic from a remote device, as demonstrated by an RX7i device.
|
NVD-CWE-noinfo
|
CVE-2019-16353
|
2024-11-21 13:30 |
2019-09-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222998
|
6.5 |
MEDIUM
Network
|
rockcarry
|
ffjpeg
|
ffjpeg before 2019-08-21 has a heap-based buffer overflow in jfif_load() at jfif.c.
|
CWE-787
Out-of-bounds Write
|
CVE-2019-16352
|
2024-11-21 13:30 |
2019-09-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222999
|
6.5 |
MEDIUM
Network
|
rockcarry
|
ffjpeg
|
ffjpeg before 2019-08-18 has a NULL pointer dereference in huffman_decode_step() at huffman.c.
|
CWE-476
NULL Pointer Dereference
|
CVE-2019-16351
|
2024-11-21 13:30 |
2019-09-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223000
|
6.5 |
MEDIUM
Network
|
rockcarry
|
ffjpeg
|
ffjpeg before 2019-08-18 has a NULL pointer dereference in idct2d8x8() at dct.c.
|
CWE-476
NULL Pointer Dereference
|
CVE-2019-16350
|
2024-11-21 13:30 |
2019-09-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|