|
214171
|
7.7 |
HIGH
Network
|
thehive-project
|
cortex-analyzers
|
TheHive Project UnshortenLink analyzer before 1.1, included in Cortex-Analyzers before 1.15.2, has SSRF. To exploit the vulnerability, an attacker must create a new analysis, select URL for Data Type…
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2019-7652
|
2024-11-21 13:48 |
2019-05-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
214172
|
9.8 |
CRITICAL
Network
|
cyberark
|
enterprise_password_vault
|
An XML external entity (XXE) vulnerability in the Password Vault Web Access (PVWA) of CyberArk Enterprise Password Vault <=10.7 allows remote attackers to read arbitrary files or potentially bypass a…
|
CWE-611
XXE
|
CVE-2019-7442
|
2024-11-21 13:48 |
2019-05-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
214173
|
8.1 |
HIGH
Network
|
jio
|
jmr1140_firmware
|
JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices allow remote attackers to obtain an admin token by making a /cgi-bin/qcmap_auth type=getuser request and then reading the token field. This token value ca…
|
CWE-352
Origin Validation Error
|
CVE-2019-7746
|
2024-11-21 13:48 |
2019-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
214174
|
9.8 |
CRITICAL
Network
|
jio
|
jmr1140_firmware
|
JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices allow remote attackers to obtain the Wi-Fi password by making a cgi-bin/qcmap_web_cgi Page=GetWiFi_Setting request and then reading the wpa_security_key f…
|
NVD-CWE-noinfo
|
CVE-2019-7745
|
2024-11-21 13:48 |
2019-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
214175
|
6.1 |
MEDIUM
Network
|
jio
|
jmr1140_firmware
|
cgi-bin/qcmap_web_cgi on JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices has POST based reflected XSS via the Page parameter. No sanitization is performed for user input data.
|
CWE-79
Cross-site Scripting
|
CVE-2019-7687
|
2024-11-21 13:48 |
2019-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
214176
|
9.8 |
CRITICAL
Network
|
coship
|
rt3052_firmware
rt3050_firmware
wm3300_firmware
rt7620_firmware
|
An issue was discovered on Shenzhen Coship WM3300 WiFi Router 5.0.0.55 devices. The password reset functionality of the Wireless SSID doesn't require any type of authentication. By making a POST requ…
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2019-7564
|
2024-11-21 13:48 |
2019-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
214177
|
6.1 |
MEDIUM
Network
|
rukovoditel
|
rukovoditel
|
Rukovoditel through 2.4.1 allows XSS via a URL that lacks a module=users%2flogin substring.
|
CWE-79
Cross-site Scripting
|
CVE-2019-7541
|
2024-11-21 13:48 |
2019-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
214178
|
8.1 |
HIGH
Network
|
kde
opensuse
fedoraproject
|
kauth
leap
backports
fedora
|
KDE KAuth before 5.55 allows the passing of parameters with arbitrary types to helpers running as root over DBus via DBusHelperProxy.cpp. Certain types can cause crashes, and trigger the decoding of …
|
CWE-20
Improper Input Validation
|
CVE-2019-7443
|
2024-11-21 13:48 |
2019-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
214179
|
6.1 |
MEDIUM
Network
|
zohocorp
|
manageengine_netflow_analyzer
|
XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the autorefTime or graphTypes parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2019-7427
|
2024-11-21 13:48 |
2019-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
214180
|
6.1 |
MEDIUM
Network
|
zohocorp
|
manageengine_netflow_analyzer
|
XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the groupDesc, groupName, groupID, or task parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2019-7426
|
2024-11-21 13:48 |
2019-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
