|
222001
|
5.4 |
MEDIUM
Network
|
lexmark
|
cs31x_firmware cs41x_firmware cs51x_firmware cx310_firmware cx410_firmware xc2130_firmware cx510_firmware xc2132_firmware ms310_firmware ms312_firmware ms317_firmware
|
Various Lexmark products have stored XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in http://support.lexmark.com/index?page=content&id=TE935…
|
CWE-79
Cross-site Scripting
|
CVE-2019-19773
|
2024-11-21 13:35 |
2020-03-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222002
|
5.4 |
MEDIUM
Network
|
lexmark
|
cs31x_firmware cs41x_firmware cs51x_firmware cx310_firmware cx410_firmware xc2130_firmware cx510_firmware xc2132_firmware ms310_firmware ms312_firmware ms317_firmware
|
Various Lexmark products have reflected XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in http://support.lexmark.com/index?page=content&id=TE…
|
CWE-79
Cross-site Scripting
|
CVE-2019-19772
|
2024-11-21 13:35 |
2020-03-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222003
|
6.7 |
MEDIUM
Local
|
eset
|
cyber_security
|
A permissions issue in ESET Cyber Security before 6.8.300.0 for macOS allows a local attacker to escalate privileges by appending data to root-owned files.
|
CWE-276
Incorrect Default Permissions
|
CVE-2019-19792
|
2024-11-21 13:35 |
2020-03-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222004
|
9.8 |
CRITICAL
Network
|
mitel
|
micollab_audio\ _web_\&_video_conferencing
|
A SQL injection vulnerability in in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attack due to insufficient input validation for the registeredLi…
|
CWE-89
SQL Injection
|
CVE-2019-19608
|
2024-11-21 13:35 |
2020-03-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222005
|
9.8 |
CRITICAL
Network
|
mitel
|
micollab_audio\ _web_\&_video_conferencing
|
A SQL injection vulnerability in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attack due to insufficient input validation for the session paramet…
|
CWE-89
SQL Injection
|
CVE-2019-19607
|
2024-11-21 13:35 |
2020-03-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222006
|
7.5 |
HIGH
Network
|
pablosoftwaresolutions
|
quick_\'n_easy_web_server
|
The HTTP service in quickweb.exe in Pablo Quick 'n Easy Web Server 3.3.8 allows Remote Unauthenticated Heap Memory Corruption via a large host or domain parameter. It may be possible to achieve remot…
|
CWE-787 CWE-415
Out-of-bounds Write Double Free
|
CVE-2019-19943
|
2024-11-21 13:35 |
2020-02-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222007
|
9.8 |
CRITICAL
Network
|
seling
|
visual_access_manager
|
An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. It allows blind Command Injection. An attacker without authentication is able to execute arbitrary operating system…
|
CWE-78
OS Command
|
CVE-2019-19994
|
2024-11-21 13:35 |
2020-02-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222008
|
5.3 |
MEDIUM
Network
|
seling
|
visual_access_manager
|
An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. Several full path disclosure vulnerability were discovered. A user, even with no authentication, may simply send ar…
|
CWE-209
Information Exposure Through an Error Message
|
CVE-2019-19993
|
2024-11-21 13:35 |
2020-02-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222009
|
6.5 |
MEDIUM
Network
|
seling
|
visual_access_manager
|
An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. A user with valid credentials is able to read XML files on the filesystem via the web interface. The PHP page /comm…
|
CWE-20
Improper Input Validation
|
CVE-2019-19992
|
2024-11-21 13:35 |
2020-02-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222010
|
5.4 |
MEDIUM
Network
|
seling
|
visual_access_manager
|
An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. Multiple Reflected Cross-site scripting (XSS) vulnerabilities allow remote authenticated users to inject arbitrary …
|
CWE-79
Cross-site Scripting
|
CVE-2019-19991
|
2024-11-21 13:35 |
2020-02-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|