|
222191
|
5.3 |
MEDIUM
Local
|
gnu opensuse
|
ncurses leap
|
There is a heap-based buffer over-read in the _nc_find_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.
|
CWE-125
Out-of-bounds Read
|
CVE-2019-17594
|
2024-11-21 13:32 |
2019-10-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222192
|
8.8 |
HIGH
Network
|
jizhicms
|
jizhicms
|
JIZHICMS 1.5.1 allows admin.php/Admin/adminadd.html CSRF to add an administrator.
|
CWE-352
Origin Validation Error
|
CVE-2019-17593
|
2024-11-21 13:32 |
2019-10-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222193
|
7.5 |
HIGH
Network
|
csv-parse_project fedoraproject
|
csv-parse fedora
|
The csv-parse module before 4.4.6 for Node.js is vulnerable to Regular Expression Denial of Service. The __isInt() function contains a malformed regular expression that processes large crafted input …
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2019-17592
|
2024-11-21 13:32 |
2019-10-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222194
|
7.5 |
HIGH
Network
|
idreamsoft
|
icms
|
idreamsoft iCMS 7.0.15 allows remote attackers to cause a denial of service (resource consumption) via a query for many comments, as demonstrated by the admincp.php?app=comment&perpage= substring fol…
|
CWE-770
Allocation of Resources Without Limits or Throttling
|
CVE-2019-17583
|
2024-11-21 13:32 |
2019-10-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222195
|
9.8 |
CRITICAL
Network
|
dormsystem_project
|
dormsystem
|
tonyy dormsystem through 1.3 allows SQL Injection in admin.php.
|
CWE-89
SQL Injection
|
CVE-2019-17580
|
2024-11-21 13:32 |
2019-10-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222196
|
7.5 |
HIGH
Network
|
dlink
|
dir-412_firmware
|
There are some web interfaces without authentication requirements on D-Link DIR-412 A1-1.14WW routers. An attacker can get the router's log file via log_get.php, which could be used to discover the i…
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2019-17511
|
2024-11-21 13:32 |
2019-10-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222197
|
6.1 |
MEDIUM
Network
|
sonarsource
|
sonarqube
|
SonarSource SonarQube before 7.8 has XSS in project links on account/projects.
|
CWE-79
Cross-site Scripting
|
CVE-2019-17579
|
2024-11-21 13:32 |
2019-10-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222198
|
7.2 |
HIGH
Network
|
wbce
|
wbce_cms
|
A file-rename filter bypass exists in admin/media/rename.php in WBCE CMS 1.4.0 and earlier. This can be exploited by an authenticated user with admin privileges to rename a media filename and extensi…
|
CWE-706
Use of Incorrectly-Resolved Name or Reference
|
CVE-2019-17575
|
2024-11-21 13:32 |
2019-10-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222199
|
9.1 |
CRITICAL
Network
|
code-atlantic
|
popup_maker
|
An issue was discovered in the Popup Maker plugin before 1.8.13 for WordPress. An unauthenticated attacker can partially control the arguments of the do_action function to invoke certain popmake_ or …
|
CWE-639
Authorization Bypass Through User-Controlled Key
|
CVE-2019-17574
|
2024-11-21 13:32 |
2019-10-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222200
|
9.8 |
CRITICAL
Network
|
metinfo
|
metinfo
|
An issue was discovered in MetInfo v7.0.0 beta. There is SQL Injection via the admin/?n=tags&c=index&a=doSaveTags URI.
|
CWE-89
SQL Injection
|
CVE-2019-17553
|
2024-11-21 13:32 |
2019-10-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|