|
211371
|
7.5 |
HIGH
Network
|
joomla
|
joomla\!
|
An issue was discovered in Joomla! before 3.9.4. The sample data plugins lack ACL checks, allowing unauthorized access.
|
CWE-862
Missing Authorization
|
CVE-2019-9713
|
2024-11-21 13:52 |
2019-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211372
|
6.1 |
MEDIUM
Network
|
joomla
|
joomla\!
|
An issue was discovered in Joomla! before 3.9.4. The JSON handler in com_config lacks input validation, leading to XSS.
|
CWE-79
Cross-site Scripting
|
CVE-2019-9712
|
2024-11-21 13:52 |
2019-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211373
|
6.1 |
MEDIUM
Network
|
joomla
|
joomla\!
|
An issue was discovered in Joomla! before 3.9.4. The item_title layout in edit views lacks escaping, leading to XSS.
|
CWE-79
Cross-site Scripting
|
CVE-2019-9711
|
2024-11-21 13:52 |
2019-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211374
|
6.5 |
MEDIUM
Network
|
ffmpeg canonical
|
ffmpeg ubuntu_linux
|
A denial of service in the subtitle decoder in FFmpeg 3.2 and 4.1 allows attackers to hog the CPU via a crafted video file in Matroska format, because handle_open_brace in libavcodec/htmlsubtitles.c …
|
CWE-125
Out-of-bounds Read
|
CVE-2019-9721
|
2024-11-21 13:52 |
2019-03-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211375
|
6.5 |
MEDIUM
Network
|
ffmpeg debian canonical
|
ffmpeg debian_linux ubuntu_linux
|
In FFmpeg 3.2 and 4.1, a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format, because ff_htmlmarkup_to_ass in libavcodec/htmlsubtitle…
|
CWE-125
Out-of-bounds Read
|
CVE-2019-9718
|
2024-11-21 13:52 |
2019-03-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211376
|
5.4 |
MEDIUM
Network
|
jupyter
|
notebook
|
An XSSI (cross-site inclusion) vulnerability in Jupyter Notebook before 5.7.6 allows inclusion of resources on malicious pages when visited by users who are authenticated with a Jupyter server. Acces…
|
CWE-79
Cross-site Scripting
|
CVE-2019-9644
|
2024-11-21 13:52 |
2019-03-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211377
|
8.1 |
HIGH
Network
|
webargs_project
|
webargs
|
An issue was discovered in webargs before 5.1.3, as used with marshmallow and other products. JSON parsing uses a short-lived cache to store the parsed JSON body. This cache is not thread-safe, meani…
|
CWE-362
Race Condition
|
CVE-2019-9710
|
2024-11-21 13:52 |
2019-03-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211378
|
5.5 |
MEDIUM
Local
|
debian
|
cron debian_linux
|
Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (use-after-free and daemon crash) because of a force_rescan_user error.
|
CWE-416
Use After Free
|
CVE-2019-9706
|
2024-11-21 13:52 |
2019-03-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211379
|
5.5 |
MEDIUM
Local
|
cron_project debian fedoraproject
|
cron debian_linux fedora
|
Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (memory consumption) via a large crontab file because an unlimited number of lines is accepted.
|
CWE-770
Allocation of Resources Without Limits or Throttling
|
CVE-2019-9705
|
2024-11-21 13:52 |
2019-03-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211380
|
5.5 |
MEDIUM
Local
|
cron_project fedoraproject debian
|
cron fedora debian_linux
|
Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (daemon crash) via a large crontab file because the calloc return value is not checked.
|
CWE-476 CWE-252
NULL Pointer Dereference Unchecked Return Value
|
CVE-2019-9704
|
2024-11-21 13:52 |
2019-03-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|