|
212821
|
5.4 |
MEDIUM
Network
|
ifrn
|
sistema_unificado_de_administracao_publica
|
SUAP V2 allows XSS during the update of user information.
|
CWE-79
Cross-site Scripting
|
CVE-2019-7634
|
2024-11-21 13:48 |
2020-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212822
|
8.8 |
HIGH
Network
|
weberp
|
weberp
|
In webERP 4.15, the Import Bank Transactions function fails to sanitize the content of imported MT940 bank statement files, resulting in the execution of arbitrary SQL queries, aka SQL Injection.
|
CWE-89
SQL Injection
|
CVE-2019-7755
|
2024-11-21 13:48 |
2020-03-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212823
|
7.2 |
HIGH
Network
|
gigabyte
|
app_center
|
An issue was discovered in gdrv.sys in Gigabyte APP Center before 19.0227.1. The vulnerable driver exposes a wrmsr instruction via IOCTL 0xC3502580 and does not properly filter the target Model Speci…
|
CWE-665
Improper Initialization
|
CVE-2019-7630
|
2024-11-21 13:48 |
2020-03-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212824
|
9.8 |
CRITICAL
Network
|
johnsoncontrols
|
entrapass
|
A vulnerability with the SmartService API Service option exists whereby an unauthorized user could potentially exploit this to upload malicious code to the server that could be executed at system lev…
|
CWE-20
Improper Input Validation
|
CVE-2019-7589
|
2024-11-21 13:48 |
2020-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212825
|
5.4 |
MEDIUM
Network
|
wowza
|
streaming_engine
|
Wowza Streaming Engine 4.8.0 and earlier from multiple authenticated XSS vulnerabilities via the (1) customList%5B0%5D.value field in enginemanager/server/serversetup/edit_adv.htm of the Server Setup…
|
CWE-79
Cross-site Scripting
|
CVE-2019-7655
|
2024-11-21 13:48 |
2020-01-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212826
|
6.5 |
MEDIUM
Network
|
wowza
|
streaming_engine
|
Wowza Streaming Engine 4.8.0 and earlier suffers from multiple CSRF vulnerabilities. For example, an administrator, by following a link, can be tricked into making unwanted changes such as adding ano…
|
CWE-352
Origin Validation Error
|
CVE-2019-7654
|
2024-11-21 13:48 |
2020-01-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212827
|
7.8 |
HIGH
Local
|
wowza
|
streaming_engine
|
A privilege escalation vulnerability in Wowza Streaming Engine 4.8.0 and earlier allows any unprivileged Linux user to escalate privileges to root. The installer sets too relaxed permissions on /usr/…
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2019-7656
|
2024-11-21 13:48 |
2020-01-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212828
|
7.5 |
HIGH
Network
|
ricoh
|
fusionpro_vdp
|
A directory traversal and local file inclusion vulnerability in FPProducerInternetServer.exe in Ricoh MarcomCentral, formerly PTI Marketing, FusionPro VDP before 10.0 allows a remote attacker to list…
|
CWE-22
Path Traversal
|
CVE-2019-7751
|
2024-11-21 13:48 |
2020-01-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212829
|
7.2 |
HIGH
Network
|
sonicwall
|
sonicosv
sonicos
|
A vulnerability in SonicOS allow authenticated read-only admin can elevate permissions to configuration mode. This vulnerability affected SonicOS Gen 5 version 5.9.1.12-4o and earlier, Gen 6 version …
|
CWE-269
Improper Privilege Management
|
CVE-2019-7479
|
2024-11-21 13:48 |
2019-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212830
|
9.8 |
CRITICAL
Network
|
sonicwall
|
global_management_system
|
A vulnerability in GMS allow unauthenticated user to SQL injection in Webservice module. This vulnerability affected GMS versions GMS 8.4, 8.5, 8.6, 8.7, 9.0 and 9.1.
|
CWE-89
SQL Injection
|
CVE-2019-7478
|
2024-11-21 13:48 |
2019-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
