|
223311
|
9.8 |
CRITICAL
Network
|
bzip debian opensuse canonical freebsd python
|
bzip2 debian_linux leap ubuntu_linux freebsd python
|
BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.
|
CWE-787
Out-of-bounds Write
|
CVE-2019-12900
|
2024-11-21 13:23 |
2019-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223312
|
9.8 |
CRITICAL
Network
|
deltaww
|
devicenet_builder
|
Delta Electronics DeviceNet Builder 2.04 has a User Mode Write AV starting at ntdll!RtlQueueWorkItem+0x00000000000005e3.
|
CWE-787
Out-of-bounds Write
|
CVE-2019-12899
|
2024-11-21 13:23 |
2019-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223313
|
9.8 |
CRITICAL
Network
|
deltaww
|
devicenet_builder
|
Delta Electronics DeviceNet Builder 2.04 has a User Mode Write AV starting at image00400000+0x000000000017a45e.
|
CWE-787
Out-of-bounds Write
|
CVE-2019-12898
|
2024-11-21 13:23 |
2019-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223314
|
7.5 |
HIGH
Network
|
edrawsoft
|
edraw_max
|
Edraw Max 7.9.3 has a Read Access Violation at the Instruction Pointer after a call from ObjectModule!Paint::Clear+0x0000000000000074.
|
CWE-125
Out-of-bounds Read
|
CVE-2019-12897
|
2024-11-21 13:23 |
2019-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223315
|
7.5 |
HIGH
Network
|
edrawsoft
|
edraw_max
|
Edraw Max 7.9.3 has Heap Corruption starting at ntdll!RtlpNtMakeTemporaryKey+0x0000000000001a77.
|
CWE-787
Out-of-bounds Write
|
CVE-2019-12896
|
2024-11-21 13:23 |
2019-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223316
|
7.5 |
HIGH
Network
|
alternate-tools
|
alternate_pic_view
|
In Alternate Pic View 2.600, the Exception Handler Chain is Corrupted starting at PicViewer!PerfgrapFinalize+0x00000000000b916d.
|
CWE-787
Out-of-bounds Write
|
CVE-2019-12895
|
2024-11-21 13:23 |
2019-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223317
|
7.5 |
HIGH
Network
|
alternate-tools
|
alternate_pic_view
|
Alternate Pic View 2.600 has a Read Access Violation at the Instruction Pointer after a call from PicViewer!PerfgrapFinalize+0x00000000000a9a1b.
|
CWE-125
Out-of-bounds Read
|
CVE-2019-12894
|
2024-11-21 13:23 |
2019-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223318
|
7.5 |
HIGH
Network
|
alternate-tools
|
alternate_pic_view
|
Alternate Pic View 2.600 has a User Mode Write AV starting at PicViewer!PerfgrapFinalize+0x00000000000a8868.
|
CWE-787
Out-of-bounds Write
|
CVE-2019-12893
|
2024-11-21 13:23 |
2019-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223319
|
9.8 |
CRITICAL
Network
|
redwoodhq
|
redwoodhq
|
RedwoodHQ 2.5.5 does not require any authentication for database operations, which allows remote attackers to create admin users via a con.automationframework users insert_one call.
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2019-12890
|
2024-11-21 13:23 |
2019-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223320
|
5.9 |
MEDIUM
Network
|
fasterxml debian
|
jackson-databind debian_linux
|
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x through 2.9.9. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON e…
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2019-12814
|
2024-11-21 13:23 |
2019-06-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|