|
221891
|
5.4 |
MEDIUM
Network
|
altn
|
mdaemon_email_server
|
MDaemon Email Server 17.5.1 allows XSS via the filename of an attachment to an email message.
|
CWE-79
Cross-site Scripting
|
CVE-2019-19497
|
2024-11-21 13:34 |
2019-12-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221892
|
7.8 |
HIGH
Local
|
linux
|
linux_kernel
|
In the Linux kernel before 5.4.2, the io_uring feature leads to requests that inadvertently have UID 0 and full capabilities, aka CID-181e448d8709. This is related to fs/io-wq.c, fs/io_uring.c, and n…
|
NVD-CWE-noinfo
|
CVE-2019-19241
|
2024-11-21 13:34 |
2019-12-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221893
|
7.1 |
HIGH
Local
|
nalpeiron
|
licensing_service
|
NLSSRV32.EXE in Nalpeiron Licensing Service 7.3.4.0, as used with Nitro PDF and other products, allows Elevation of Privilege via the \\.\mailslot\nlsX86ccMailslot mailslot.
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2019-19315
|
2024-11-21 13:34 |
2019-12-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221894
|
7.5 |
HIGH
Network
|
simplifile
|
recordfusion
|
In Simplifile RecordFusion through 2019-11-25, the logs and hist parameters allow remote attackers to access local files via a logger/logs?/../ or logger/hist?/../ URI.
|
CWE-22
Path Traversal
|
CVE-2019-19264
|
2024-11-21 13:34 |
2019-12-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221895
|
6.1 |
MEDIUM
Network
|
maxum
|
rumpus
|
A Reflected Cross Site Scripting was discovered in the Login page of Rumpus FTP Web File Manager 8.2.9.1. An attacker can exploit it by sending a crafted link to end users and can execute arbitrary J…
|
CWE-79
Cross-site Scripting
|
CVE-2019-19368
|
2024-11-21 13:34 |
2019-12-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221896
|
7.5 |
HIGH
Network
|
nic debian
|
knot_resolver debian_linux
|
knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with very many resource records might be processed very inefficiently, in extreme cases…
|
CWE-404
Improper Resource Shutdown or Release
|
CVE-2019-19331
|
2024-11-21 13:34 |
2019-12-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221897
|
7.5 |
HIGH
Network
|
huawei
|
s12700_firmware s1700_firmware s2700_firmware s5700_firmware s6700_firmware s7700_firmware s9700_firmware
|
There is a weak algorithm vulnerability in some Huawei products. The affected products use weak algorithms by default. Attackers may exploit the vulnerability to cause information leaks.
|
NVD-CWE-noinfo
|
CVE-2019-19397
|
2024-11-21 13:34 |
2019-12-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221898
|
7.8 |
HIGH
Local
|
idrix
|
veracrypt
|
VeraCrypt 1.24 allows Local Privilege Escalation during execution of VeraCryptExpander.exe.
|
NVD-CWE-noinfo
|
CVE-2019-19501
|
2024-11-21 13:34 |
2019-12-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221899
|
7.8 |
HIGH
Local
|
ea
|
origin
|
Electronic Arts Origin through 10.5.x allows Elevation of Privilege (issue 2 of 2).
|
NVD-CWE-noinfo
|
CVE-2019-19248
|
2024-11-21 13:34 |
2019-12-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221900
|
7.8 |
HIGH
Local
|
ea
|
origin
|
Electronic Arts Origin through 10.5.x allows Elevation of Privilege (issue 1 of 2).
|
NVD-CWE-noinfo
|
CVE-2019-19247
|
2024-11-21 13:34 |
2019-12-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|