|
219741
|
7.6 |
HIGH
Physics
|
capsuletech
|
smartlinx_neuron_2_firmware
|
A restricted environment escape vulnerability exists in the “kiosk mode” function of Capsule Technologies SmartLinx Neuron 2 medical information collection devices running versions 9.0.3 or lower. A …
|
NVD-CWE-noinfo
|
CVE-2019-5024
|
2024-11-21 13:44 |
2019-04-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219742
|
4.8 |
MEDIUM
Network
|
ui
|
edgeswitch_x
|
In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, an unauthenticated user can use the "local port forwarding" and "dynamic port forwarding" (SOCKS proxy) functionalities. Remote attackers without c…
|
CWE-287
Improper Authentication
|
CVE-2019-5426
|
2024-11-21 13:44 |
2019-04-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219743
|
8.8 |
HIGH
Network
|
ui
|
edgeswitch_x
|
In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, an authenticated user can execute arbitrary shell commands over the SSH interface bypassing the CLI interface, which allow them to escalate privile…
|
CWE-78
OS Command
|
CVE-2019-5425
|
2024-11-21 13:44 |
2019-04-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219744
|
8.8 |
HIGH
Network
|
ui
|
edgeswitch_x
|
In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, a privileged user can execute arbitrary shell commands over the SSH CLI interface. This allows to execute shell commands under the root user.
|
CWE-78
OS Command
|
CVE-2019-5424
|
2024-11-21 13:44 |
2019-04-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219745
|
7.5 |
HIGH
Network
|
http-live-simulator_project
|
http-live-simulator
|
Path traversal vulnerability in http-live-simulator npm package version 1.0.5 allows arbitrary path to be accessed on the file system by a remote attacker.
|
CWE-22
Path Traversal
|
CVE-2019-5423
|
2024-11-21 13:44 |
2019-04-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219746
|
6.1 |
MEDIUM
Network
|
buttle_project
|
buttle
|
XSS in buttle npm package version 0.2.0 causes execution of attacker-provided code in the victim's browser when an attacker creates an arbitrary file on the server.
|
CWE-79
Cross-site Scripting
|
CVE-2019-5422
|
2024-11-21 13:44 |
2019-04-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219747
|
9.8 |
CRITICAL
Network
|
plataformatec
|
devise
|
Plataformatec Devise version 4.5.0 and earlier, using the lockable module contains a CWE-367 vulnerability in The `Devise::Models::Lockable` class, more specifically at the `#increment_failed_attempt…
|
CWE-307
mproper Restriction of Excessive Authentication Attempts
|
CVE-2019-5421
|
2024-11-21 13:44 |
2019-04-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219748
|
9.8 |
CRITICAL
Network
|
rubyonrails
debian
fedoraproject
|
rails
debian_linux
fedora
|
A remote code execution vulnerability in development mode Rails <5.2.2.1, <6.0.0.beta3 can allow an attacker to guess the automatically generated development mode secret token. This secret token can …
|
CWE-330
Use of Insufficiently Random Values
|
CVE-2019-5420
|
2024-11-21 13:44 |
2019-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219749
|
7.5 |
HIGH
Network
|
rubyonrails
debian
redhat
opensuse
fedoraproject
|
rails
debian_linux
software_collections
cloudforms
leap
fedora
|
There is a possible denial of service vulnerability in Action View (Rails) <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 where specially crafted accept headers can cause action view to consume 100% cpu and…
|
CWE-770
Allocation of Resources Without Limits or Throttling
|
CVE-2019-5419
|
2024-11-21 13:44 |
2019-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219750
|
7.5 |
HIGH
Network
|
rubyonrails
debian
redhat
opensuse
fedoraproject
|
rails
debian_linux
cloudforms
leap
fedora
software_collections
|
There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 where specially crafted accept headers can cause contents of arbitrary files on the targ…
|
NVD-CWE-noinfo
|
CVE-2019-5418
|
2024-11-21 13:44 |
2019-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
