|
222151
|
8.8 |
HIGH
Network
|
portainer
|
portainer
|
Portainer before 1.22.1 has Incorrect Access Control (issue 4 of 4).
|
NVD-CWE-noinfo
|
CVE-2019-16877
|
2024-11-21 13:31 |
2019-11-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222152
|
7.5 |
HIGH
Network
|
portainer
|
portainer
|
Portainer before 1.22.1 allows Directory Traversal.
|
CWE-22
Path Traversal
|
CVE-2019-16876
|
2024-11-21 13:31 |
2019-11-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222153
|
9.9 |
CRITICAL
Network
|
portainer
|
portainer
|
Portainer before 1.22.1 has Incorrect Access Control (issue 1 of 4).
|
NVD-CWE-noinfo
|
CVE-2019-16872
|
2024-11-21 13:31 |
2019-11-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222154
|
6.5 |
MEDIUM
Network
|
portainer
|
portainer
|
Portainer before 1.22.1 has Incorrect Access Control (issue 2 of 4).
|
NVD-CWE-noinfo
|
CVE-2019-16874
|
2024-11-21 13:31 |
2019-11-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222155
|
5.4 |
MEDIUM
Network
|
portainer
|
portainer
|
Portainer before 1.22.1 has XSS (issue 1 of 2).
|
CWE-79
Cross-site Scripting
|
CVE-2019-16873
|
2024-11-21 13:31 |
2019-11-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222156
|
8.8 |
HIGH
Network
|
oxid-esales
|
eshop
|
An issue was discovered in OXID eShop 6.x before 6.0.6 and 6.1.x before 6.1.5, OXID eShop Enterprise Edition Version 5.2.x-5.3.x, OXID eShop Professional Edition Version 4.9.x-4.10.x and OXID eShop C…
|
CWE-384
Session Fixation
|
CVE-2019-17062
|
2024-11-21 13:31 |
2019-11-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222157
|
9.8 |
CRITICAL
Network
|
mbed
|
mbed
|
An integer overflow was discovered in the CoAP library in Arm Mbed OS 5.14.0. The function sn_coap_builder_calc_needed_packet_data_size_2() is used to calculate the required memory for the CoAP messa…
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2019-17211
|
2024-11-21 13:31 |
2019-11-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222158
|
9.8 |
CRITICAL
Network
|
mbed
|
mbed
|
Buffer overflows were discovered in the CoAP library in Arm Mbed OS 5.14.0. The CoAP parser is responsible for parsing received CoAP packets. The function sn_coap_parser_options_parse() parses CoAP i…
|
CWE-787 CWE-129
Out-of-bounds Write Improper Validation of Array Index
|
CVE-2019-17212
|
2024-11-21 13:31 |
2019-11-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222159
|
7.5 |
HIGH
Network
|
phantomjs
|
phantomjs
|
PhantomJS through 2.1.1 has an arbitrary file read vulnerability, as demonstrated by an XMLHttpRequest for a file:// URI. The vulnerability exists in the page.open() function of the webpage module, w…
|
CWE-552
Files or Directories Accessible to External Parties
|
CVE-2019-17221
|
2024-11-21 13:31 |
2019-11-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222160
|
7.5 |
HIGH
Network
|
arm
|
mbed-mqtt mbed-os
|
A denial-of-service issue was discovered in the MQTT library in Arm Mbed OS 2017-11-02. The function readMQTTLenString() is called by the function MQTTDeserialize_publish() to get the length and cont…
|
CWE-20
Improper Input Validation
|
CVE-2019-17210
|
2024-11-21 13:31 |
2019-11-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|