|
219731
|
9.6 |
CRITICAL
Network
|
dell
|
emc_isilonsd_management_server
|
IsilonSD Management Server 1.1.0 contains a cross-site scripting vulnerability while uploading an OVA file. A remote attacker can trick an admin user to potentially exploit this vulnerability to exec…
|
CWE-79
Cross-site Scripting
|
CVE-2019-3708
|
2024-11-21 13:42 |
2019-04-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219732
|
7.5 |
HIGH
Network
|
fedoraproject debian redhat
|
389_directory_server debian_linux enterprise_linux
|
In 389-ds-base up to version 1.4.1.2, requests are handled by workers threads. Each sockets will be waited by the worker for at most 'ioblocktimeout' seconds. However this timeout applies only for un…
|
CWE-772
Missing Release of Resource after Effective Lifetime
|
CVE-2019-3883
|
2024-11-21 13:42 |
2019-04-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219733
|
7.8 |
HIGH
Local
|
redhat
|
satellite
|
It was discovered that a world-readable log file belonging to Candlepin component of Red Hat Satellite 6.4 leaked the credentials of the Candlepin database. A malicious user with local access to a Sa…
|
CWE-532
Inclusion of Sensitive Information in Log Files
|
CVE-2019-3891
|
2024-11-21 13:42 |
2019-04-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219734
|
6.5 |
MEDIUM
Adjacent
|
linux canonical debian redhat
|
linux_kernel ubuntu_linux debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_for_real_time enterprise_linux_for_real_time…
|
A heap data infoleak in multiple locations including L2CAP_PARSE_CONF_RSP was found in the Linux kernel before 5.1-rc1.
|
CWE-20
Improper Input Validation
|
CVE-2019-3460
|
2024-11-21 13:42 |
2019-04-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219735
|
6.5 |
MEDIUM
Adjacent
|
linux canonical redhat debian
|
linux_kernel ubuntu_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_for_real_time enterprise_linux_for_real_…
|
A heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel before 5.1-rc1.
|
CWE-125
Out-of-bounds Read
|
CVE-2019-3459
|
2024-11-21 13:42 |
2019-04-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219736
|
7.5 |
HIGH
Network
|
verizon
|
fios_quantum_gateway_g1100_firmware
|
Information disclosure vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02.01.00.05 allows an remote, unauthenticated attacker to retrieve the value of the password salt by simp…
|
CWE-425
Direct Request ('Forced Browsing')
|
CVE-2019-3916
|
2024-11-21 13:42 |
2019-04-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219737
|
8.0 |
HIGH
Adjacent
|
redhat
|
satellite
|
A lack of access control was found in the message queues maintained by Satellite's QPID broker and used by katello-agent in versions before Satellite 6.2, Satellite 6.1 optional and Satellite Capsule…
|
NVD-CWE-Other
|
CVE-2019-3845
|
2024-11-21 13:42 |
2019-04-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219738
|
6.1 |
MEDIUM
Local
|
linux redhat
|
linux_kernel enterprise_linux
|
It was found that the net_dma code in tcp_recvmsg() in the 2.6.32 kernel as shipped in RHEL6 is thread-unsafe. So an unprivileged multi-threaded userspace application calling recvmsg() for the same n…
|
CWE-362 CWE-401
Race Condition Missing Release of Memory after Effective Lifetime
|
CVE-2019-3837
|
2024-11-21 13:42 |
2019-04-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219739
|
7.2 |
HIGH
Network
|
verizon
|
fios_quantum_gateway_g1100_firmware
|
Remote command injection vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02.01.00.05 allows a remote, authenticated attacker to execute arbitrary commands on the target device …
|
CWE-78
OS Command
|
CVE-2019-3914
|
2024-11-21 13:42 |
2019-04-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219740
|
8.1 |
HIGH
Network
|
mikrotik
|
routeros
|
MikroTik RouterOS versions Stable 6.43.12 and below, Long-term 6.42.12 and below, and Testing 6.44beta75 and below are vulnerable to an authenticated, remote directory traversal via the HTTP or Winbo…
|
CWE-22
Path Traversal
|
CVE-2019-3943
|
2024-11-21 13:42 |
2019-04-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|