|
222041
|
6.1 |
MEDIUM
Network
|
stylemixthemes
|
motors_-_car_dealer\ _classifieds_\&_listing
|
includes/options.php in the motors-car-dealership-classified-listings (aka Motors - Car Dealer & Classified Ads) plugin through 1.4.0 for WordPress has multiple stored XSS issues.
|
CWE-79
Cross-site Scripting
|
CVE-2019-17229
|
2024-11-21 13:31 |
2020-02-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222042
|
6.5 |
MEDIUM
Network
|
stylemixthemes
|
motors_-_car_dealer\ _classifieds_\&_listing
|
includes/options.php in the motors-car-dealership-classified-listings (aka Motors - Car Dealer & Classified Ads) plugin through 1.4.0 for WordPress allows unauthenticated options changes.
|
CWE-345
Insufficient Verification of Data Authenticity
|
CVE-2019-17228
|
2024-11-21 13:31 |
2020-02-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222043
|
9.4 |
CRITICAL
Network
|
netgear
|
ac1200_r6220_firmware
|
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR AC1200 R6220 Firmware version 1.1.0.86 Smart WiFi Router. Authentication is not requ…
|
NVD-CWE-Other
|
CVE-2019-17137
|
2024-11-21 13:31 |
2020-02-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222044
|
6.5 |
MEDIUM
Adjacent
|
cypress
|
psoc_4_ble
|
The Bluetooth Low Energy (BLE) stack implementation on Cypress PSoC 4 through 3.62 devices does not properly restrict the BLE Link Layer header and executes certain memory contents upon receiving a p…
|
CWE-120
Classic Buffer Overflow
|
CVE-2019-17061
|
2024-11-21 13:31 |
2020-02-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222045
|
6.5 |
MEDIUM
Adjacent
|
nxp
|
mcuxpresso_software_development_kit
|
The Bluetooth Low Energy (BLE) stack implementation on the NXP KW41Z (based on the MCUXpresso SDK with Bluetooth Low Energy Driver 2.2.1 and earlier) does not properly restrict the BLE Link Layer hea…
|
CWE-120
Classic Buffer Overflow
|
CVE-2019-17060
|
2024-11-21 13:31 |
2020-02-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222046
|
7.8 |
HIGH
Local
|
foxitsoftware
|
phantompdf
|
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the …
|
CWE-125
Out-of-bounds Read
|
CVE-2019-17136
|
2024-11-21 13:31 |
2020-02-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222047
|
7.8 |
HIGH
Local
|
foxitsoftware
|
phantompdf
|
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the …
|
CWE-787
Out-of-bounds Write
|
CVE-2019-17135
|
2024-11-21 13:31 |
2020-02-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222048
|
9.8 |
CRITICAL
Network
|
omniauth-weibo-oauth2_project
|
omniauth-weibo-oauth2
|
The omniauth-weibo-oauth2 gem 0.4.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. Versions through 0.4.5, and 0.5.1 and later, are unaffected.
|
CWE-94
Code Injection
|
CVE-2019-17268
|
2024-11-21 13:31 |
2020-02-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222049
|
7.5 |
HIGH
Network
|
tp-link
|
tp-sg105e_firmware
|
The Web Management of TP-Link TP-SG105E V4 1.0.0 Build 20181120 devices allows an unauthenticated attacker to reboot the device via a reboot.cgi request.
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2019-16893
|
2024-11-21 13:31 |
2020-02-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222050
|
7.8 |
HIGH
Local
|
bitdefender
|
endpoint_security_tools
|
An Untrusted Search Path vulnerability in EPSecurityService.exe as used in Bitdefender Endpoint Security Tools versions prior to 6.6.11.163 allows an attacker to load an arbitrary DLL file from the s…
|
CWE-426
Untrusted Search Path
|
CVE-2019-17099
|
2024-11-21 13:31 |
2020-01-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|