|
224321
|
4.3 |
MEDIUM
Network
|
gitlab
|
gitlab
|
Unauthorized Access to the Container Registry of other groups was discovered in GitLab Enterprise 12.0.0-pre. In other words, authenticated remote attackers can read Docker registries of other groups…
|
CWE-922
Insecure Storage of Sensitive Information
|
CVE-2019-12825
|
2024-11-21 13:23 |
2020-02-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224322
|
7.5 |
HIGH
Network
|
squid-cache fedoraproject debian opensuse canonical
|
squid fedora debian_linux leap ubuntu_linux
|
An issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger disclosure of sensitive information from heap memory, such as information associated with other users' sessions…
|
NVD-CWE-noinfo
|
CVE-2019-12528
|
2024-11-21 13:23 |
2020-02-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224323
|
7.5 |
HIGH
Network
|
acinq
|
eclair
|
Eclair through 0.3 allows attackers to trigger loss of funds because of Incorrect Access Control. NOTE: README.md states "it is beta-quality software and don't put too much money in it."
|
NVD-CWE-Other
|
CVE-2019-13000
|
2024-11-21 13:23 |
2020-02-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224324
|
7.5 |
HIGH
Network
|
lightning
|
network_daemon
|
Lightning Network Daemon (lnd) before 0.7 allows attackers to trigger loss of funds because of Incorrect Access Control.
|
NVD-CWE-Other
|
CVE-2019-12999
|
2024-11-21 13:23 |
2020-02-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224325
|
7.5 |
HIGH
Network
|
elementsproject
|
c-lightning
|
c-lightning before 0.7.1 allows attackers to trigger loss of funds because of Incorrect Access Control. NOTE: README.md states "It can be used for testing, but it should not be used for real funds."
|
NVD-CWE-Other
|
CVE-2019-12998
|
2024-11-21 13:23 |
2020-02-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224326
|
7.2 |
HIGH
Network
|
cisco
|
sd-wan_firmware
|
A vulnerability in the WebUI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject and execute arbitrary commands with vmanage user privileges on an affected system. Th…
|
CWE-78
OS Command
|
CVE-2019-12629
|
2024-11-21 13:23 |
2020-01-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224327
|
6.5 |
MEDIUM
Network
|
cisco
|
sd-wan_firmware
|
A vulnerability in the web interface for Cisco SD-WAN Solution vManage could allow an authenticated, remote attacker to impact the integrity of an affected system by executing arbitrary SQL queries. …
|
CWE-89
SQL Injection
|
CVE-2019-12619
|
2024-11-21 13:23 |
2020-01-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224328
|
4.3 |
MEDIUM
Network
|
gencat
|
portal_d\'acces_a_la_universitat
|
The Java API in accesuniversitat.gencat.cat 1.7.5 allows remote attackers to get personal information of all registered students via several API endpoints.
|
CWE-706 CWE-863
Use of Incorrectly-Resolved Name or Reference Incorrect Authorization
|
CVE-2019-12837
|
2024-11-21 13:23 |
2020-01-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224329
|
9.8 |
CRITICAL
Network
|
open_tftp_server_project
|
open_tftp_server
|
Stack-based overflow vulnerability in the logMess function in Open TFTP Server SP 1.66 and earlier allows remote attackers to perform a denial of service or execute arbitrary code via a long TFTP err…
|
CWE-787
Out-of-bounds Write
|
CVE-2019-12568
|
2024-11-21 13:23 |
2019-12-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224330
|
9.8 |
CRITICAL
Network
|
open_tftp_server_project
|
open_tftp_server
|
Stack-based overflow vulnerability in the logMess function in Open TFTP Server MT 1.65 and earlier allows remote attackers to perform a denial of service or execute arbitrary code via a long TFTP err…
|
CWE-787
Out-of-bounds Write
|
CVE-2019-12567
|
2024-11-21 13:23 |
2019-12-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|