|
218601
|
7.5 |
HIGH
Network
|
siemens
|
logo\!8_firmware
|
A vulnerability has been identified in SIEMENS LOGO!8 (6ED1052-xyyxx-0BA8 FS:01 to FS:06 / Firmware version V1.80.xx and V1.81.xx), SIEMENS LOGO!8 (6ED1052-xyy08-0BA0 FS:01 / Firmware version < V1.82…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2019-6571
|
2024-11-21 13:46 |
2019-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218602
|
5.5 |
MEDIUM
Local
|
siemens
|
scalance_x-200_firmware
scalance_x-200irt_firmware
scalance_x-300_firmware
scalance_x-414-3e_firmware
|
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All Versions < V5.2.4), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5…
|
CWE-522
Insufficiently Protected Credentials
|
CVE-2019-6567
|
2024-11-21 13:46 |
2019-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218603
|
7.5 |
HIGH
Network
|
bevywise
|
mqttroute
|
In Bevywise MQTTRoute 1.1 build 1018-002, a connect packet combined with a malformed unsubscribe request packet can be used to cause a Denial of Service attack against the broker.
|
NVD-CWE-noinfo
|
CVE-2019-6241
|
2024-11-21 13:46 |
2019-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218604
|
7.8 |
HIGH
Local
|
panasonic
|
control_fpwin_pro
|
Panasonic FPWIN Pro version 7.3.0.0 and prior allows attacker-created project files to be loaded by an authenticated user triggering incompatible type errors because the resource does not have expect…
|
CWE-843
Type Confusion
|
CVE-2019-6532
|
2024-11-21 13:46 |
2019-06-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218605
|
7.8 |
HIGH
Local
|
panasonic
|
control_fpwin_pro
|
Panasonic FPWIN Pro version 7.3.0.0 and prior allows attacker-created project files to be loaded by an authenticated user causing heap-based buffer overflows, which may lead to remote code execution.
|
CWE-787
Out-of-bounds Write
|
CVE-2019-6530
|
2024-11-21 13:46 |
2019-06-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218606
|
8.8 |
HIGH
Network
|
kyocera
|
command_center_rx
|
Kyocera Command Center RX TASKalfa4501i and TASKalfa5052ci allows remote attackers to abuse the Test button in the machine address book to obtain a cleartext FTP or SMB password.
|
CWE-522
Insufficiently Protected Credentials
|
CVE-2019-6452
|
2024-11-21 13:46 |
2019-06-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218607
|
7.5 |
HIGH
Network
|
soyal
|
ar-727h_firmware
ar-829ev5_firmware
|
On SOYAL AR-727H and AR-829Ev5 devices, all CGI programs allow unauthenticated POST access.
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2019-6451
|
2024-11-21 13:46 |
2019-06-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218608
|
4.7 |
MEDIUM
Network
|
liferay
|
liferay_portal
|
In Liferay Portal before 7.1 CE GA4, an XSS vulnerability exists in the SimpleCaptcha API when custom code passes unsanitized input into the "url" parameter of the JSP taglib call <liferay-ui:captcha…
|
CWE-79
Cross-site Scripting
|
CVE-2019-6588
|
2024-11-21 13:46 |
2019-06-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218609
|
6.8 |
MEDIUM
Network
|
hp
|
z4_g4_workstation_firmware
z4_g4_core-x_workstation_firmware
z6_g4_workstation_firmware
z8_g4_workstation_firmware
|
HP has identified a security vulnerability with some versions of Workstation BIOS (UEFI Firmware) where the runtime BIOS code could be tampered with if the TPM is disabled. This vulnerability relates…
|
CWE-667
Improper Locking
|
CVE-2019-6322
|
2024-11-21 13:46 |
2019-05-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218610
|
7.2 |
HIGH
Network
|
hp
|
z4_g4_workstation_firmware
z4_g4_core-x_workstation_firmware
z6_g4_workstation_firmware
z8_g4_workstation_firmware
|
HP has identified a security vulnerability with some versions of Workstation BIOS (UEFI Firmware) where the runtime BIOS code could be tampered with if the TPM is disabled. This vulnerability relates…
|
CWE-667
Improper Locking
|
CVE-2019-6321
|
2024-11-21 13:46 |
2019-05-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
