|
218781
|
5.4 |
MEDIUM
Network
|
joruri
|
joruri_mail
|
Joruri Mail 2.1.4 and earlier does not properly manage sessions, which allows remote attackers to impersonate an arbitrary user and alter/disclose the information via unspecified vectors.
|
CWE-639
Authorization Bypass Through User-Controlled Key
|
CVE-2019-5966
|
2024-11-21 13:45 |
2019-07-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218782
|
6.1 |
MEDIUM
Network
|
joruri
|
joruri_mail
|
Open redirect vulnerability in Joruri Mail 2.1.4 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
|
CWE-601
Open Redirect
|
CVE-2019-5965
|
2024-11-21 13:45 |
2019-07-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218783
|
8.8 |
HIGH
Adjacent
|
idoors
|
idoors_reader
|
iDoors Reader 2.10.17 and earlier allows an attacker on the same network segment to bypass authentication to access the management console and operate the product via unspecified vectors.
|
CWE-287
Improper Authentication
|
CVE-2019-5964
|
2024-11-21 13:45 |
2019-07-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218784
|
8.8 |
HIGH
Network
|
zoho
|
salesiq
|
Cross-site request forgery (CSRF) vulnerability in Zoho SalesIQ 1.0.8 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
|
CWE-352
Origin Validation Error
|
CVE-2019-5963
|
2024-11-21 13:45 |
2019-07-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218785
|
6.1 |
MEDIUM
Network
|
zoho
|
salesiq
|
Cross-site scripting vulnerability in Zoho SalesIQ 1.0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
CWE-79
Cross-site Scripting
|
CVE-2019-5962
|
2024-11-21 13:45 |
2019-07-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218786
|
7.4 |
HIGH
Network
|
mastodon-tootdon
|
tootdon_for_mastodon
|
The Android App 'Tootdon for Mastodon' version 3.4.1 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive in…
|
CWE-295
Improper Certificate Validation
|
CVE-2019-5961
|
2024-11-21 13:45 |
2019-07-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218787
|
8.8 |
HIGH
Network
|
custom4web
|
wp_open_graph
|
Cross-site request forgery (CSRF) vulnerability in WP Open Graph 1.6.1 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
|
CWE-352
Origin Validation Error
|
CVE-2019-5960
|
2024-11-21 13:45 |
2019-07-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218788
|
8.8 |
HIGH
Network
|
freebsd
|
freebsd
|
In FreeBSD 12.0-STABLE before r349628, 12.0-RELEASE before 12.0-RELEASE-p7, 11.3-PRERELEASE before r349629, 11.3-RC3 before 11.3-RC3-p1, and 11.2-RELEASE before 11.2-RELEASE-p11, a bug in the cdrom d…
|
CWE-787 CWE-863
Out-of-bounds Write Incorrect Authorization
|
CVE-2019-5602
|
2024-11-21 13:45 |
2019-07-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218789
|
6.5 |
MEDIUM
Network
|
freebsd
|
freebsd
|
In FreeBSD 12.0-STABLE before r347474, 12.0-RELEASE before 12.0-RELEASE-p7, 11.2-STABLE before r347475, and 11.2-RELEASE before 11.2-RELEASE-p11, a bug in the FFS implementation causes up to three by…
|
CWE-200
Information Exposure
|
CVE-2019-5601
|
2024-11-21 13:45 |
2019-07-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218790
|
9.8 |
CRITICAL
Network
|
freebsd
|
freebsd
|
In FreeBSD 12.0-STABLE before r349622, 12.0-RELEASE before 12.0-RELEASE-p7, 11.3-PRERELEASE before r349624, 11.3-RC3 before 11.3-RC3-p1, and 11.2-RELEASE before 11.2-RELEASE-p11, a bug in iconv imple…
|
CWE-787
Out-of-bounds Write
|
CVE-2019-5600
|
2024-11-21 13:45 |
2019-07-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|