|
219921
|
5.4 |
MEDIUM
Network
|
servicenow
|
it_service_management
|
ServiceNow IT Service Management Kingston through Patch 14-1, London through Patch 7, and Madrid before patch 4 allow stored XSS via crafted sysparm_item_guid and sys_id parameters in an Incident Req…
|
CWE-79
Cross-site Scripting
|
CVE-2019-20768
|
2024-11-21 13:39 |
2020-05-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219922
|
7.8 |
HIGH
Local
|
lg
|
bridge
|
An issue was discovered in LG Bridge before April 2019 on Windows. DLL Hijacking can occur.
|
CWE-427
Uncontrolled Search Path Element
|
CVE-2019-20781
|
2024-11-21 13:39 |
2020-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219923
|
6.8 |
MEDIUM
Physics
|
opensc_project
|
opensc
|
OpenSC before 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in libopensc/card-coolkey.c lacks a uniqueness check.
|
CWE-415
Double Free
|
CVE-2019-20792
|
2024-11-21 13:39 |
2020-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219924
|
9.8 |
CRITICAL
Network
|
google
|
openthread
|
OpenThread before 2019-12-13 has a stack-based buffer overflow in MeshCoP::Commissioner::GeneratePskc.
|
CWE-787
Out-of-bounds Write
|
CVE-2019-20791
|
2024-11-21 13:39 |
2020-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219925
|
9.8 |
CRITICAL
Network
|
trusteddomain pypolicyd-spf_project fedoraproject
|
opendmarc pypolicyd-spf fedora
|
OpenDMARC through 1.3.2 and 1.4.x, when used with pypolicyd-spf 2.0.2, allows attacks that bypass SPF and DMARC authentication in situations where the HELO field is inconsistent with the MAIL FROM fi…
|
CWE-290
Authentication Bypass by Spoofing
|
CVE-2019-20790
|
2024-11-21 13:39 |
2020-04-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219926
|
4.8 |
MEDIUM
Network
|
croogo
|
croogo
|
Croogo before 3.0.7 allows XSS via the title to admin/menus/menus or admin/taxonomy/vocabularies.
|
CWE-79
Cross-site Scripting
|
CVE-2019-20789
|
2024-11-21 13:39 |
2020-04-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219927
|
9.8 |
CRITICAL
Network
|
libvnc_project canonical debian siemens
|
libvncserver ubuntu_linux debian_linux simatic_itc1500_firmware simatic_itc1500_pro_firmware simatic_itc1900_firmware simatic_itc1900_pro_firmware simatic_itc2200_firmware sim…
|
libvncclient/cursor.c in LibVNCServer through 0.9.12 has a HandleCursorShape integer overflow and heap-based buffer overflow via a large height or width value. NOTE: this may overlap CVE-2019-15690.
|
CWE-787 CWE-190
Out-of-bounds Write Integer Overflow or Wraparound
|
CVE-2019-20788
|
2024-11-21 13:39 |
2020-04-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219928
|
9.8 |
CRITICAL
Network
|
teeworlds opensuse
|
teeworlds leap
|
Teeworlds before 0.7.4 has an integer overflow when computing a tilemap size.
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2019-20787
|
2024-11-21 13:39 |
2020-04-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219929
|
9.8 |
CRITICAL
Network
|
pion
|
dtls
|
handleIncomingPacket in conn.go in Pion DTLS before 1.5.2 lacks a check for application data with epoch 0, which allows remote attackers to inject arbitrary unencrypted data after handshake completio…
|
CWE-287
Improper Authentication
|
CVE-2019-20786
|
2024-11-21 13:39 |
2020-04-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219930
|
6.8 |
MEDIUM
Physics
|
google
|
android
|
An issue was discovered on LG mobile devices with Android OS 8.0 and 8.1 software for the DTAG carrier. RILD in the radio layer uses an uninitialized variable. The LG ID is LVE-SMP-180013 (January 20…
|
CWE-908
Use of Uninitialized Resource
|
CVE-2019-20785
|
2024-11-21 13:39 |
2020-04-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|