|
222281
|
4.1 |
MEDIUM
Local
|
linux
|
linux_kernel
|
An issue was discovered in the Linux kernel through 5.2.13. nbd_genl_status in drivers/block/nbd.c does not check the nla_nest_start_noflag return value.
|
CWE-476
NULL Pointer Dereference
|
CVE-2019-16089
|
2024-11-21 13:30 |
2019-09-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222282
|
5.5 |
MEDIUM
Local
|
glyphandcog
|
xpdfreader
|
Xpdf 3.04 has a SIGSEGV in XRef::fetch in XRef.cc after many recursive calls to Catalog::countPageTree in Catalog.cc.
|
CWE-674
Uncontrolled Recursion
|
CVE-2019-16088
|
2024-11-21 13:30 |
2019-09-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222283
|
6.5 |
MEDIUM
Network
|
cisco
|
vision_dynamic_signage_director
|
A vulnerability in the REST API endpoint of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to bypass authentication on an affected device. The vulnerability is …
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2019-16004
|
2024-11-21 13:29 |
2020-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222284
|
9.8 |
CRITICAL
Network
|
cisco
|
firepower_management_center
|
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions…
|
CWE-287
Improper Authentication
|
CVE-2019-16028
|
2024-11-21 13:29 |
2020-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222285
|
4.8 |
MEDIUM
Network
|
cisco
|
emergency_responder
|
A vulnerability in the web framework of Cisco Emergency Responder could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based manageme…
|
CWE-79
Cross-site Scripting
|
CVE-2019-16025
|
2024-11-21 13:29 |
2020-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222286
|
7.5 |
HIGH
Network
|
cisco
|
ios_xr
|
Multiple vulnerabilities in the implementation of Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a d…
|
NVD-CWE-noinfo
|
CVE-2019-16023
|
2024-11-21 13:29 |
2020-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222287
|
7.5 |
HIGH
Network
|
cisco
|
ios_xr
|
Multiple vulnerabilities in the implementation of Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a d…
|
NVD-CWE-noinfo
|
CVE-2019-16021
|
2024-11-21 13:29 |
2020-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222288
|
8.6 |
HIGH
Network
|
cisco
|
ios_xr
|
Multiple vulnerabilities in the implementation of Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a d…
|
NVD-CWE-noinfo
|
CVE-2019-16019
|
2024-11-21 13:29 |
2020-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222289
|
6.8 |
MEDIUM
Network
|
cisco
|
unified_customer_voice_portal
|
A vulnerability in the Operations, Administration, Maintenance and Provisioning (OAMP) OpsConsole Server for Cisco Unified Customer Voice Portal (CVP) could allow an authenticated, remote attacker to…
|
CWE-20
Improper Input Validation
|
CVE-2019-16017
|
2024-11-21 13:29 |
2020-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222290
|
8.8 |
HIGH
Network
|
cisco
|
ios ios_xe
|
A vulnerability in the web UI of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The v…
|
CWE-352
Origin Validation Error
|
CVE-2019-16009
|
2024-11-21 13:29 |
2020-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|