|
222381
|
5.3 |
MEDIUM
Network
|
cisco
|
ucs_director
|
A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to download system log files from an affected device. The vulnerability is …
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2019-16003
|
2024-11-21 13:29 |
2020-01-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222382
|
8.6 |
HIGH
Network
|
cisco
|
ios_xr
|
A vulnerability in the implementation of the Border Gateway Protocol (BGP) functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) co…
|
CWE-754
Improper Check for Unusual or Exceptional Conditions
|
CVE-2019-15989
|
2024-11-21 13:29 |
2020-01-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222383
|
7.2 |
HIGH
Network
|
fortinet
|
fortimail
|
An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow administrators to access web console they should not be authorized for.
|
NVD-CWE-noinfo
|
CVE-2019-15712
|
2024-11-21 13:29 |
2020-01-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222384
|
4.9 |
MEDIUM
Network
|
fortinet
|
fortimail
|
An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow administrators to perform system backup config download they should not be authoriz…
|
NVD-CWE-noinfo
|
CVE-2019-15707
|
2024-11-21 13:29 |
2020-01-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222385
|
5.5 |
MEDIUM
Local
|
trendmicro
|
password_manager
|
A memory usage vulnerability exists in Trend Micro Password Manager 3.8 that could allow an attacker with access and permissions to the victim's memory processes to extract sensitive information.
|
NVD-CWE-noinfo
|
CVE-2019-15625
|
2024-11-21 13:29 |
2020-01-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222386
|
9.1 |
CRITICAL
Network
|
maarch
|
maarch_rm
|
An issue was discovered in Maarch RM before 2.5. A path traversal vulnerability allows an unauthenticated remote attacker to overwrite any files with a crafted POST request if the default installatio…
|
CWE-22
Path Traversal
|
CVE-2019-15855
|
2024-11-21 13:29 |
2020-01-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222387
|
8.8 |
HIGH
Network
|
maarch
|
maarch_rm
|
An issue was discovered in Maarch RM before 2.5. A privilege escalation vulnerability allows an authenticated user with lowest privileges to give herself highest administration privileges via a craft…
|
NVD-CWE-noinfo
|
CVE-2019-15854
|
2024-11-21 13:29 |
2020-01-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222388
|
7.8 |
HIGH
Local
|
plantronics
|
plantronics_hub
|
A local privilege-escalation vulnerability exists in the Poly Plantronics Hub before 3.14 for Windows client application. A local attacker can exploit this issue to gain elevated privileges.
|
NVD-CWE-noinfo
|
CVE-2019-15742
|
2024-11-21 13:29 |
2020-01-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222389
|
6.5 |
MEDIUM
Network
|
clamav cisco debian canonical
|
clamav email_security_appliance_firmware debian_linux ubuntu_linux
|
A vulnerability in the email parsing module Clam AntiVirus (ClamAV) Software versions 0.102.0, 0.101.4 and prior could allow an unauthenticated, remote attacker to cause a denial of service condition…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2019-15961
|
2024-11-21 13:29 |
2020-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222390
|
6.1 |
MEDIUM
Network
|
seeftl_project
|
seeftl
|
The seefl package v0.1.1 is vulnerable to a stored Cross-Site Scripting (XSS) vulnerability via a malicious filename rendered in a directory listing.
|
CWE-79
Cross-site Scripting
|
CVE-2019-15603
|
2024-11-21 13:29 |
2020-01-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|