|
222941
|
9.8 |
CRITICAL
Network
|
gallagher
|
command_centre
|
An issue was discovered in Gallagher Command Centre 8.10 before 8.10.1092(MR2). Upon an upgrade, if a custom service account is in use and the visitor management service is installed, the Windows use…
|
CWE-532
Inclusion of Sensitive Information in Log Files
|
CVE-2019-15294
|
2024-11-21 13:28 |
2019-08-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222942
|
9.8 |
CRITICAL
Network
|
blackbox onelan
|
icompel_firmware net-top-box_firmware
|
Black Box iCOMPEL 9.2.3 through 11.1.4, as used in ONELAN Net-Top-Box 9.2.3 through 11.1.4 and other products, has default credentials that allow remote attackers to access devices remotely via SSH, …
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2019-15497
|
2024-11-21 13:28 |
2019-08-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222943
|
9.8 |
CRITICAL
Network
|
ncurses_project
|
ncurses
|
An issue was discovered in the ncurses crate through 5.99.0 for Rust. There are instr and mvwinstr buffer overflows because interaction with C functions is mishandled.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2019-15548
|
2024-11-21 13:28 |
2019-08-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222944
|
7.5 |
HIGH
Network
|
ncurses_project
|
ncurses
|
An issue was discovered in the ncurses crate through 5.99.0 for Rust. There are format string issues in printw functions because C format arguments are mishandled.
|
CWE-134
Use of Externally-Controlled Format String
|
CVE-2019-15547
|
2024-11-21 13:28 |
2019-08-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222945
|
7.5 |
HIGH
Network
|
pancurses_project
|
pancurses
|
An issue was discovered in the pancurses crate through 0.16.1 for Rust. printw and mvprintw have format string vulnerabilities.
|
CWE-134
Use of Externally-Controlled Format String
|
CVE-2019-15546
|
2024-11-21 13:28 |
2019-08-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222946
|
7.5 |
HIGH
Network
|
libp2p
|
libp2p
|
An issue was discovered in the libp2p-core crate before 0.8.1 for Rust. Attackers can spoof ed25519 signatures.
|
CWE-347
Improper Verification of Cryptographic Signature
|
CVE-2019-15545
|
2024-11-21 13:28 |
2019-08-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222947
|
7.5 |
HIGH
Network
|
rust-protobuf_project apache
|
rust-protobuf hbase
|
An issue was discovered in the protobuf crate before 2.6.0 for Rust. Attackers can exhaust all memory via Vec::reserve calls.
|
CWE-770
Allocation of Resources Without Limits or Throttling
|
CVE-2019-15544
|
2024-11-21 13:28 |
2019-08-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222948
|
9.8 |
CRITICAL
Network
|
slice-deque_project
|
slice-deque
|
An issue was discovered in the slice-deque crate before 0.2.0 for Rust. There is memory corruption in certain allocation cases.
|
CWE-787
Out-of-bounds Write
|
CVE-2019-15543
|
2024-11-21 13:28 |
2019-08-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222949
|
7.5 |
HIGH
Network
|
ammonia_project
|
ammonia
|
An issue was discovered in the ammonia crate before 2.1.0 for Rust. There is uncontrolled recursion during HTML DOM tree serialization.
|
CWE-674
Uncontrolled Recursion
|
CVE-2019-15542
|
2024-11-21 13:28 |
2019-08-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222950
|
9.8 |
CRITICAL
Network
|
xayr
|
xenfcoresharp
|
XENFCoreSharp before 2019-07-16 allows SQL injection in web/verify.php.
|
CWE-89
SQL Injection
|
CVE-2019-15533
|
2024-11-21 13:28 |
2019-08-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|