|
224201
|
7.8 |
HIGH
Local
|
nsa
|
ghidra
|
In NSA Ghidra before 9.1, path traversal can occur in RestoreTask.java (from the package ghidra.app.plugin.core.archive) via an archive with an executable file that has an initial ../ in its filename…
|
CWE-22
Path Traversal
|
CVE-2019-13623
|
2024-11-21 13:25 |
2019-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224202
|
7.5 |
HIGH
Network
|
gpac
|
gpac
|
In GPAC before 0.8.0, isomedia/isom_read.c in libgpac.a has a heap-based buffer over-read, as demonstrated by a crash in gf_m2ts_sync in media_tools/mpegts.c.
|
CWE-125
Out-of-bounds Read
|
CVE-2019-13618
|
2024-11-21 13:25 |
2019-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224203
|
6.5 |
MEDIUM
Network
|
f5
|
njs
|
njs through 0.3.3, used in NGINX, has a heap-based buffer over-read in nxt_vsprintf in nxt/nxt_sprintf.c during error handling, as demonstrated by an njs_regexp_literal call that leads to an njs_pars…
|
CWE-125
Out-of-bounds Read
|
CVE-2019-13617
|
2024-11-21 13:25 |
2019-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224204
|
8.1 |
HIGH
Network
|
libsdl
debian
opensuse
fedoraproject
canonical
redhat
|
simple_directmedia_layer
debian_linux
leap
backports_sle
fedora
ubuntu_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux<…
|
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c when called from SDL_SoftBlit in video/SDL_blit.c.
|
CWE-125
Out-of-bounds Read
|
CVE-2019-13616
|
2024-11-21 13:25 |
2019-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224205
|
5.5 |
MEDIUM
Local
|
videolan
|
vlc_media_player
|
libebml before 1.3.6, as used in the MKV module in VideoLAN VLC Media Player binaries before 3.0.3, has a heap-based buffer over-read in EbmlElement::FindNextElement.
|
CWE-125
Out-of-bounds Read
|
CVE-2019-13615
|
2024-11-21 13:25 |
2019-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224206
|
8.8 |
HIGH
Network
|
control-webpanel
|
webpanel
|
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.838 to 0.9.8.846, remote attackers can bypass authentication in the login process by leveraging the knowledge of a valid username. The attacker…
|
CWE-639
Authorization Bypass Through User-Controlled Key
|
CVE-2019-13605
|
2024-11-21 13:25 |
2019-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224207
|
5.9 |
MEDIUM
Network
|
hidglobal
|
digital_persona_u.are.u_4500_driver_firmware
|
An issue was discovered in the HID Global DigitalPersona (formerly Crossmatch) U.are.U 4500 Fingerprint Reader Windows Biometric Framework driver 5.0.0.5. It has a statically coded initialization vec…
|
CWE-330
Use of Insufficiently Random Values
|
CVE-2019-13603
|
2024-11-21 13:25 |
2019-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224208
|
7.5 |
HIGH
Network
|
altn
|
mdaemon_email_server
|
MDaemon Email Server 19 through 20.0.1 skips SpamAssassin checks by default for e-mail messages larger than 2 MB (and limits checks to 10 MB even with special configuration), which is arguably incons…
|
CWE-20
Improper Input Validation
|
CVE-2019-13612
|
2024-11-21 13:25 |
2019-07-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224209
|
8.8 |
HIGH
Network
|
python-engineio_project
|
python-engineio
|
An issue was discovered in python-engineio through 3.8.2. There is a Cross-Site WebSocket Hijacking (CSWSH) vulnerability that allows attackers to make WebSocket connections to a server by using a vi…
|
CWE-352
Origin Validation Error
|
CVE-2019-13611
|
2024-11-21 13:25 |
2019-07-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224210
|
5.9 |
MEDIUM
Network
|
assaabloy
|
hid_digitalpersona_4500_firmware
|
There is a short key vulnerability in HID Global DigitalPersona (formerly Crossmatch) U.are.U 4500 Fingerprint Reader v24. The key for obfuscating the fingerprint image is vulnerable to brute-force a…
|
CWE-327
Use of a Broken or Risky Cryptographic Algorithm
|
CVE-2019-13604
|
2024-11-21 13:25 |
2019-07-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
