|
219821
|
9.8 |
CRITICAL
Network
|
webchess_project
|
webchess
|
WebChess 1.0 allows SQL injection via the messageFrom, gameID, opponent, messageID, or to parameter.
|
CWE-89
SQL Injection
|
CVE-2019-20896
|
2024-11-21 13:39 |
2020-07-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219822
|
7.5 |
HIGH
Network
|
traefik
|
traefik
|
Traefik 2.x, in certain configurations, allows HTTPS sessions to proceed without mutual TLS verification in a situation where ERR_BAD_SSL_CLIENT_AUTH_CERT should have occurred.
|
CWE-295
Improper Certificate Validation
|
CVE-2019-20894
|
2024-11-21 13:39 |
2020-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219823
|
9.8 |
CRITICAL
Network
|
activision
|
call_of_duty_modern_warfare_2
|
An issue was discovered in Activision Infinity Ward Call of Duty Modern Warfare 2 through 2019-12-11. PartyHost_HandleJoinPartyRequest has a buffer overflow vulnerability and can be exploited by usin…
|
CWE-120
Classic Buffer Overflow
|
CVE-2019-20893
|
2024-11-21 13:39 |
2020-06-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219824
|
6.5 |
MEDIUM
Network
|
net-snmp oracle
|
net-snmp zfs_storage_appliance_kit
|
net-snmp before 5.8.1.pre1 has a double free in usm_free_usmStateReference in snmplib/snmpusm.c via an SNMPv3 GetBulk request. NOTE: this affects net-snmp packages shipped to end users by multiple Li…
|
CWE-415
Double Free
|
CVE-2019-20892
|
2024-11-21 13:39 |
2020-06-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219825
|
8.8 |
HIGH
Network
|
woocommerce
|
woocommerce
|
WooCommerce before 3.6.5, when it handles CSV imports of products, has a cross-site request forgery (CSRF) issue with resultant stored cross-site scripting (XSS) via includes/admin/importers/class-wc…
|
CWE-352
Origin Validation Error
|
CVE-2019-20891
|
2024-11-21 13:39 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219826
|
4.3 |
MEDIUM
Network
|
mattermost
|
mattermost_server
|
An issue was discovered in Mattermost Server before 5.7. It allows a bypass of e-mail address discovery restrictions.
|
NVD-CWE-noinfo
|
CVE-2019-20890
|
2024-11-21 13:39 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219827
|
5.3 |
MEDIUM
Network
|
mattermost
|
mattermost_server
|
An issue was discovered in Mattermost Server before 5.7, 5.6.3, 5.5.2, and 4.10.5. It mishandles permissions for user-access token creation.
|
CWE-276
Incorrect Default Permissions
|
CVE-2019-20889
|
2024-11-21 13:39 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219828
|
7.5 |
HIGH
Network
|
mattermost
|
mattermost_server
|
An issue was discovered in Mattermost Server before 5.7, 5.6.3, 5.5.2, and 4.10.5. It allows attackers to cause a denial of service (memory consumption) via an outgoing webhook or a slash command int…
|
CWE-401
Missing Release of Memory after Effective Lifetime
|
CVE-2019-20888
|
2024-11-21 13:39 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219829
|
4.3 |
MEDIUM
Network
|
mattermost
|
mattermost_server
|
An issue was discovered in Mattermost Server before 5.7.1, 5.6.4, 5.5.3, and 4.10.6. It does not honor flags API permissions when deciding whether a user can receive intra-team posts.
|
CWE-862
Missing Authorization
|
CVE-2019-20887
|
2024-11-21 13:39 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219830
|
7.5 |
HIGH
Network
|
mattermost
|
mattermost_server
|
An issue was discovered in Mattermost Server before 5.8.0. The first user is sometimes inadvertently a system admin.
|
CWE-269
Improper Privilege Management
|
CVE-2019-20886
|
2024-11-21 13:39 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|