|
221791
|
6.1 |
MEDIUM
Network
|
dolibarr
|
dolibarr
|
Dolibarr ERP/CRM before 10.0.3 has an Insufficient Filtering issue that can lead to user/card.php XSS.
|
CWE-79
Cross-site Scripting
|
CVE-2019-19211
|
2024-11-21 13:34 |
2020-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221792
|
5.4 |
MEDIUM
Network
|
dolibarr
|
dolibarr
|
Dolibarr ERP/CRM before 10.0.3 allows XSS because uploaded HTML documents are served as text/html despite being renamed to .noexe files.
|
CWE-79
Cross-site Scripting
|
CVE-2019-19210
|
2024-11-21 13:34 |
2020-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221793
|
7.5 |
HIGH
Network
|
dolibarr
|
dolibarr
|
Dolibarr ERP/CRM before 10.0.3 allows SQL Injection.
|
CWE-89
SQL Injection
|
CVE-2019-19209
|
2024-11-21 13:34 |
2020-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221794
|
9.8 |
CRITICAL
Network
|
codiad
|
codiad
|
Codiad Web IDE through 2.8.4 allows PHP Code injection.
|
CWE-94
Code Injection
|
CVE-2019-19208
|
2024-11-21 13:34 |
2020-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221795
|
6.1 |
MEDIUM
Network
|
abacus
|
abacus
|
oauth/oauth2/v1/saml/ in Abacus OAuth Login 2019_01_r4_20191021_0000 before prior to R4 (20.11.2019 Hotfix) allows Reflected Cross Site Scripting (XSS) via an error message.
|
CWE-79
Cross-site Scripting
|
CVE-2019-19381
|
2024-11-21 13:34 |
2020-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221796
|
7.5 |
HIGH
Network
|
siemens
|
sinvr\/sivms_video_server
|
A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0), SiNVR/SiVMS Video Server (All versions >= V5.0.0 < V5.0.2), SiNVR/SiVMS Video Server (All versions >= V5.0.2).…
|
-
|
CVE-2019-19299
|
2024-11-21 13:34 |
2020-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221797
|
7.5 |
HIGH
Network
|
siemens
|
sinvr\/sivms_video_server
|
A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0), SiNVR/SiVMS Video Server (All versions >= V5.0.0 < V5.0.2). The streaming service (default port 5410/tcp) of t…
|
-
|
CVE-2019-19298
|
2024-11-21 13:34 |
2020-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221798
|
7.5 |
HIGH
Network
|
siemens
|
sinvr_3_video_server sinvr_3_central_control_server
|
A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0). The streaming service (default port 5410/tcp) of the SiVMS/SiNVR Video Server
contains a path traversal vulner…
|
-
|
CVE-2019-19297
|
2024-11-21 13:34 |
2020-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221799
|
6.8 |
MEDIUM
Network
|
siemens
|
sinvr_3_video_server sinvr_3_central_control_server
|
A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0). The two FTP services (default ports 21/tcp and 5411/tcp) of the SiVMS/SiNVR Video
Server contain a path traver…
|
-
|
CVE-2019-19296
|
2024-11-21 13:34 |
2020-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221800
|
4.3 |
MEDIUM
Network
|
siemens
|
sinvr_3_video_server sinvr_3_central_control_server
|
A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (CCS) does not enforce logging of
security-relevant activities in its XML-based c…
|
-
|
CVE-2019-19295
|
2024-11-21 13:34 |
2020-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|