|
218941
|
8.1 |
HIGH
Network
|
kill-port_project
|
kill-port
|
If an attacker can control the port, which in itself is a very sensitive value, they can inject arbitrary OS commands due to the usage of the exec function in a third-party module kill-port < 1.3.2.
|
CWE-78
OS Command
|
CVE-2019-5414
|
2024-11-21 13:44 |
2019-03-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218942
|
9.8 |
CRITICAL
Network
|
morgan_project
|
morgan
|
An attacker can use the format parameter to inject arbitrary commands in the npm package morgan < 1.9.1.
|
CWE-77
Command Injection
|
CVE-2019-5413
|
2024-11-21 13:44 |
2019-03-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218943
|
5.5 |
MEDIUM
Local
|
macpaw
|
cleanmymac_x
|
An exploitable privilege escalation vulnerability exists in the helper service CleanMyMac X, version 4.20, due to improper updating. The application failed to remove the vulnerable components upon up…
|
CWE-459
Incomplete Cleanup
|
CVE-2019-5011
|
2024-11-21 13:44 |
2019-03-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218944
|
7.8 |
HIGH
Local
|
pixar
|
renderman
|
A local privilege escalation vulnerability exists in the Mac OS X version of Pixar Renderman 22.3.0's Install Helper helper tool. A user with local access can use this vulnerability to escalate their…
|
NVD-CWE-noinfo
|
CVE-2019-5015
|
2024-11-21 13:44 |
2019-03-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218945
|
9.8 |
CRITICAL
Network
|
rainbowpdf
|
office_server_document_converter
|
A heap-based overflow vulnerability exists in the PowerPoint document conversion function of Rainbow PDF Office Server Document Converter V7.0 Pro R1 (7,0,2018,1113). While parsing Document Summary P…
|
CWE-787
Out-of-bounds Write
|
CVE-2019-5019
|
2024-11-21 13:44 |
2019-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218946
|
9.8 |
CRITICAL
Network
|
wxjava_project
|
wxjava
|
An issue was discovered in weixin-java-tools v3.3.0. There is an XXE vulnerability in the getXmlDoc method of the BaseWxPayResult.java file. NOTE: this issue exists because of an incomplete fix for C…
|
CWE-611
XXE
|
CVE-2019-5312
|
2024-11-21 13:44 |
2019-01-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218947
|
6.1 |
MEDIUM
Network
|
yunucms
|
yunucms
|
An issue was discovered in YUNUCMS V1.1.8. app/index/controller/Show.php has an XSS vulnerability via the index.php/index/show/index cw parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2019-5311
|
2024-11-21 13:44 |
2019-01-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218948
|
6.1 |
MEDIUM
Network
|
yunucms
|
yunucms
|
YUNUCMS 1.1.8 has XSS in app/admin/controller/System.php because crafted data can be written to the sys.php file, as demonstrated by site_title in an admin/system/basic POST request.
|
CWE-79
Cross-site Scripting
|
CVE-2019-5310
|
2024-11-21 13:44 |
2019-01-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218949
|
7.2 |
HIGH
Network
|
vtiger
|
vtiger_crm
|
Vtiger CRM 7.1.0 before Hotfix2 allows uploading files with the extension "php3" in the logo upload field, if the uploaded file is in PNG format and has a size of 150x40. One can put PHP code into th…
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2019-5009
|
2024-11-21 13:44 |
2019-01-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218950
|
7.1 |
HIGH
Local
|
foxitsoftware
|
foxit_reader
phantompdf
|
An issue was discovered in Foxit Reader and PhantomPDF before 9.4 on Windows. It is an Out-of-Bounds Read Information Disclosure and crash due to a NULL pointer dereference when reading TIFF data dur…
|
CWE-125
CWE-476
Out-of-bounds Read
NULL Pointer Dereference
|
CVE-2019-5007
|
2024-11-21 13:44 |
2019-01-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
