|
222221
|
8.8 |
HIGH
Network
|
zohocorp
|
manageengine_applications_manager
|
Zoho ManageEngine Applications Manager before 13640 allows a remote authenticated SQL injection via the Agent servlet agentid parameter to the Agent.java process function.
|
CWE-89
SQL Injection
|
CVE-2019-19650
|
2024-11-21 13:35 |
2019-12-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222222
|
9.8 |
CRITICAL
Network
|
zohocorp
|
manageengine_applications_manager
|
Zoho ManageEngine Applications Manager before 13620 allows a remote unauthenticated SQL injection via the SyncEventServlet eventid parameter to the SyncEventServlet.java doGet function.
|
CWE-89
SQL Injection
|
CVE-2019-19649
|
2024-11-21 13:35 |
2019-12-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222223
|
8.8 |
HIGH
Network
|
yabasic
|
yabasic
|
Yabasic 2.86.1 has a heap-based buffer overflow in the yylex() function in flex.c via a crafted BASIC source file.
|
CWE-787
Out-of-bounds Write
|
CVE-2019-19720
|
2024-11-21 13:35 |
2019-12-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222224
|
6.1 |
MEDIUM
Network
|
tableau
|
tableau_server
|
Tableau Server 10.3 through 2019.4 on Windows and Linux allows XSS via the embeddedAuthRedirect page.
|
CWE-79
Cross-site Scripting
|
CVE-2019-19719
|
2024-11-21 13:35 |
2019-12-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222225
|
6.1 |
MEDIUM
Network
|
mediawiki debian
|
mediawiki debian_linux
|
MediaWiki through 1.33.1 allows attackers to bypass the Title_blacklist protection mechanism by starting with an arbitrary title, establishing a non-resolvable redirect for the associated page, and u…
|
CWE-601
Open Redirect
|
CVE-2019-19709
|
2024-11-21 13:35 |
2019-12-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222226
|
6.1 |
MEDIUM
Network
|
mediawiki
|
visual_editor
|
The VisualEditor extension through 1.34 for MediaWiki allows XSS via pasted content containing an element with a data-ve-clipboard-key attribute.
|
CWE-79
Cross-site Scripting
|
CVE-2019-19708
|
2024-11-21 13:35 |
2019-12-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222227
|
7.5 |
HIGH
Network
|
moxa
|
eds-g508e_firmware eds-g512e_firmware eds-g516e_firmware
|
On Moxa EDS-G508E, EDS-G512E, and EDS-G516E devices (with firmware through 6.0), denial of service can occur via PROFINET DCE-RPC endpoint discovery packets.
|
NVD-CWE-noinfo
|
CVE-2019-19707
|
2024-11-21 13:35 |
2019-12-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222228
|
7.8 |
HIGH
Local
|
git-scm debian fedoraproject opensuse
|
git debian_linux fedora leap
|
Arbitrary command execution is possible in Git before 2.20.2, 2.21.x before 2.21.1, 2.22.x before 2.22.2, 2.23.x before 2.23.1, and 2.24.x before 2.24.1 because a "git submodule update" operation can…
|
CWE-78 CWE-862
OS Command Missing Authorization
|
CVE-2019-19604
|
2024-11-21 13:35 |
2019-12-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222229
|
6.1 |
MEDIUM
Network
|
jetbrains
|
ktor
|
In Ktor through 1.2.6, the client resends data from the HTTP Authorization header to a redirect location.
|
CWE-601
Open Redirect
|
CVE-2019-19703
|
2024-11-21 13:35 |
2019-12-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222230
|
7.5 |
HIGH
Network
|
modoboa
|
modoboa-dmarc
|
The modoboa-dmarc plugin 1.1.0 for Modoboa is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this to perform a denial of service…
|
CWE-611
XXE
|
CVE-2019-19702
|
2024-11-21 13:35 |
2019-12-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|