|
218861
|
5.5 |
MEDIUM
Local
|
videolan opensuse
|
vlc_media_player leap backports
|
Double Free in VLC versions <= 3.0.6 leads to a crash.
|
CWE-415
Double Free
|
CVE-2019-5460
|
2024-11-21 13:44 |
2019-07-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218862
|
7.1 |
HIGH
Local
|
videolan opensuse
|
vlc_media_player leap backports backports_sle
|
An Integer underflow in VLC Media Player versions < 3.0.7 leads to an out-of-band read.
|
CWE-191
Integer Underflow (Wrap or Wraparound)
|
CVE-2019-5459
|
2024-11-21 13:44 |
2019-07-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218863
|
5.4 |
MEDIUM
Network
|
http-file-server_project
|
http-file-server
|
Cross-site scripting (XSS) vulnerability in http-file-server (all versions) allows an attacker with access to the server file system to execute arbitrary JavaScript code in victim's browser.
|
CWE-79
Cross-site Scripting
|
CVE-2019-5458
|
2024-11-21 13:44 |
2019-07-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218864
|
5.4 |
MEDIUM
Network
|
min-http-server_project
|
min-http-server
|
Cross-site scripting (XSS) vulnerability in min-http-server (all versions) allows an attacker with access to the server file system to execute arbitrary JavaScript code in victim's browser.
|
CWE-79
Cross-site Scripting
|
CVE-2019-5457
|
2024-11-21 13:44 |
2019-07-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218865
|
8.1 |
HIGH
Network
|
ui
|
unifi_controller
|
SMTP MITM refers to a malicious actor setting up an SMTP proxy server between the UniFi Controller version <= 5.10.21 and their actual SMTP server to record their SMTP credentials for malicious use l…
|
CWE-255
Credentials Management
|
CVE-2019-5456
|
2024-11-21 13:44 |
2019-07-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218866
|
6.8 |
MEDIUM
Physics
|
nextcloud
|
nextcloud
|
Bypassing lock protection exists in Nextcloud Android app 3.6.0 when creating a multi-account and aborting the process.
|
CWE-287
Improper Authentication
|
CVE-2019-5455
|
2024-11-21 13:44 |
2019-07-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218867
|
9.8 |
CRITICAL
Network
|
nextcloud
|
nextcloud
|
SQL Injection in the Nextcloud Android app prior to version 3.0.0 allows to destroy a local cache when a harmful query is executed requiring to resetup the account.
|
CWE-89
SQL Injection
|
CVE-2019-5454
|
2024-11-21 13:44 |
2019-07-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218868
|
6.1 |
MEDIUM
Physics
|
nextcloud
|
nextcloud
|
Bypass lock protection in the Nextcloud Android app prior to version 3.3.0 allowed access to files when being prompted for the lock protection and switching to the Nextcloud file provider.
|
CWE-287
Improper Authentication
|
CVE-2019-5453
|
2024-11-21 13:44 |
2019-07-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218869
|
2.4 |
LOW
Physics
|
nextcloud
|
nextcloud
|
Bypass lock protection in the Nextcloud Android app prior to version 3.6.2 causes leaking of thumbnails when requesting the Android content provider although the lock protection was not solved.
|
NVD-CWE-Other
|
CVE-2019-5452
|
2024-11-21 13:44 |
2019-07-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218870
|
4.6 |
MEDIUM
Physics
|
nextcloud
|
nextcloud_server
|
Bypass lock protection in the Nextcloud Android app prior to version 3.6.1 allows accessing the files when repeatedly opening and closing the app in a very short time.
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2019-5451
|
2024-11-21 13:44 |
2019-07-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|