|
221441
|
9.8 |
CRITICAL
Network
|
mojohaus
|
exec_maven
|
The MojoHaus Exec Maven plugin 1.1.1 for Maven allows code execution via a crafted XML document because a configuration element (within a plugin element) can specify an arbitrary program in an execut…
|
CWE-94
Code Injection
|
CVE-2019-20343
|
2024-11-21 13:38 |
2020-01-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221442
|
4.3 |
MEDIUM
Network
|
pisignage
|
pisignage
|
The web application component of piSignage before 2.6.4 allows a remote attacker (authenticated as a low-privilege user) to download arbitrary files from the Raspberry Pi via api/settings/log?file=..…
|
CWE-22
Path Traversal
|
CVE-2019-20354
|
2024-11-21 13:38 |
2020-01-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221443
|
7.1 |
HIGH
Local
|
nasm
|
netwide_assembler
|
In Netwide Assembler (NASM) 2.15rc0, a heap-based buffer over-read occurs (via a crafted .asm file) in set_text_free when called from expand_one_smacro in asm/preproc.c.
|
CWE-125
Out-of-bounds Read
|
CVE-2019-20352
|
2024-11-21 13:38 |
2020-01-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221444
|
8.8 |
HIGH
Network
|
determine
|
contract_lifecycle_management
|
An issue was discovered in report_edit.jsp in Determine (formerly Selectica) Contract Lifecycle Management (CLM) v5.4. Any authenticated user may execute Groovy code when generating a report, resulti…
|
CWE-94
Code Injection
|
CVE-2019-20155
|
2024-11-21 13:38 |
2020-01-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221445
|
6.1 |
MEDIUM
Network
|
determine
|
contract_lifecycle_management
|
An issue was discovered in Determine (formerly Selectica) Contract Lifecycle Management (CLM) v5.4. A cross-site scripting (XSS) vulnerability in multiple getchart.jsp parameters allows remote attack…
|
CWE-79
Cross-site Scripting
|
CVE-2019-20154
|
2024-11-21 13:38 |
2020-01-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221446
|
4.9 |
MEDIUM
Network
|
determine
|
contract_lifecycle_management
|
An issue was discovered in Determine (formerly Selectica) Contract Lifecycle Management (CLM) in v5.4. An XML external entity (XXE) vulnerability in the upload definition feature in definition_upload…
|
CWE-611
XXE
|
CVE-2019-20153
|
2024-11-21 13:38 |
2020-01-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221447
|
4.3 |
MEDIUM
Network
|
typesettercms
|
typesetter
|
The Typesetter CMS 5.1 logout functionality is affected by a CSRF vulnerability. The logout function of the admin panel is not protected by any CSRF tokens. An attacker can logout the user using this…
|
CWE-352
Origin Validation Error
|
CVE-2019-20077
|
2024-11-21 13:38 |
2020-01-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221448
|
7.2 |
HIGH
Network
|
advanced_real_estate_script_project
|
advanced_real_estate_script
|
In PHP Scripts Mall advanced-real-estate-script 4.0.9, the news_edit.php news_id parameter is vulnerable to SQL Injection.
|
CWE-89
SQL Injection
|
CVE-2019-20337
|
2024-11-21 13:38 |
2020-01-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221449
|
6.1 |
MEDIUM
Network
|
advanced_real_estate_script_project
|
advanced_real_estate_script
|
In PHP Scripts Mall advanced-real-estate-script 4.0.9, the search-results.php searchtext parameter is vulnerable to XSS.
|
CWE-79
Cross-site Scripting
|
CVE-2019-20336
|
2024-11-21 13:38 |
2020-01-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221450
|
5.5 |
MEDIUM
Local
|
nasm
|
netwide_assembler
|
In Netwide Assembler (NASM) 2.14.02, stack consumption occurs in expr# functions in asm/eval.c. This potentially affects the relationships among expr0, expr1, expr2, expr3, expr4, expr5, and expr6 (a…
|
CWE-674
Uncontrolled Recursion
|
CVE-2019-20334
|
2024-11-21 13:38 |
2020-01-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|