|
220811
|
8.8 |
HIGH
Network
|
chinamobileltd
|
gpn2.4p21-c-cn_firmware
|
ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have an Incorrect Access Control vulnerability via the cgi-bin/webproc?getpage=html/index.html subpage=wlsecurity URI, …
|
NVD-CWE-noinfo
|
CVE-2019-6279
|
2024-11-21 13:46 |
2019-03-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
220812
|
8.8 |
HIGH
Network
|
gl-inet
|
gl-ar300m-lite_firmware
|
Command injection vulnerability in firmware_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to execute arbitrary code.
|
CWE-77
Command Injection
|
CVE-2019-6275
|
2024-11-21 13:46 |
2019-03-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
220813
|
5.5 |
MEDIUM
Local
|
systemd_project opensuse netapp debian fedoraproject canonical redhat mcafee
|
systemd leap active_iq_performance_analytics_services debian_linux fedora ubuntu_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterpr…
|
An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming …
|
CWE-787
Out-of-bounds Write
|
CVE-2019-6454
|
2024-11-21 13:46 |
2019-03-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
220814
|
9.8 |
CRITICAL
Network
|
coship
|
rt3050_firmware rt3052_firmware rt7620_firmware wm3300_firmware
|
An issue was discovered on Shenzhen Coship RT3050 4.0.0.40, RT3052 4.0.0.48, RT7620 10.0.0.49, WM3300 5.0.0.54, and WM3300 5.0.0.55 devices. The password reset functionality of the router doesn't hav…
|
CWE-287
Improper Authentication
|
CVE-2019-6441
|
2024-11-21 13:46 |
2019-03-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
220815
|
8.8 |
HIGH
Network
|
gl-inet
|
gl-ar300m-lite_firmware
|
Directory traversal vulnerability in storage_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to have unspecified impact via directory traversal sequences.
|
CWE-22
Path Traversal
|
CVE-2019-6274
|
2024-11-21 13:46 |
2019-03-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
220816
|
6.5 |
MEDIUM
Network
|
gl-inet
|
gl-ar300m-lite_firmware
|
download_file in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to download arbitrary files.
|
CWE-22
Path Traversal
|
CVE-2019-6273
|
2024-11-21 13:46 |
2019-03-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
220817
|
8.8 |
HIGH
Network
|
gl-inet
|
gl-ar300m-lite_firmware
|
Command injection vulnerability in login_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to execute arbitrary code.
|
CWE-77
Command Injection
|
CVE-2019-6272
|
2024-11-21 13:46 |
2019-03-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
220818
|
6.7 |
MEDIUM
Local
|
lenovo
|
dynamic_power_reduction
|
An unquoted search path vulnerability was identified in Lenovo Dynamic Power Reduction Utility prior to version 2.2.2.0 that could allow a malicious user with local access to execute code with admini…
|
CWE-428
Unquoted Search Path or Element
|
CVE-2019-6149
|
2024-11-21 13:46 |
2019-03-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
220819
|
5.5 |
MEDIUM
Local
|
f5
|
big-ip_application_acceleration_manager
|
In BIG-IP 13.0.0, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, the Application Acceleration Manager (AAM) wamd process used in processing of images and PDFs fails to drop group permissions whe…
|
CWE-269
Improper Privilege Management
|
CVE-2019-6601
|
2024-11-21 13:46 |
2019-03-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
220820
|
6.1 |
MEDIUM
Network
|
f5
|
big-ip_local_traffic_manager big-ip_application_acceleration_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_access_policy_manager big-ip_application_security_manager<…
|
In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.3, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, when remote authentication is enabled for administrative users and all external users are granted the "…
|
CWE-79
Cross-site Scripting
|
CVE-2019-6600
|
2024-11-21 13:46 |
2019-03-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|