|
222631
|
8.8 |
HIGH
Network
|
nokia
|
impact
|
Nokia IMPACT < 18A: An unrestricted File Upload vulnerability was found that may lead to Remote Code Execution.
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2019-17403
|
2024-11-21 13:32 |
2019-11-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222632
|
7.8 |
HIGH
Local
|
eracent
|
epa_agent
|
An issue was discovered in Eracent EPA Agent through 10.2.26. The agent executable, when installed for non-root operations (scanning), can be used to start external programs with elevated permissions…
|
CWE-426
Untrusted Search Path
|
CVE-2019-17446
|
2024-11-21 13:32 |
2019-11-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222633
|
5.5 |
MEDIUM
Local
|
eracent
|
eda_agent epa_agent epm_agent eua_agent flw_agent sum_agent
|
An issue was discovered in Eracent EDA, EPA, EPM, EUA, FLW, and SUM Agent through 10.2.26. The agent executable, when installed for non-root operations (scanning), can be forced to copy files from th…
|
CWE-59
Link Following
|
CVE-2019-17445
|
2024-11-21 13:32 |
2019-11-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222634
|
7.8 |
HIGH
Local
|
fortinet
|
forticlient
|
An Improper Neutralization of Special Elements used in a Command vulnerability in one of FortiClient for Mac OS root processes, may allow a local user of the system on which FortiClient is running to…
|
CWE-78
OS Command
|
CVE-2019-17650
|
2024-11-21 13:32 |
2019-11-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222635
|
7.2 |
HIGH
Network
|
netapp
|
ontap_select_deploy_administration_utility
|
All versions of ONTAP Select Deploy administration utility are susceptible to a vulnerability which when successfully exploited could allow an administrative user to escalate their privileges.
|
NVD-CWE-noinfo
|
CVE-2019-17272
|
2024-11-21 13:32 |
2019-11-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222636
|
7.8 |
HIGH
Local
|
zohocorp
|
manageengine_firewall_analyzer manageengine_opmanager
|
Incorrect file permissions on the packaged Nipper executable file in Zoho ManageEngine OpManager 12.4.072 and Firewall Analyzer 12.4.072 allow local users to elevate privileges to root by overwriting…
|
CWE-276
Incorrect Default Permissions
|
CVE-2019-17421
|
2024-11-21 13:32 |
2019-11-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222637
|
7.8 |
HIGH
Local
|
comodo
|
comodo_internet_security
|
An issue was discovered in signmgr.dll 6.5.0.819 in Comodo Internet Security through 12.0. A DLL Preloading vulnerability allows an attacker to implant an unsigned DLL named iLog.dll in a partially u…
|
CWE-427
Uncontrolled Search Path Element
|
CVE-2019-18215
|
2024-11-21 13:32 |
2019-11-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222638
|
4.6 |
MEDIUM
Physics
|
espressif
|
esp32-d0wd_firmware esp32-d2wd_firmware esp32-s0wd_firmware esp32-pico-d4_firmware
|
An issue was discovered in the Espressif ESP32 mask ROM code 2016-06-08 0 through 2. Lack of anti-glitch mitigations in the first stage bootloader of the ESP32 chip allows an attacker (with physical …
|
CWE-755
Improper Handling of Exceptional Conditions
|
CVE-2019-17391
|
2024-11-21 13:32 |
2019-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222639
|
9.8 |
CRITICAL
Network
|
fujielectric
|
v-server
|
In Fuji Electric V-Server 4.0.6 and prior, several heap-based buffer overflows have been identified, which may allow an attacker to remotely execute arbitrary code.
|
CWE-787
Out-of-bounds Write
|
CVE-2019-18240
|
2024-11-21 13:32 |
2019-11-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222640
|
6.1 |
MEDIUM
Network
|
adenion
|
blog2social
|
The Blog2Social plugin before 5.9.0 for WordPress is affected by: Cross Site Scripting (XSS). The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via the b2s_id parameter.…
|
CWE-79
Cross-site Scripting
|
CVE-2019-17550
|
2024-11-21 13:32 |
2019-11-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|