|
223161
|
8.8 |
HIGH
Network
|
supermicro
|
x8sti-f_bios
x8sti-f_firmware
|
On SuperMicro X8STi-F motherboards with IPMI firmware 2.06 and BIOS 02.68, the Virtual Media feature allows OS Command Injection by authenticated attackers who can send HTTP requests to the IPMI IP a…
|
CWE-78
OS Command
|
CVE-2019-19642
|
2024-11-21 13:35 |
2019-12-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223162
|
7.8 |
HIGH
Local
|
htmldoc_project
debian
fedoraproject
|
htmldoc
debian_linux
fedora
|
HTMLDOC 1.9.7 allows a stack-based buffer overflow in the hd_strlcpy() function in string.c (when called from render_contents in ps-pdf.cxx) via a crafted HTML document.
|
CWE-787
Out-of-bounds Write
|
CVE-2019-19630
|
2024-11-21 13:35 |
2019-12-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223163
|
5.3 |
MEDIUM
Network
|
ros
|
sros2
|
SROS 2 0.8.1 (after CVE-2019-19625 is mitigated) leaks ROS 2 node-related information regardless of the rtps_protection_kind configuration. (SROS2 provides the tools to generate and distribute keys f…
|
CWE-200
Information Exposure
|
CVE-2019-19627
|
2024-11-21 13:35 |
2019-12-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223164
|
5.3 |
MEDIUM
Network
|
ros
|
sros2
|
SROS 2 0.8.1 (which provides the tools that generate and distribute keys for Robot Operating System 2 and uses the underlying security plugins of DDS from ROS 2) leaks node information due to a leaky…
|
CWE-200
Information Exposure
|
CVE-2019-19625
|
2024-11-21 13:35 |
2019-12-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223165
|
3.3 |
LOW
Local
|
dell
|
red_cloak_windows_agent
|
In SecureWorks Red Cloak Windows Agent before 2.0.7.9, a local user can bypass the generation of telemetry alerts by removing NT AUTHORITY\SYSTEM permissions from a file. This is limited in scope to …
|
CWE-281
Improper Preservation of Permissions
|
CVE-2019-19620
|
2024-11-21 13:35 |
2019-12-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223166
|
6.5 |
MEDIUM
Network
|
opencv
redhat
|
opencv
enterprise_linux
|
An out-of-bounds read was discovered in OpenCV before 4.1.1. Specifically, variable coarsest_scale is assumed to be greater than or equal to finest_scale within the calc()/ocl_calc() functions in dis…
|
CWE-125
Out-of-bounds Read
|
CVE-2019-19624
|
2024-11-21 13:35 |
2019-12-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223167
|
6.1 |
MEDIUM
Network
|
documize
|
documize
|
domain/section/markdown/markdown.go in Documize before 3.5.1 mishandles untrusted Markdown content. This was addressed by adding the bluemonday HTML sanitizer to defend against XSS.
|
CWE-79
Cross-site Scripting
|
CVE-2019-19619
|
2024-11-21 13:35 |
2019-12-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223168
|
9.8 |
CRITICAL
Network
|
phpmyadmin
debian
|
phpmyadmin
debian_linux
|
phpMyAdmin before 4.9.2 does not escape certain Git information, related to libraries/classes/Display/GitRevision.php and libraries/classes/Footer.php.
|
NVD-CWE-noinfo
|
CVE-2019-19617
|
2024-11-21 13:35 |
2019-12-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223169
|
4.3 |
MEDIUM
Network
|
xtivia
|
web_time_and_expense
|
An Insecure Direct Object Reference (IDOR) vulnerability in the Xtivia Web Time and Expense (WebTE) interface used for Microsoft Dynamics NAV before 2017 allows an attacker to download arbitrary file…
|
CWE-639
Authorization Bypass Through User-Controlled Key
|
CVE-2019-19616
|
2024-11-21 13:35 |
2019-12-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223170
|
7.2 |
HIGH
Network
|
strapi
|
strapi
|
The Strapi framework before 3.0.0-beta.17.8 is vulnerable to Remote Code Execution in the Install and Uninstall Plugin components of the Admin panel, because it does not sanitize the plugin name, and…
|
CWE-78
OS Command
|
CVE-2019-19609
|
2024-11-21 13:35 |
2019-12-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
