|
218711
|
4.3 |
MEDIUM
Network
|
cybozu
|
garoon
|
Mail header injection vulnerability in Cybozu Garoon 4.0.0 to 4.10.2 may allow a remote authenticated attackers to alter mail header via the application 'E-Mail'.
|
CWE-74
Injection
|
CVE-2019-5977
|
2024-11-21 13:45 |
2019-09-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218712
|
4.9 |
MEDIUM
Network
|
cybozu
|
garoon
|
Cybozu Garoon 4.0.0 to 4.10.2 allows an attacker with administrative rights to cause a denial of service condition via unspecified vectors.
|
CWE-20
Improper Input Validation
|
CVE-2019-5976
|
2024-11-21 13:45 |
2019-09-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218713
|
5.4 |
MEDIUM
Network
|
cybozu
|
garoon
|
DOM-based cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 4.10.2 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
|
CWE-79
Cross-site Scripting
|
CVE-2019-5975
|
2024-11-21 13:45 |
2019-09-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218714
|
6.5 |
MEDIUM
Network
|
wondercms
|
wondercms
|
Directory traversal vulnerability in WonderCMS 2.6.0 and earlier allows remote attackers to delete arbitrary files via unspecified vectors.
|
CWE-22
Path Traversal
|
CVE-2019-5956
|
2024-11-21 13:45 |
2019-09-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218715
|
5.3 |
MEDIUM
Network
|
netapp
|
oncommand_workflow_automation
|
OnCommand Workflow Automation versions prior to 5.0 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors.
|
CWE-319
Cleartext Transmission of Sensitive Information
|
CVE-2019-5503
|
2024-11-21 13:45 |
2019-09-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218716
|
7.2 |
HIGH
Network
|
gitlab
|
gitlab
|
An authentication issue was discovered in GitLab that allowed a bypass of email verification. This was addressed in GitLab 12.1.2 and 12.0.4.
|
CWE-287
Improper Authentication
|
CVE-2019-5473
|
2024-11-21 13:45 |
2019-09-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218717
|
5.3 |
MEDIUM
Network
|
senecajs
|
seneca
|
Seneca < 3.9.0 contains a vulnerability that could lead to exposing environment variables to unauthorized users.
|
CWE-209
Information Exposure Through an Error Message
|
CVE-2019-5483
|
2024-11-21 13:45 |
2019-09-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218718
|
5.3 |
MEDIUM
Network
|
statichttpserver_project
|
statichttpserver
|
A path traversal vulnerability in <= v0.9.7 of statichttpserver npm module allows attackers to list files in arbitrary folders.
|
CWE-22
Path Traversal
|
CVE-2019-5480
|
2024-11-21 13:45 |
2019-09-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218719
|
7.5 |
HIGH
Network
|
larvit
|
larvitbase
|
An unintended require vulnerability in <v0.5.5 larvitbase-api may allow an attacker to load arbitrary non-production code (JavaScript file).
|
CWE-829
Inclusion of Functionality from Untrusted Control Sphere
|
CVE-2019-5479
|
2024-11-21 13:45 |
2019-09-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218720
|
5.5 |
MEDIUM
Local
|
xilinx
|
zynq_ultrascale\+_mpsoc_firmware zynq_ultrascale\+_rfsoc_firmware
|
A weakness was found in Encrypt Only boot mode in Zynq UltraScale+ devices. This could lead to an adversary being able to modify the control fields of the boot image leading to an incorrect secure bo…
|
CWE-345
Insufficient Verification of Data Authenticity
|
CVE-2019-5478
|
2024-11-21 13:45 |
2019-09-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|