|
218731
|
5.9 |
MEDIUM
Network
|
fortinet
|
fortios_ips_engine
|
Multiple padding oracle vulnerabilities (Zombie POODLE, GOLDENDOODLE, OpenSSL 0-length) in the CBC padding implementation of FortiOS IPS engine version 5.000 to 5.006, 4.000 to 4.036, 4.200 to 4.219,…
|
CWE-347
Improper Verification of Cryptographic Signature
|
CVE-2019-5592
|
2024-11-21 13:45 |
2019-08-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218732
|
5.5 |
MEDIUM
Local
|
belwith-keeler
|
hickory_smart
|
An insecure storage of sensitive information vulnerability is present in Hickory Smart for iOS mobile devices from Belwith Products, LLC. The application's database was found to contain information t…
|
CWE-922
Insecure Storage of Sensitive Information
|
CVE-2019-5633
|
2024-11-21 13:45 |
2019-08-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218733
|
7.5 |
HIGH
Network
|
belwith-keeler
|
hickory_smart_ethernet_bridge_firmware
|
A cleartext transmission of sensitive information vulnerability is present in Hickory Smart Ethernet Bridge from Belwith Products, LLC. Captured data reveals that the Hickory Smart Ethernet Bridge de…
|
CWE-319
Cleartext Transmission of Sensitive Information
|
CVE-2019-5635
|
2024-11-21 13:45 |
2019-08-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218734
|
4.3 |
MEDIUM
Physics
|
belwith-keeler
|
hickory_smart
|
An inclusion of sensitive information in log files vulnerability is present in Hickory Smart for Android mobile devices from Belwith Products, LLC. Communications to the internet API services and dir…
|
CWE-532
Inclusion of Sensitive Information in Log Files
|
CVE-2019-5634
|
2024-11-21 13:45 |
2019-08-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218735
|
5.5 |
MEDIUM
Local
|
belwith-keeler
|
hickory_smart
|
An insecure storage of sensitive information vulnerability is present in Hickory Smart for Android mobile devices from Belwith Products, LLC. The application's database was found to contain informati…
|
CWE-922
Insecure Storage of Sensitive Information
|
CVE-2019-5632
|
2024-11-21 13:45 |
2019-08-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218736
|
8.8 |
HIGH
Network
|
rapid7
|
nexpose
|
Rapid7 Nexpose versions 6.5.50 and prior suffer from insufficient session expiration when an administrator performs a security relevant edit on an existing, logged on user. For example, if a user's p…
|
CWE-613
Insufficient Session Expiration
|
CVE-2019-5638
|
2024-11-21 13:45 |
2019-08-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218737
|
7.8 |
HIGH
Local
|
rapid7
|
insightappsec
|
The Rapid7 InsightAppSec broker suffers from a DLL injection vulnerability in the 'prunsrv.exe' component of the product. If exploited, a local user of the system (who must already be authenticated t…
|
CWE-426
Untrusted Search Path
|
CVE-2019-5631
|
2024-11-21 13:45 |
2019-08-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218738
|
9.8 |
CRITICAL
Network
|
nokogiri canonical debian
|
nokogiri ubuntu_linux debian_linux
|
A command injection vulnerability in Nokogiri v1.10.3 and earlier allows commands to be executed in a subprocess via Ruby's `Kernel.open` method. Processes are vulnerable only if the undocumented met…
|
CWE-78
OS Command
|
CVE-2019-5477
|
2024-11-21 13:45 |
2019-08-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218739
|
7.8 |
HIGH
Local
|
nvidia
|
shield_experience
|
NVIDIA Shield TV Experience prior to v8.0, contains a vulnerability in the custom NVIDIA API used in the mount system service where user data could be overridden, which may lead to code execution, de…
|
NVD-CWE-noinfo
|
CVE-2019-5681
|
2024-11-21 13:45 |
2019-08-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218740
|
6.5 |
MEDIUM
Network
|
netapp
|
oncommand_insight
|
OnCommand Insight versions through 7.3.6 may disclose sensitive account information to an authenticated user.
|
NVD-CWE-noinfo
|
CVE-2019-5498
|
2024-11-21 13:45 |
2019-08-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|