|
218691
|
8.7 |
HIGH
Network
|
cybozu
|
garoon
|
Cybozu Garoon 4.0.0 to 4.6.3 allows authenticated attackers to alter the information with privileges invoking the installer via unspecified vectors.
|
CWE-20
Improper Input Validation
|
CVE-2019-5931
|
2024-11-21 13:45 |
2019-05-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218692
|
4.3 |
MEDIUM
Network
|
cybozu
|
garoon
|
Cybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to bypass access restriction to browse unauthorized pages via the application 'Management of Basic System'.
|
NVD-CWE-noinfo
|
CVE-2019-5930
|
2024-11-21 13:45 |
2019-05-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218693
|
6.1 |
MEDIUM
Network
|
cybozu
|
garoon
|
Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to inject arbitrary web script or HTML via the application 'Memo'.
|
CWE-79
Cross-site Scripting
|
CVE-2019-5929
|
2024-11-21 13:45 |
2019-05-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218694
|
6.1 |
MEDIUM
Network
|
cybozu
|
garoon
|
Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to inject arbitrary web script or HTML via Customize Item function.
|
CWE-79
Cross-site Scripting
|
CVE-2019-5928
|
2024-11-21 13:45 |
2019-05-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218695
|
9.1 |
CRITICAL
Network
|
gitlab
|
gitlab
|
An Incorrect Access Control issue was discovered in GitLab Community and Enterprise Edition 6.0 and later but before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1. The issue comments featur…
|
NVD-CWE-noinfo
|
CVE-2019-5883
|
2024-11-21 13:45 |
2019-05-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218696
|
7.5 |
HIGH
Network
|
freebsd
|
freebsd
|
In FreeBSD 11.3-PRERELEASE before r345378, 12.0-STABLE before r345377, 11.2-RELEASE before 11.2-RELEASE-p10, and 12.0-RELEASE before 12.0-RELEASE-p4, a bug in pf does not check if the outer ICMP or I…
|
CWE-20
Improper Input Validation
|
CVE-2019-5598
|
2024-11-21 13:45 |
2019-05-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218697
|
9.1 |
CRITICAL
Network
|
freebsd
|
freebsd
|
In FreeBSD 11.3-PRERELEASE and 12.0-STABLE before r347591, 11.2-RELEASE before 11.2-RELEASE-p10, and 12.0-RELEASE before 12.0-RELEASE-p4, a bug in the pf IPv6 fragment reassembly logic incorrectly us…
|
CWE-20
Improper Input Validation
|
CVE-2019-5597
|
2024-11-21 13:45 |
2019-05-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218698
|
7.8 |
HIGH
Local
|
vmware
|
workstation
|
VMware Workstation (15.x before 15.1.0) contains a DLL hijacking issue because some DLL files are improperly loaded by the application. Successful exploitation of this issue may allow attackers with …
|
CWE-427
Uncontrolled Search Path Element
|
CVE-2019-5526
|
2024-11-21 13:45 |
2019-05-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218699
|
5.5 |
MEDIUM
Local
|
nvidia
|
gpu_driver
|
NVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DeviceIoControl where the software reads from a buff…
|
CWE-125
Out-of-bounds Read
|
CVE-2019-5677
|
2024-11-21 13:45 |
2019-05-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218700
|
6.7 |
MEDIUM
Local
|
nvidia
|
gpu_display_driver geforce_experience
|
NVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in which it incorrectly loads Windows system DLLs without validating the path or signature (also known a…
|
CWE-427
Uncontrolled Search Path Element
|
CVE-2019-5676
|
2024-11-21 13:45 |
2019-05-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|