|
223671
|
7.5 |
HIGH
Local
|
unisys
|
stealth
|
In Unisys Stealth (core) 3.4.108.0, 3.4.209.x, 4.0.027.x and 4.0.114, key material inadvertently logged under certain conditions. Fixed included in 3.4.109, 4.0.027.13, 4.0.125 and 5.0.013.0.
|
CWE-532
Inclusion of Sensitive Information in Log Files
|
CVE-2019-18193
|
2024-11-21 13:32 |
2020-02-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223672
|
6.5 |
MEDIUM
Adjacent
|
netapp
|
e-series_santricity_os_controller
|
E-Series SANtricity OS Controller Software version 11.60.0 is susceptible to a vulnerability which allows an attacker to cause a Denial of Service (DoS) in IPv6 environments.
|
NVD-CWE-noinfo
|
CVE-2019-17273
|
2024-11-21 13:32 |
2020-01-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223673
|
5.4 |
MEDIUM
Network
|
tibco
|
patterns_-_search
|
The user interface component of TIBCO Software Inc.'s TIBCO Patterns - Search contains multiple vulnerabilities that theoretically allow authenticated users to perform persistent cross-site scripting…
|
CWE-79
Cross-site Scripting
|
CVE-2019-17338
|
2024-11-21 13:32 |
2020-01-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223674
|
5.4 |
MEDIUM
Network
|
fortinet
|
fortisiem
|
An Improper Neutralization of Input vulnerability in the description and title parameters of a Device Maintenance Schedule in FortiSIEM version 5.2.5 and below may allow a remote authenticated attack…
|
CWE-79
Cross-site Scripting
|
CVE-2019-17651
|
2024-11-21 13:32 |
2020-01-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223675
|
9.8 |
CRITICAL
Network
|
apache
debian
canonical
fedoraproject
redhat
|
xml-rpc
debian_linux
ubuntu_linux
fedora
software_collections
|
An untrusted deserialization was found in the org.apache.xmlrpc.parser.XmlRpcResponseParser:addResult method of Apache XML-RPC (aka ws-xmlrpc) library. A malicious XML-RPC server could target a XML-R…
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2019-17570
|
2024-11-21 13:32 |
2020-01-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223676
|
4.7 |
MEDIUM
Local
|
arm
fedoraproject
debian
|
mbed_tls
mbed_crypto
fedora
debian_linux
|
The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1 does not reduce the blinded scalar before computing the inverse, which allows a local attacker to reco…
|
CWE-203
Information Exposure Through Discrepancy
|
CVE-2019-18222
|
2024-11-21 13:32 |
2020-01-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223677
|
7.5 |
HIGH
Network
|
meinbergglobal
|
syncbox\/ptpv2_firmware
|
The Meinberg SyncBox/PTP/PTPv2 devices have default SSH keys which allow attackers to get root access to the devices. All firmware versions up to v5.34o, v5.34s, v5.32* or 5.34g are affected. The pri…
|
NVD-CWE-noinfo
|
CVE-2019-17584
|
2024-11-21 13:32 |
2020-01-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223678
|
6.5 |
MEDIUM
Network
|
cacti
|
cacti
|
Cacti through 1.2.7 is affected by a graphs.php?template_id= SQL injection vulnerability affecting how template identifiers are handled when a string and id composite value are used to identify the t…
|
CWE-89
SQL Injection
|
CVE-2019-17357
|
2024-11-21 13:32 |
2020-01-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223679
|
7.8 |
HIGH
Local
|
eclipse
|
memory_analyzer
|
Eclipse Memory Analyzer version 1.9.1 and earlier is subject to a deserialization vulnerability if an index file of a parsed heap dump is replaced by a malicious version and the heap dump is reopened…
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2019-17635
|
2024-11-21 13:32 |
2020-01-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223680
|
9.0 |
CRITICAL
Network
|
eclipse
|
memory_analyzer
|
Eclipse Memory Analyzer version 1.9.1 and earlier is subject to a cross site scripting (XSS) vulnerability when generating an HTML report from a malicious heap dump. The user must chose todownload, o…
|
CWE-79
Cross-site Scripting
|
CVE-2019-17634
|
2024-11-21 13:32 |
2020-01-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
