|
218581
|
7.5 |
HIGH
Network
|
gitlab
|
gitlab
|
An issue was discovered in GitLab Community and Enterprise Edition before 11.4. It allows Directory Traversal.
|
CWE-22
Path Traversal
|
CVE-2019-6240
|
2024-11-21 13:46 |
2019-03-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218582
|
8.8 |
HIGH
Network
|
risi
|
gestao_de_horarios
|
RISI Gestao de Horarios v3201.09.08 rev.23 allows SQL Injection.
|
CWE-89
SQL Injection
|
CVE-2019-6491
|
2024-11-21 13:46 |
2019-03-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218583
|
9.8 |
CRITICAL
Network
|
blogengine
|
blogengine.net
|
An issue was discovered in BlogEngine.NET through 3.3.6.0. A path traversal and Local File Inclusion vulnerability in PostList.ascx.cs can cause unauthenticated users to load a PostView.ascx componen…
|
CWE-22
Path Traversal
|
CVE-2019-6714
|
2024-11-21 13:46 |
2019-03-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218584
|
5.9 |
MEDIUM
Network
|
mastercard
|
qkr\!_with_masterpass
|
The MasterCard Qkr! app before 5.0.8 for iOS has Missing SSL Certificate Validation. NOTE: this CVE only applies to obsolete versions from 2016 or earlier.
|
CWE-295
Improper Certificate Validation
|
CVE-2019-6702
|
2024-11-21 13:46 |
2019-03-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218585
|
7.5 |
HIGH
Network
|
python debian opensuse suse canonical
|
python-gnupg debian_linux leap backports ubuntu_linux
|
python-gnupg 0.4.3 allows context-dependent attackers to trick gnupg to decrypt other ciphertext than intended. To perform the attack, the passphrase to gnupg must be controlled by the adversary and …
|
CWE-20
Improper Input Validation
|
CVE-2019-6690
|
2024-11-21 13:46 |
2019-03-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218586
|
5.5 |
MEDIUM
Local
|
qemu fedoraproject
|
qemu fedora
|
In QEMU 3.1, scsi_handle_inquiry_reply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations.
|
CWE-125 CWE-787
Out-of-bounds Read Out-of-bounds Write
|
CVE-2019-6501
|
2024-11-21 13:46 |
2019-03-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218587
|
5.5 |
MEDIUM
Local
|
iobit
|
smart_defrag
|
SmartDefragDriver.sys (2.0) in IObit Smart Defrag 6 never frees an executable kernel pool that is allocated with user defined bytes and size when IOCTL 0x9C401CC4 is called. This kernel pointer can b…
|
CWE-401
Missing Release of Memory after Effective Lifetime
|
CVE-2019-6492
|
2024-11-21 13:46 |
2019-03-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218588
|
8.8 |
HIGH
Network
|
chinamobileltd
|
gpn2.4p21-c-cn_firmware
|
ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have CSRF via the cgi-bin/webproc?getpage=html/index.html subpage=wlsecurity URI, allowing an Attacker to change the Wi…
|
CWE-352
Origin Validation Error
|
CVE-2019-6282
|
2024-11-21 13:46 |
2019-03-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218589
|
8.8 |
HIGH
Network
|
chinamobileltd
|
gpn2.4p21-c-cn_firmware
|
ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have an Incorrect Access Control vulnerability via the cgi-bin/webproc?getpage=html/index.html subpage=wlsecurity URI, …
|
NVD-CWE-noinfo
|
CVE-2019-6279
|
2024-11-21 13:46 |
2019-03-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218590
|
8.8 |
HIGH
Network
|
gl-inet
|
gl-ar300m-lite_firmware
|
Command injection vulnerability in firmware_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to execute arbitrary code.
|
CWE-77
Command Injection
|
CVE-2019-6275
|
2024-11-21 13:46 |
2019-03-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|