|
224511
|
5.3 |
MEDIUM
Network
|
nokia
|
impact
|
Nokia IMPACT < 18A has path traversal that may lead to RCE if chained with CVE-2019-1743
|
CWE-22
Path Traversal
|
CVE-2019-17406
|
2024-11-21 13:32 |
2019-11-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224512
|
6.1 |
MEDIUM
Network
|
nokia
|
impact
|
Nokia IMPACT < 18A: has Reflected self XSS
|
CWE-79
Cross-site Scripting
|
CVE-2019-17405
|
2024-11-21 13:32 |
2019-11-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224513
|
4.3 |
MEDIUM
Network
|
nokia
|
impact
|
Nokia IMPACT < 18A: allows full path disclosure
|
CWE-22
Path Traversal
|
CVE-2019-17404
|
2024-11-21 13:32 |
2019-11-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224514
|
8.8 |
HIGH
Network
|
nokia
|
impact
|
Nokia IMPACT < 18A: An unrestricted File Upload vulnerability was found that may lead to Remote Code Execution.
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2019-17403
|
2024-11-21 13:32 |
2019-11-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224515
|
7.8 |
HIGH
Local
|
eracent
|
epa_agent
|
An issue was discovered in Eracent EPA Agent through 10.2.26. The agent executable, when installed for non-root operations (scanning), can be used to start external programs with elevated permissions…
|
CWE-426
Untrusted Search Path
|
CVE-2019-17446
|
2024-11-21 13:32 |
2019-11-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224516
|
5.5 |
MEDIUM
Local
|
eracent
|
eda_agent epa_agent epm_agent eua_agent flw_agent sum_agent
|
An issue was discovered in Eracent EDA, EPA, EPM, EUA, FLW, and SUM Agent through 10.2.26. The agent executable, when installed for non-root operations (scanning), can be forced to copy files from th…
|
CWE-59
Link Following
|
CVE-2019-17445
|
2024-11-21 13:32 |
2019-11-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224517
|
7.8 |
HIGH
Local
|
fortinet
|
forticlient
|
An Improper Neutralization of Special Elements used in a Command vulnerability in one of FortiClient for Mac OS root processes, may allow a local user of the system on which FortiClient is running to…
|
CWE-78
OS Command
|
CVE-2019-17650
|
2024-11-21 13:32 |
2019-11-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224518
|
7.2 |
HIGH
Network
|
netapp
|
ontap_select_deploy_administration_utility
|
All versions of ONTAP Select Deploy administration utility are susceptible to a vulnerability which when successfully exploited could allow an administrative user to escalate their privileges.
|
NVD-CWE-noinfo
|
CVE-2019-17272
|
2024-11-21 13:32 |
2019-11-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224519
|
7.8 |
HIGH
Local
|
zohocorp
|
manageengine_firewall_analyzer manageengine_opmanager
|
Incorrect file permissions on the packaged Nipper executable file in Zoho ManageEngine OpManager 12.4.072 and Firewall Analyzer 12.4.072 allow local users to elevate privileges to root by overwriting…
|
CWE-276
Incorrect Default Permissions
|
CVE-2019-17421
|
2024-11-21 13:32 |
2019-11-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224520
|
7.8 |
HIGH
Local
|
comodo
|
comodo_internet_security
|
An issue was discovered in signmgr.dll 6.5.0.819 in Comodo Internet Security through 12.0. A DLL Preloading vulnerability allows an attacker to implant an unsigned DLL named iLog.dll in a partially u…
|
CWE-427
Uncontrolled Search Path Element
|
CVE-2019-18215
|
2024-11-21 13:32 |
2019-11-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|