|
224801
|
6.5 |
MEDIUM
Adjacent
|
nxp
|
mcuxpresso_software_development_kit
|
The Bluetooth Low Energy (BLE) stack implementation on the NXP KW41Z (based on the MCUXpresso SDK with Bluetooth Low Energy Driver 2.2.1 and earlier) does not properly restrict the BLE Link Layer hea…
|
CWE-120
Classic Buffer Overflow
|
CVE-2019-17060
|
2024-11-21 13:31 |
2020-02-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224802
|
7.8 |
HIGH
Local
|
foxitsoftware
|
phantompdf
|
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the …
|
CWE-125
Out-of-bounds Read
|
CVE-2019-17136
|
2024-11-21 13:31 |
2020-02-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224803
|
7.8 |
HIGH
Local
|
foxitsoftware
|
phantompdf
|
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the …
|
CWE-787
Out-of-bounds Write
|
CVE-2019-17135
|
2024-11-21 13:31 |
2020-02-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224804
|
9.8 |
CRITICAL
Network
|
omniauth-weibo-oauth2_project
|
omniauth-weibo-oauth2
|
The omniauth-weibo-oauth2 gem 0.4.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. Versions through 0.4.5, and 0.5.1 and later, are unaffected.
|
CWE-94
Code Injection
|
CVE-2019-17268
|
2024-11-21 13:31 |
2020-02-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224805
|
7.5 |
HIGH
Network
|
tp-link
|
tp-sg105e_firmware
|
The Web Management of TP-Link TP-SG105E V4 1.0.0 Build 20181120 devices allows an unauthenticated attacker to reboot the device via a reboot.cgi request.
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2019-16893
|
2024-11-21 13:31 |
2020-02-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224806
|
7.8 |
HIGH
Local
|
bitdefender
|
endpoint_security_tools
|
An Untrusted Search Path vulnerability in EPSecurityService.exe as used in Bitdefender Endpoint Security Tools versions prior to 6.6.11.163 allows an attacker to load an arbitrary DLL file from the s…
|
CWE-426
Untrusted Search Path
|
CVE-2019-17099
|
2024-11-21 13:31 |
2020-01-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224807
|
9.8 |
CRITICAL
Network
|
bitdefender
|
box_2_firmware
|
A command injection vulnerability has been discovered in the bootstrap stage of Bitdefender BOX 2, versions 2.1.47.42 and 2.1.53.45. The API method `/api/download_image` unsafely handles the producti…
|
CWE-78
OS Command
|
CVE-2019-17095
|
2024-11-21 13:31 |
2020-01-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224808
|
7.8 |
HIGH
Local
|
belkin
|
wemo_insight_switch_firmware
|
A Stack-based Buffer Overflow vulnerability in libbelkin_api.so component of Belkin WeMo Insight Switch firmware allows a local attacker to obtain code execution on the device. This issue affects: Be…
|
CWE-787
Out-of-bounds Write
|
CVE-2019-17094
|
2024-11-21 13:31 |
2020-01-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224809
|
9.8 |
CRITICAL
Network
|
bitdefender
|
box_2_firmware central
|
A OS Command Injection vulnerability in the bootstrap stage of Bitdefender BOX 2 allows the manipulation of the `get_image_url()` function in special circumstances to inject a system command.
|
CWE-78
OS Command
|
CVE-2019-17096
|
2024-11-21 13:31 |
2020-01-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224810
|
7.8 |
HIGH
Local
|
avast
|
secure_browser
|
A Local Privilege Escalation issue was discovered in Avast Secure Browser 76.0.1659.101. The vulnerability is due to an insecure ACL set by the AvastBrowserUpdate.exe (which is running as NT AUTHORIT…
|
CWE-863
Incorrect Authorization
|
CVE-2019-17190
|
2024-11-21 13:31 |
2020-01-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|