|
223851
|
5.4 |
MEDIUM
Network
|
alfresco
|
alfresco
|
Alfresco Enterprise before 5.2.5 allows stored XSS via an uploaded HTML document.
|
CWE-79
Cross-site Scripting
|
CVE-2019-19496
|
2024-11-21 13:34 |
2019-12-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223852
|
5.4 |
MEDIUM
Network
|
kentico
|
kentico
|
Kentico before 12.0.50 allows file uploads in which the Content-Type header is inconsistent with the file extension, leading to XSS.
|
CWE-434 CWE-706
Unrestricted Upload of File with Dangerous Type Use of Incorrectly-Resolved Name or Reference
|
CVE-2019-19493
|
2024-11-21 13:34 |
2019-12-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223853
|
6.5 |
MEDIUM
Network
|
teamviewer
|
teamviewer
|
An issue was discovered in the Chat functionality of the TeamViewer desktop application 14.3.4730 on Windows. (The vendor states that it was later fixed.) Upon login, every communication is saved wit…
|
CWE-212
Improper Removal of Sensitive Information Before Storage or Transfer
|
CVE-2019-19362
|
2024-11-21 13:34 |
2019-12-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223854
|
6.5 |
MEDIUM
Network
|
djangoproject fedoraproject
|
django fedora
|
Django 2.1 before 2.1.15 and 2.2 before 2.2.8 allows unintended model editing. A Django model admin displaying inline related models, where the user has view-only permissions to a parent model but ed…
|
CWE-276
Incorrect Default Permissions
|
CVE-2019-19118
|
2024-11-21 13:34 |
2019-12-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223855
|
9.8 |
CRITICAL
Network
|
freeswitch
|
freeswitch
|
FreeSWITCH 1.6.10 through 1.10.1 has a default password in event_socket.conf.xml.
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2019-19492
|
2024-11-21 13:34 |
2019-12-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223856
|
6.1 |
MEDIUM
Network
|
testlink
|
testlink
|
TestLink 1.9.19 has XSS via the lib/testcases/archiveData.php edit parameter, the index.php reqURI parameter, or the URI in a lib/testcases/tcEdit.php?doAction=doDeleteStep request.
|
CWE-79
Cross-site Scripting
|
CVE-2019-19491
|
2024-11-21 13:34 |
2019-12-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223857
|
7.3 |
HIGH
Local
|
litemanager
|
litemanager
|
LiteManager 4.5.0 has weak permissions (Everyone: Full Control) in the "LiteManagerFree - Server" folder, as demonstrated by ROMFUSClient.exe.
|
CWE-276
Incorrect Default Permissions
|
CVE-2019-19490
|
2024-11-21 13:34 |
2019-12-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223858
|
5.5 |
MEDIUM
Local
|
smplayer
|
smplayer
|
SMPlayer 19.5.0 has a buffer overflow via a long .m3u file.
|
CWE-120
Classic Buffer Overflow
|
CVE-2019-19489
|
2024-11-21 13:34 |
2019-12-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223859
|
4.6 |
MEDIUM
Physics
|
opensc_project
|
opensc
|
An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-cac1.c mishandles buffer limits for CAC certificates.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2019-19481
|
2024-11-21 13:34 |
2019-12-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223860
|
4.6 |
MEDIUM
Physics
|
opensc_project
|
opensc
|
An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/pkcs15-prkey.c has an incorrect free operation in sc_pkcs15_decode_prkdf_entry.
|
CWE-672
Operation on a Resource after Expiration or Release
|
CVE-2019-19480
|
2024-11-21 13:34 |
2019-12-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|