|
223231
|
4.7 |
MEDIUM
Local
|
trendmicro
|
antivirus_\+_security_2019
internet_security_2019
maximum_security_2019
officescan_cloud
premium_security_2019
|
The Trend Micro Security 2019 (15.0.0.1163 and below) consumer family of products is vulnerable to a denial of service (DoS) attack in which a malicious actor could manipulate a key file at a certain…
|
NVD-CWE-noinfo
|
CVE-2019-19694
|
2024-11-21 13:35 |
2020-02-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223232
|
7.8 |
HIGH
Local
|
ea
|
origin
|
Electronic Arts Origin 10.5.55.33574 is vulnerable to local privilege escalation due to arbitrary directory DACL manipulation, a different issue than CVE-2019-19247 and CVE-2019-19248. When Origin.ex…
|
NVD-CWE-Other
|
CVE-2019-19741
|
2024-11-21 13:35 |
2020-02-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223233
|
7.5 |
HIGH
Network
|
hashicorp
|
sentinel
|
HashiCorp Sentinel up to 0.10.1 incorrectly parsed negation in certain policy expressions. Fixed in 0.10.2.
|
NVD-CWE-noinfo
|
CVE-2019-19879
|
2024-11-21 13:35 |
2020-02-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223234
|
6.1 |
MEDIUM
Network
|
lenovo
|
ez_media_\&_backup_center_ix2_firmware
ez_media_\&_backup_center_ix2-dl_firmware
|
A vulnerability in the web interface of Lenovo EZ Media & Backup Center, ix2 & ix2-dl version 4.1.406.34763 and prior could allow an unauthenticated, remote attacker to redirect a user to an untruste…
|
CWE-601
Open Redirect
|
CVE-2019-19758
|
2024-11-21 13:35 |
2020-02-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223235
|
5.4 |
MEDIUM
Network
|
lenovo
|
xclarity_administrator
|
An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered a Document Object Model (DOM) based cross-site scripting vulnerability in versions prior to 2.6.6 that could allo…
|
CWE-79
Cross-site Scripting
|
CVE-2019-19757
|
2024-11-21 13:35 |
2020-02-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223236
|
7.0 |
HIGH
Local
|
linuxfoundation
debian
opensuse
canonical
redhat
|
runc
debian_linux
leap
ubuntu_linux
openshift_container_platform
|
runc through 1.0.0-rc9 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go. To exploit this, an attacker must be able to spawn two containers wit…
|
CWE-706
Use of Incorrectly-Resolved Name or Reference
|
CVE-2019-19921
|
2024-11-21 13:35 |
2020-02-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223237
|
4.3 |
MEDIUM
Network
|
maxum
|
rumpus_ftp
|
A CSRF vulnerability exists in the File Types component of Web File Manager in Rumpus FTP 8.2.9.1 that allows an attacker to add or delete the file types that are used on the server via RAPR/TriggerS…
|
CWE-352
Origin Validation Error
|
CVE-2019-19668
|
2024-11-21 13:35 |
2020-02-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223238
|
6.1 |
MEDIUM
Network
|
maxum
|
rumpus_ftp
|
A HTTP Response Splitting vulnerability was identified in the Web Settings Component of Web File Manager in Rumpus FTP Server 8.2.9.1. A successful exploit can result in stored XSS, website defacemen…
|
NVD-CWE-Other
|
CVE-2019-19670
|
2024-11-21 13:35 |
2020-02-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223239
|
6.5 |
MEDIUM
Network
|
maxum
|
rumpus_ftp
|
A CSRF vulnerability exists in the Upload Center Forms Component of Web File Manager in Rumpus FTP 8.2.9.1. This could allow an attacker to delete, create, and update the upload forms via RAPR/Trigge…
|
CWE-352
Origin Validation Error
|
CVE-2019-19669
|
2024-11-21 13:35 |
2020-02-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223240
|
5.4 |
MEDIUM
Network
|
maxum
|
rumpus_ftp
|
A CSRF vulnerability exists in the Block Clients component of Web File Manager in Rumpus FTP 8.2.9.1 that could allow an attacker to whitelist or block any IP address via RAPR/BlockedClients.html.
|
CWE-352
Origin Validation Error
|
CVE-2019-19667
|
2024-11-21 13:35 |
2020-02-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
