|
219831
|
7.8 |
HIGH
Local
|
lenovo
|
paper
|
A potential vulnerability in the discontinued LenovoPaper software version 1.0.0.22 may allow local privilege escalation.
|
NVD-CWE-noinfo
|
CVE-2019-6191
|
2024-11-21 13:46 |
2019-11-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219832
|
7.8 |
HIGH
Local
|
lenovo
|
system_interface_foundation
|
A potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1.18.3 that could allow an administrative user to load an unsigned DLL.
|
CWE-426
Untrusted Search Path
|
CVE-2019-6189
|
2024-11-21 13:46 |
2019-11-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219833
|
6.5 |
MEDIUM
Network
|
lenovo
|
xclarity_controller
|
A stored CSV Injection vulnerability was reported in Lenovo XClarity Controller (XCC) that could allow an administrative or other appropriately permissioned user to store malformed data in certain XC…
|
CWE-1236
Improper Neutralization of Formula Elements in a CSV File
|
CVE-2019-6187
|
2024-11-21 13:46 |
2019-11-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219834
|
8.8 |
HIGH
Network
|
lenovo
|
system_interface_foundation
|
A potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1.18.3 that could allow an authenticated user to execute code as another user.
|
NVD-CWE-noinfo
|
CVE-2019-6186
|
2024-11-21 13:46 |
2019-11-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219835
|
7.8 |
HIGH
Local
|
lenovo
|
customer_engagement_service
|
A potential vulnerability in the discontinued Customer Engagement Service (CCSDK) software version 2.0.21.1 may allow local privilege escalation.
|
NVD-CWE-noinfo
|
CVE-2019-6184
|
2024-11-21 13:46 |
2019-11-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219836
|
7.5 |
HIGH
Network
|
lenovo
|
thinkpad_usb-c_dock_firmware
|
A potential vulnerability reported in ThinkPad USB-C Dock Firmware version 3.7.2 may allow a denial of service.
|
NVD-CWE-noinfo
|
CVE-2019-6176
|
2024-11-21 13:46 |
2019-11-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219837
|
7.5 |
HIGH
Network
|
f5
|
big-ip_access_policy_manager
|
When the BIG-IP APM 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.4.1, or 11.5.1-11.6.5 system processes certain requests, the APD/APMD daemon may consume excessive resources.
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2019-6661
|
2024-11-21 13:46 |
2019-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219838
|
7.5 |
HIGH
Network
|
f5
|
big-ip_advanced_firewall_manager big-ip_access_policy_manager big-ip_application_acceleration_manager big-ip_link_controller big-ip_policy_enforcement_manager big-ip_webaccelerator …
|
On BIG-IP 15.0.0 and 14.1.0-14.1.0.6, under certain conditions, network protections on the management port do not follow current best practices.
|
NVD-CWE-noinfo
|
CVE-2019-6664
|
2024-11-21 13:46 |
2019-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219839
|
5.5 |
MEDIUM
Local
|
f5
|
big-ip_local_traffic_manager big-ip_advanced_firewall_manager big-ip_application_acceleration_manager big-ip_analytics big-ip_access_policy_manager big-ip_application_security_manager<…
|
The BIG-IP 15.0.0-15.0.1, 14.0.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.1-11.6.5.1, BIG-IQ 7.0.0, 6.0.0-6.1.0, and 5.2.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1 configuration…
|
CWE-20
Improper Input Validation
|
CVE-2019-6663
|
2024-11-21 13:46 |
2019-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219840
|
6.5 |
MEDIUM
Network
|
f5
|
big-ip_access_policy_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_application_acceleration_manager big-ip_application_security_manager big-ip_domain_name_system …
|
On BIG-IP 13.1.0-13.1.1.4, sensitive information is logged into the local log files and/or remote logging targets when restjavad processes an invalid request. Users with access to the log files would…
|
CWE-532
Inclusion of Sensitive Information in Log Files
|
CVE-2019-6662
|
2024-11-21 13:46 |
2019-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|