|
222461
|
4.9 |
MEDIUM
Network
|
oracle netapp
|
mysql oncommand_unified_manager snapcenter oncommand_workflow_automation oncommand_insight
|
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 8.0.13 and prior. Easily exploitable vulnerability allows high privileged …
|
NVD-CWE-noinfo
|
CVE-2019-2502
|
2024-11-21 13:41 |
2019-01-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222462
|
- |
|
-
|
-
|
parseWildcardRules in Gin-Gonic CORS middleware before 1.6.0 mishandles a wildcard at the end of an origin string, e.g., https://example.community/* is allowed when the intention is that only https:/…
|
-
|
CVE-2019-25211
|
2024-11-21 13:40 |
2024-06-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222463
|
- |
|
-
|
-
|
An issue was discovered in Cloud Native Computing Foundation (CNCF) Helm through 3.13.3. It displays values of secrets when the --dry-run flag is used. This is a security concern in some use cases, s…
|
-
|
CVE-2019-25210
|
2024-11-21 13:40 |
2024-03-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222464
|
7.8 |
HIGH
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
i2c: Fix a potential use after free
Free the adap structure only after we are done using it.
This patch just moves the put_device…
|
CWE-416
Use After Free
|
CVE-2019-25162
|
2024-11-21 13:40 |
2024-02-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222465
|
7.1 |
HIGH
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
netlabel: fix out-of-bounds memory accesses
There are two array out-of-bounds memory accesses, one in
cipso_v4_map_lvl_valid(), t…
|
CWE-125
Out-of-bounds Read
|
CVE-2019-25160
|
2024-11-21 13:40 |
2024-02-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222466
|
9.8 |
CRITICAL
Network
|
mpedraza2020
|
intranet_del_monterroso
|
A vulnerability was found in mpedraza2020 Intranet del Monterroso up to 4.50.0. It has been classified as critical. This affects an unknown part of the file config/cargos.php. The manipulation of the…
|
-
|
CVE-2019-25159
|
2024-11-21 13:40 |
2024-02-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222467
|
9.8 |
CRITICAL
Network
|
pedroetb
|
tts-api
|
A vulnerability has been found in pedroetb tts-api up to 2.1.4 and classified as critical. This vulnerability affects the function onSpeechDone of the file app.js. The manipulation leads to os comman…
|
-
|
CVE-2019-25158
|
2024-11-21 13:40 |
2023-12-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222468
|
6.5 |
MEDIUM
Network
|
mongodb
|
mongodb
|
A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which use $lookup and collations. This issue affects MongoDB Server v4.2 versions pri…
|
CWE-416
Use After Free
|
CVE-2019-2393
|
2024-11-21 13:40 |
2020-11-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222469
|
6.5 |
MEDIUM
Network
|
mongodb
|
mongodb
|
A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which use the $mod operator to overflow negative values. This issue affects: MongoDB …
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2019-2392
|
2024-11-21 13:40 |
2020-11-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222470
|
7.8 |
HIGH
Local
|
google
|
android
|
In SurfaceFlinger::createLayer of SurfaceFlinger.cpp, there is a possible arbitrary code execution due to improper casting. This could lead to local escalation of privilege with no additional executi…
|
CWE-704
Incorrect Type Conversion or Cast
|
CVE-2019-2194
|
2024-11-21 13:40 |
2020-10-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|