|
225111
|
7.5 |
HIGH
Network
|
simplifile
|
recordfusion
|
In Simplifile RecordFusion through 2019-11-25, the logs and hist parameters allow remote attackers to access local files via a logger/logs?/../ or logger/hist?/../ URI.
|
CWE-22
Path Traversal
|
CVE-2019-19264
|
2024-11-21 13:34 |
2019-12-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
225112
|
6.1 |
MEDIUM
Network
|
maxum
|
rumpus
|
A Reflected Cross Site Scripting was discovered in the Login page of Rumpus FTP Web File Manager 8.2.9.1. An attacker can exploit it by sending a crafted link to end users and can execute arbitrary J…
|
CWE-79
Cross-site Scripting
|
CVE-2019-19368
|
2024-11-21 13:34 |
2019-12-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
225113
|
7.5 |
HIGH
Network
|
nic debian
|
knot_resolver debian_linux
|
knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with very many resource records might be processed very inefficiently, in extreme cases…
|
CWE-404
Improper Resource Shutdown or Release
|
CVE-2019-19331
|
2024-11-21 13:34 |
2019-12-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
225114
|
7.5 |
HIGH
Network
|
huawei
|
s12700_firmware s1700_firmware s2700_firmware s5700_firmware s6700_firmware s7700_firmware s9700_firmware
|
There is a weak algorithm vulnerability in some Huawei products. The affected products use weak algorithms by default. Attackers may exploit the vulnerability to cause information leaks.
|
NVD-CWE-noinfo
|
CVE-2019-19397
|
2024-11-21 13:34 |
2019-12-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
225115
|
7.8 |
HIGH
Local
|
idrix
|
veracrypt
|
VeraCrypt 1.24 allows Local Privilege Escalation during execution of VeraCryptExpander.exe.
|
NVD-CWE-noinfo
|
CVE-2019-19501
|
2024-11-21 13:34 |
2019-12-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
225116
|
7.8 |
HIGH
Local
|
ea
|
origin
|
Electronic Arts Origin through 10.5.x allows Elevation of Privilege (issue 2 of 2).
|
NVD-CWE-noinfo
|
CVE-2019-19248
|
2024-11-21 13:34 |
2019-12-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
225117
|
7.8 |
HIGH
Local
|
ea
|
origin
|
Electronic Arts Origin through 10.5.x allows Elevation of Privilege (issue 1 of 2).
|
NVD-CWE-noinfo
|
CVE-2019-19247
|
2024-11-21 13:34 |
2019-12-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
225118
|
5.4 |
MEDIUM
Network
|
scoutnet
|
kalender
|
The Scoutnet Kalender plugin 1.1.0 for WordPress allows XSS.
|
CWE-79
Cross-site Scripting
|
CVE-2019-19198
|
2024-11-21 13:34 |
2019-12-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
225119
|
9.1 |
CRITICAL
Network
|
squiz
|
matrix
|
An issue was discovered in core/assets/form/form_question_types/form_question_type_file_upload/form_question_type_file_upload.inc in Squiz Matrix CMS 5.5.0 prior to 5.5.0.3, 5.5.1 prior to 5.5.1.8, 5…
|
CWE-22
Path Traversal
|
CVE-2019-19374
|
2024-11-21 13:34 |
2019-12-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
225120
|
7.5 |
HIGH
Network
|
squiz
|
matrix
|
An issue was discovered in Squiz Matrix CMS 5.5.0 prior to 5.5.0.3, 5.5.1 prior to 5.5.1.8, 5.5.2 prior to 5.5.2.4, and 5.5.3 prior to 5.5.3.3 where a user can trigger arbitrary unserialization of a …
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2019-19373
|
2024-11-21 13:34 |
2019-12-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|