|
223431
|
6.7 |
MEDIUM
Local
|
lenovo
|
dynamic_power_reduction
|
An unquoted search path vulnerability was identified in Lenovo Dynamic Power Reduction Utility prior to version 2.2.2.0 that could allow a malicious user with local access to execute code with admini…
|
CWE-428
Unquoted Search Path or Element
|
CVE-2019-6149
|
2024-11-21 13:46 |
2019-03-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223432
|
5.5 |
MEDIUM
Local
|
f5
|
big-ip_application_acceleration_manager
|
In BIG-IP 13.0.0, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, the Application Acceleration Manager (AAM) wamd process used in processing of images and PDFs fails to drop group permissions whe…
|
CWE-269
Improper Privilege Management
|
CVE-2019-6601
|
2024-11-21 13:46 |
2019-03-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223433
|
6.1 |
MEDIUM
Network
|
f5
|
big-ip_local_traffic_manager big-ip_application_acceleration_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_access_policy_manager big-ip_application_security_manager<…
|
In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.3, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, when remote authentication is enabled for administrative users and all external users are granted the "…
|
CWE-79
Cross-site Scripting
|
CVE-2019-6600
|
2024-11-21 13:46 |
2019-03-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223434
|
6.1 |
MEDIUM
Network
|
f5
|
big-ip_access_policy_manager
|
In BIG-IP 11.6.1-11.6.3.2 or 11.5.1-11.5.8, or Enterprise Manager 3.1.1, improper escaping of values in an undisclosed page of the configuration utility may result with an improper handling on the JS…
|
CWE-79
Cross-site Scripting
|
CVE-2019-6599
|
2024-11-21 13:46 |
2019-03-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223435
|
4.3 |
MEDIUM
Network
|
f5
|
big-ip_local_traffic_manager big-ip_application_acceleration_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_access_policy_manager big-ip_application_security_manager<…
|
In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.1-11.6.3.2, or 11.5.1-11.5.8 or Enterprise Manager 3.1.1, malformed requests to the Traffic Management User Interface (TMUI), also re…
|
NVD-CWE-noinfo
|
CVE-2019-6598
|
2024-11-21 13:46 |
2019-03-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223436
|
7.2 |
HIGH
Network
|
f5
|
big-ip_local_traffic_manager big-ip_application_acceleration_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_access_policy_manager big-ip_application_security_manager<…
|
In BIG-IP 13.0.0-13.1.1.1, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8 or Enterprise Manager 3.1.1, when authenticated administrative users run commands in the Traffic Management User Interfac…
|
NVD-CWE-noinfo
|
CVE-2019-6597
|
2024-11-21 13:46 |
2019-03-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223437
|
7.5 |
HIGH
Network
|
f5
|
big-ip_access_policy_manager
|
In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, 12.1.0-12.1.3.6, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, when processing fragmented ClientHello messages in a DTLS session TMM may corrupt memory eventually lea…
|
NVD-CWE-noinfo
|
CVE-2019-6596
|
2024-11-21 13:46 |
2019-03-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223438
|
8.8 |
HIGH
Network
|
zyxel
|
nbg-418n_firmware
|
Zyxel NBG-418N v2 v1.00(AAXM.4)C0 devices allow login.cgi CSRF.
|
CWE-352
Origin Validation Error
|
CVE-2019-6710
|
2024-11-21 13:46 |
2019-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223439
|
6.1 |
MEDIUM
Network
|
moxa
|
iks-g6824a_firmware eds-405a_firmware eds-408a_firmware eds-510a_firmware
|
Moxa IKS and EDS fails to properly validate user input, giving unauthenticated and authenticated attackers the ability to perform XSS attacks, which may be used to send a malicious script.
|
CWE-79
Cross-site Scripting
|
CVE-2019-6565
|
2024-11-21 13:46 |
2019-03-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223440
|
9.8 |
CRITICAL
Network
|
moxa
|
iks-g6824a_firmware eds-405a_firmware eds-408a_firmware eds-510a_firmware
|
Moxa IKS and EDS generate a predictable cookie calculated with an MD5 hash, allowing an attacker to capture the administrator's password, which could lead to a full compromise of the device.
|
CWE-916
Use of Password Hash With Insufficient Computational Effort
|
CVE-2019-6563
|
2024-11-21 13:46 |
2019-03-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|