| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2019-10097 | 6.0 | In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol, a specially crafted PROXY header could trigger a stack buffer overflow or NULL pointer deference. This vulner | 2023-11-07 03:02:00 | 2019-09-26 16:15:00 |
| CVE-2019-10092 | 4.3 | In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the mod_proxy error page. An attacker could cause the link on the error page to be malformed and instead point to a page of their choice. This would only | 2023-11-07 03:02:00 | 2019-09-26 16:15:00 |
| CVE-2019-10082 | 6.4 | In Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling could be made to read memory after being freed, during connection shutdown. | 2023-11-07 03:02:00 | 2019-09-26 16:15:00 |
| CVE-2019-10098 | 5.8 | In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an unexpected URL within the request URL. | 2023-11-07 03:02:00 | 2019-09-25 17:15:00 |
| CVE-2019-10071 | 6.8 | The code which checks HMAC in form submissions used String.equals() for comparisons, which results in a timing side channel for the comparison of the HMAC signatures. This could lead to remote code execution if an attacker is able to determine the co | 2023-11-07 03:02:00 | 2019-09-16 18:15:00 |
| CVE-2019-11184 | 2.3 | A race condition in specific microprocessors using Intel (R) DDIO cache allocation and RDMA may allow an authenticated user to potentially enable partial information disclosure via adjacent access. | 2023-11-07 03:02:00 | 2019-09-16 16:15:00 |
| CVE-2019-10074 | 7.5 | An RCE is possible by entering Freemarker markup in an Apache OFBiz Form Widget textarea field when encoding has been disabled on such a field. This was the case for the Customer Request "story" input in the Order Manager application. Encoding should | 2023-11-07 03:02:00 | 2019-09-11 21:15:00 |
| CVE-2019-10073 | 4.3 | The "Blog", "Forum", "Contact Us" screens of the template "ecommerce" application bundled in Apache OFBiz are weak to Stored XSS attacks. Mitigation: Upgrade to 16.11.06 or manually apply the following commits on branch 16.11: 1858438, 1858543, 18605 | 2023-11-07 03:02:00 | 2019-09-11 21:15:00 |
| CVE-2019-10197 | 6.4 | A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when certain parameters were set in the samba configuration file. An unauthenticated attacker could use this flaw to escape the shared | 2023-11-07 03:02:00 | 2019-09-03 15:15:00 |
| CVE-2019-11246 | 4.3 | The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes runs tar inside the container to create a tar archive, copies it over the network, and kubectl unpacks it on the user’s ma | 2023-11-07 03:02:00 | 2019-08-29 01:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39855
Zapisa po stranici: