| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2019-10747 | 7.5 | set-value is vulnerable to Prototype Pollution in versions lower than 3.0.1. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype using any of the constructor, prototype and _proto_ payloads. | 2023-11-07 03:02:00 | 2019-08-23 17:15:00 |
| CVE-2019-10746 | 7.5 | mixin-deep is vulnerable to Prototype Pollution in versions before 1.3.2 and version 2.0.0. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype using a constructor payload. | 2023-11-07 03:02:00 | 2019-08-23 17:15:00 |
| CVE-2019-10081 | 5.0 | HTTP/2 (2.4.20 through 2.4.39) very early pushes, for example configured with "H2PushResource", could lead to an overwrite of memory in the pushing request's pool, leading to crashes. The memory copied is that of the configured push link header value | 2023-11-07 03:02:00 | 2019-08-15 22:15:00 |
| CVE-2019-10099 | 4.3 | Prior to Spark 2.3.3, in certain situations Spark would write user data to local disk unencrypted, even if spark.io.encryption.enabled=true. This includes cached blocks that are fetched to disk (controlled by spark.maxRemoteBlockSizeFetchToMem); in S | 2023-11-07 03:02:00 | 2019-08-07 17:15:00 |
| CVE-2019-10094 | 6.8 | A carefully crafted package/compressed file that, when unzipped/uncompressed yields the same file (a quine), causes a StackOverflowError in Apache Tika's RecursiveParserWrapper in versions 1.7-1.21. Apache Tika users should upgrade to 1.22 or later. | 2023-11-07 03:02:00 | 2019-08-02 19:15:00 |
| CVE-2019-10093 | 4.3 | In Apache Tika 1.19 to 1.21, a carefully crafted 2003ml or 2006ml file could consume all available SAXParsers in the pool and lead to very long hangs. Apache Tika users should upgrade to 1.22 or later. | 2023-11-07 03:02:00 | 2019-08-02 19:15:00 |
| CVE-2019-10088 | 6.8 | A carefully crafted or corrupt zip file can cause an OOM in Apache Tika's RecursiveParserWrapper in versions 1.7-1.21. Users should upgrade to 1.22 or later. | 2023-11-07 03:02:00 | 2019-08-02 19:15:00 |
| CVE-2019-10161 | 7.2 | It was discovered that libvirtd before versions 4.10.1 and 5.4.1 would permit read-only clients to use the virDomainSaveImageGetXMLDesc() API, specifying an arbitrary path which would be accessed with the permissions of the libvirtd process. An attac | 2023-11-07 03:02:00 | 2019-07-30 23:15:00 |
| CVE-2019-1020014 | 2.1 | docker-credential-helpers before 0.6.3 has a double free in the List functions. | 2023-11-07 03:02:00 | 2019-07-29 13:15:00 |
| CVE-2019-1000033 | - | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-1010259. Reason: This candidate is a reservation duplicate of CVE-2019-1010259. Notes: All CVE users should reference CVE-2019-1010259 instead of this candidate. All references a | 2023-11-07 03:02:00 | 2019-07-26 21:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39855
Zapisa po stranici: