| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2019-11409 | 6.5 | app/operator_panel/exec.php in the Operator Panel module in FusionPBX 4.4.3 suffers from a command injection vulnerability due to a lack of input validation that allows authenticated non-administrative attackers to execute commands on the host. This | 2022-04-18 17:16:00 | 2019-06-17 19:15:00 |
| CVE-2019-0178 | 3.3 | Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access. | 2022-04-18 17:16:00 | 2019-06-13 16:29:00 |
| CVE-2019-7845 | 6.8 | Adobe Flash Player versions 32.0.0.192 and earlier, 32.0.0.192 and earlier, and 32.0.0.192 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution. | 2022-04-18 17:16:00 | 2019-06-12 16:29:00 |
| CVE-2019-3411 | 5.0 | All versions up to BD_R218V2.4 of ZTE MF920 product are impacted by information leak vulnerability. Due to some interfaces can obtain the WebUI login password without login, an attacker can exploit the vulnerability to obtain sensitive information ab | 2022-04-18 17:16:00 | 2019-06-11 20:29:00 |
| CVE-2019-2101 | 2.1 | In uvc_parse_standard_control of uvc_driver.c, there is a possible out-of-bound read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for | 2022-04-18 17:16:00 | 2019-06-07 20:29:00 |
| CVE-2019-5284 | 4.3 | There is a DoS vulnerability in RTSP module of Leland-AL00A Huawei smart phones versions earlier than Leland-AL00A 9.1.0.111(C00E111R2P10T8). Remote attackers could trick the user into opening a malformed RTSP media stream to exploit this vulnerabili | 2022-04-18 17:15:00 | 2019-06-04 19:29:00 |
| CVE-2019-12728 | 6.8 | Grails before 3.3.10 used cleartext HTTP to resolve the SDKMan notification service. NOTE: users' apps were not resolving dependencies over cleartext HTTP. | 2022-04-18 17:15:00 | 2019-06-04 13:29:00 |
| CVE-2019-9858 | 6.5 | Remote code execution was discovered in Horde Groupware Webmail 5.2.22 and 5.2.17. Horde/Form/Type.php contains a vulnerable class that handles image upload in forms. When the Horde_Form_Type_image method onSubmit() is called on uploads, it invokes t | 2022-04-18 17:13:00 | 2019-05-29 17:29:00 |
| CVE-2019-11387 | 4.3 | An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf allows remote attackers to cause a denial of service (ReDOS) by entering a specially crafted string with nested repetition | 2022-04-18 17:13:00 | 2019-04-21 02:29:00 |
| CVE-2022-27833 | 4.6 | Improper input validation in DSP driver prior to SMR Apr-2022 Release 1 allows out-of-bounds write by integer overflow. | 2022-04-18 17:10:00 | 2022-04-11 20:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: