| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2019-17665 | 4.4 | NSA Ghidra before 9.0.2 is vulnerable to DLL hijacking because it loads jansi.dll from the current working directory. | 2021-07-21 11:39:00 | 2019-10-16 20:15:00 |
| CVE-2019-16698 | 4.0 | The direct_mail (aka Direct Mail) extension through 5.2.2 for TYPO3 has a missing access check in the backend module, allowing a user (with restricted permissions to the fe_users table) to view and export data of frontend users who are subscribed to | 2021-07-21 11:39:00 | 2019-10-16 19:15:00 |
| CVE-2019-17356 | 3.3 | The Infinite Design application 3.4.12 for Android sends a username and password via TCP without any encryption during login, as demonstrated by sniffing of a public Wi-Fi network. | 2021-07-21 11:39:00 | 2019-10-15 21:15:00 |
| CVE-2019-10760 | 6.5 | safer-eval before 1.3.2 are vulnerable to Arbitrary Code Execution. A payload using constructor properties can escape the sandbox and execute arbitrary code. | 2021-07-21 11:39:00 | 2019-10-15 15:15:00 |
| CVE-2019-10759 | 6.5 | safer-eval before 1.3.4 are vulnerable to Arbitrary Code Execution. A payload using constructor properties can escape the sandbox and execute arbitrary code. | 2021-07-21 11:39:00 | 2019-10-15 15:15:00 |
| CVE-2019-17575 | 6.5 | A file-rename filter bypass exists in admin/media/rename.php in WBCE CMS 1.4.0 and earlier. This can be exploited by an authenticated user with admin privileges to rename a media filename and extension. (For example: place PHP code in a .jpg file, an | 2021-07-21 11:39:00 | 2019-10-14 15:15:00 |
| CVE-2019-17408 | 7.5 | parserIfLabel in inc/zzz_template.php in ZZZCMS zzzphp 1.7.3 allows remote attackers to execute arbitrary code because the danger_key function can be bypassed via manipulations such as strtr. | 2021-07-21 11:39:00 | 2019-10-14 12:15:00 |
| CVE-2019-17542 | 7.5 | FFmpeg before 4.2 has a heap-based buffer overflow in vqa_decode_chunk because of an out-of-array access in vqa_decode_init in libavcodec/vqavideo.c. | 2021-07-21 11:39:00 | 2019-10-14 02:15:00 |
| CVE-2019-17532 | 7.8 | An issue was discovered on Belkin Wemo Switch 28B WW_2.00.11057.PVT-OWRT-SNS devices. They allow remote attackers to cause a denial of service (persistent rules-processing outage) via a crafted ruleDbBody element in a StoreRules request to the upnp/c | 2021-07-21 11:39:00 | 2019-10-12 21:15:00 |
| CVE-2019-2187 | 2.1 | In nfc_ncif_decode_rf_params of nfc_ncif.cc, there is a possible out of bounds read due to an integer underflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploi | 2021-07-21 11:39:00 | 2019-10-11 19:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: