| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2019-14351 | 4.0 | EspoCRM 5.6.4 is vulnerable to user password hash enumeration. A malicious authenticated attacker can brute-force a user password hash by 1 symbol at a time using specially crafted api/v1/User?filterList filters. | 2020-08-24 17:37:00 | 2019-07-28 16:15:00 |
| CVE-2019-14294 | 4.3 | An issue was discovered in Xpdf 4.01.01. There is a use-after-free in the function JPXStream::fillReadBuf at JPXStream.cc, due to an out of bounds read. | 2020-08-24 17:37:00 | 2019-07-27 19:15:00 |
| CVE-2019-9492 | 4.6 | A DLL side-loading vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow an authenticated attacker to gain code execution and terminate the product's process - disabling endpoint protection. The attacker must have already gained authent | 2020-08-24 17:37:00 | 2019-07-26 14:15:00 |
| CVE-2019-14228 | 4.3 | Xavier PHP Management Panel 3.0 is vulnerable to Reflected POST-based XSS via the username parameter when registering a new user at admin/includes/adminprocess.php. If there is an error when registering the user, the unsanitized username will reflect | 2020-08-24 17:37:00 | 2019-07-26 13:15:00 |
| CVE-2019-13955 | 4.0 | Mikrotik RouterOS before 6.44.5 (long-term release tree) is vulnerable to stack exhaustion. By sending a crafted HTTP request, an authenticated remote attacker can crash the HTTP server via recursive parsing of JSON. Malicious code cannot be injected | 2020-08-24 17:37:00 | 2019-07-26 13:15:00 |
| CVE-2019-13954 | 6.8 | Mikrotik RouterOS before 6.44.5 (long-term release tree) is vulnerable to memory exhaustion. By sending a crafted HTTP request, an authenticated remote attacker can crash the HTTP server and in some circumstances reboot the system. Malicious code can | 2020-08-24 17:37:00 | 2019-07-26 13:15:00 |
| CVE-2019-13382 | 9.3 | UploaderService in SnagIT 2019.1.2 allows elevation of privilege by placing an invalid presentation file in %PROGRAMDATA%\TechSmith\TechSmith Recorder\QueuedPresentations and then creating a symbolic link in %PROGRAMDATA%\Techsmith\TechSmith Recorder | 2020-08-24 17:37:00 | 2019-07-26 13:15:00 |
| CVE-2019-2343 | 2.1 | Out of bound read and information disclosure in firmware due to insufficient checking of an embedded structure that can be sent from a kernel driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon | 2020-08-24 17:37:00 | 2019-07-25 17:15:00 |
| CVE-2019-2309 | 7.5 | While storing calibrated data from firmware in cache, An integer overflow may occur since data length received may exceed real data length. in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industri | 2020-08-24 17:37:00 | 2019-07-25 17:15:00 |
| CVE-2019-2308 | 7.2 | User application could potentially make RPC call to the fastrpc driver and the driver will allow the message to go through to the remote subsystem in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon V | 2020-08-24 17:37:00 | 2019-07-25 17:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39679
Zapisa po stranici: