Export limit exceeded: 94252 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (94252 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2019-17504 | 1 Kirona | 1 Dynamic Resource Scheduling | 2024-11-21 | 6.1 Medium |
| An issue was discovered in Kirona Dynamic Resource Scheduling (DRS) 5.5.3.5. A reflected Cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script via the /osm/report/ password parameter. | ||||
| CVE-2019-17501 | 1 Centreon | 1 Centreon | 2024-11-21 | 8.8 High |
| Centreon 19.04 allows attackers to execute arbitrary OS commands via the Command Line field of main.php?p=60807&type=4 (aka the Configuration > Commands > Discovery screen). CVE-2019-17501 and CVE-2019-16405 are similar to one another and may be the same. | ||||
| CVE-2019-17499 | 1 Compal | 2 Ch7465lg, Ch7465lg Firmware | 2024-11-21 | 8.8 High |
| The setter.xml component of the Common Gateway Interface on Compal CH7465LG 6.12.18.25-2p4 devices does not properly validate ping command arguments, which allows remote authenticated users to execute OS commands as root via shell metacharacters in the Target_IP parameter. | ||||
| CVE-2019-17496 | 1 Craftcms | 1 Craft Cms | 2024-11-21 | 6.1 Medium |
| Craft CMS before 3.3.8 has stored XSS via a name field. This field is mishandled during site deletion. | ||||
| CVE-2019-17494 | 1 Laravel-bjyblog Project | 1 Laravel-bjyblog | 2024-11-21 | 6.1 Medium |
| laravel-bjyblog 6.1.1 has XSS via a crafted URL. | ||||
| CVE-2019-17493 | 1 Jnoj | 1 Jiangnan Online Judge | 2024-11-21 | 6.1 Medium |
| Jiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[sample_input] parameter to web/admin/problem/create or web/polygon/problem/update. | ||||
| CVE-2019-17491 | 1 Jnoj | 1 Jiangnan Online Judge | 2024-11-21 | 6.1 Medium |
| Jiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[description] parameter to web/admin/problem/create or web/polygon/problem/update. | ||||
| CVE-2019-17489 | 1 Jnoj | 1 Jiangnan Online Judge | 2024-11-21 | 6.1 Medium |
| Jiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[title] parameter to web/polygon/problem/create or web/polygon/problem/update or web/admin/problem/create. | ||||
| CVE-2019-17488 | 1 B3log | 1 Symphony | 2024-11-21 | 6.1 Medium |
| b3log Symphony (aka Sym) before 3.6.0 has XSS via the HTTP User-Agent header. | ||||
| CVE-2019-17434 | 1 Lavalite | 1 Lavalite | 2024-11-21 | 5.4 Medium |
| LavaLite through 5.7 has XSS via a crafted account name that is mishandled on the Manage Clients screen. | ||||
| CVE-2019-17433 | 1 Laravel-admin | 1 Laravel-admin | 2024-11-21 | 4.8 Medium |
| z-song laravel-admin 1.7.3 has XSS via the Slug or Name on the Roles screen, because of mishandling on the "Operation log" screen. | ||||
| CVE-2019-17432 | 1 Fastadmin | 1 Fastadmin | 2024-11-21 | 6.5 Medium |
| An issue was discovered in fastadmin 1.0.0.20190705_beta. There is a public/admin/general.config/edit CSRF vulnerability, as demonstrated by resultant XSS via the row[name] parameter. | ||||
| CVE-2019-17430 | 1 Eyoucms | 1 Eyoucms | 2024-11-21 | 6.1 Medium |
| EyouCms through 2019-07-11 has XSS related to the login.php web_recordnum parameter. | ||||
| CVE-2019-17427 | 1 Redmine | 1 Redmine | 2024-11-21 | 6.1 Medium |
| In Redmine before 3.4.11 and 4.0.x before 4.0.4, persistent XSS exists due to textile formatting errors. | ||||
| CVE-2019-17424 | 1 Nipper-ng Project | 1 Nipper-ng | 2024-11-21 | 7.8 High |
| A stack-based buffer overflow in the processPrivilage() function in IOS/process-general.c in nipper-ng 0.11.10 allows remote attackers (serving firewall configuration files) to achieve Remote Code Execution or Denial Of Service via a crafted file. | ||||
| CVE-2019-17417 | 1 Pbootcms | 1 Pbootcms | 2024-11-21 | 4.8 Medium |
| PbootCMS 2.0.2 allows XSS via vectors involving the Pboot/admin.php?p=/Single/index/mcode/1 and Pboot/?contact/ URIs. | ||||
| CVE-2019-17409 | 1 Open-emr | 1 Openemr | 2024-11-21 | 6.1 Medium |
| Reflected XSS exists in interface/forms/eye_mag/view.php in OpenEMR 5.x before 5.0.2.1 ia the id parameter. | ||||
| CVE-2019-17405 | 1 Nokia | 1 Impact | 2024-11-21 | 6.1 Medium |
| Nokia IMPACT < 18A: has Reflected self XSS | ||||
| CVE-2019-17391 | 1 Espressif | 8 Esp32-d0wd, Esp32-d0wd Firmware, Esp32-d2wd and 5 more | 2024-11-21 | 4.6 Medium |
| An issue was discovered in the Espressif ESP32 mask ROM code 2016-06-08 0 through 2. Lack of anti-glitch mitigations in the first stage bootloader of the ESP32 chip allows an attacker (with physical access to the device) to read the contents of read-protected eFuses, such as flash encryption and secure boot keys, by injecting a glitch into the power supply of the chip shortly after reset. | ||||
| CVE-2019-17388 | 4 Aviatrix, Freebsd, Linux and 1 more | 4 Vpn Client, Freebsd, Linux Kernel and 1 more | 2024-11-21 | 7.8 High |
| Weak file permissions applied to the Aviatrix VPN Client through 2.2.10 installation directory on Windows and Linux allow a local attacker to execute arbitrary code by gaining elevated privileges through file modifications. | ||||