Search Results (118691 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2019-5439 1 Videolan 1 Vlc Media Player 2024-11-21 N/A
A Buffer Overflow in VLC Media Player < 3.0.7 causes a crash which can possibly be further developed into a remote code execution exploit.
CVE-2019-5426 1 Ui 1 Edgeswitch X 2024-11-21 4.8 Medium
In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, an unauthenticated user can use the "local port forwarding" and "dynamic port forwarding" (SOCKS proxy) functionalities. Remote attackers without credentials can exploit this bug to access local services or forward traffic through the device if SSH is enabled in the system settings.
CVE-2019-5423 1 Http-live-simulator Project 1 Http-live-simulator 2024-11-21 N/A
Path traversal vulnerability in http-live-simulator npm package version 1.0.5 allows arbitrary path to be accessed on the file system by a remote attacker.
CVE-2019-5420 3 Debian, Fedoraproject, Rubyonrails 3 Debian Linux, Fedora, Rails 2024-11-21 9.8 Critical
A remote code execution vulnerability in development mode Rails <5.2.2.1, <6.0.0.beta3 can allow an attacker to guess the automatically generated development mode secret token. This secret token can be used in combination with other Rails internals to escalate to a remote code execution exploit.
CVE-2019-5417 1 Zeit 1 Serve 2024-11-21 N/A
A path traversal vulnerability in serve npm package version 7.0.1 allows the attackers to read content of arbitrary files on the remote server.
CVE-2019-5416 1 Localhost-now Project 1 Localhost-now 2024-11-21 N/A
A path traversal vulnerability in localhost-now npm package version 1.0.2 allows the attackers to read content of arbitrary files on the remote server.
CVE-2019-5407 1 Hp 1 3par Storeserv Management Console 2024-11-21 N/A
A remote information disclosure vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5.0.1.
CVE-2019-5406 1 Hp 1 3par Storeserv Management Console 2024-11-21 N/A
A remote session reuse vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5.0.1.
CVE-2019-5405 1 Hp 1 3par Storeserv Management Console 2024-11-21 N/A
A remote authorization bypass vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5.0.1.
CVE-2019-5404 1 Hp 1 3par Storeserv Management Console 2024-11-21 N/A
A remote script injection vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5.0.1.
CVE-2019-5403 1 Hp 1 3par Storeserv Management Console 2024-11-21 N/A
A remote multiple cross-site scripting vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5.0.1.
CVE-2019-5402 1 Hp 1 3par Storeserv Management Console 2024-11-21 N/A
A remote authorization bypass vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5.0.1.
CVE-2019-5400 1 Hp 2 3par Service Processor, 3par Service Processor Firmware 2024-11-21 N/A
A remote session reuse vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1.
CVE-2019-5399 1 Hp 2 3par Service Processor, 3par Service Processor Firmware 2024-11-21 N/A
A remote gain authorized access vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1.
CVE-2019-5398 1 Hp 2 3par Service Processor, 3par Service Processor Firmware 2024-11-21 N/A
A remote multiple multiple cross-site vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1.
CVE-2019-5397 1 Hp 2 3par Service Processor, 3par Service Processor Firmware 2024-11-21 N/A
A remote bypass of security restrictions vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1.
CVE-2019-5396 1 Hp 2 3par Service Processor, 3par Service Processor Firmware 2024-11-21 N/A
A remote authentication bypass vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1.
CVE-2019-5395 1 Hp 2 3par Service Processor, 3par Service Processor Firmware 2024-11-21 N/A
A remote arbitrary file upload vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1.
CVE-2019-5393 1 Hp 1 Intelligent Management Center 2024-11-21 N/A
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-5390 1 Hp 1 Intelligent Management Center 2024-11-21 N/A
A remote command injection vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.