30 December 2019

7 results · Clear filters · Feed

• Unscored —
  CVE-2019-19032 Public exploit

  XMLBlueprint through 16.191112 is affected by XML External Entity Injection. The impact is: Arbitrary File Read when an…

  Dec 30, 2019
• Unscored —
  CVE-2019-19031 Public exploit

  Easy XML Editor through v1.7.8 is affected by: XML External Entity Injection. The impact is: Arbitrary File Read and Do…

  Dec 30, 2019
• High 7.5
  CVE-2019-20149 Public exploit

  Validation Bypass in kind-of

  ctorName in index.js in kind-of v6.0.2 allows external user input to overwrite certain internal attributes via a conflicting name, as demonstrated by 'constructor': {'name':'Symbol'}. Hence, a crafted payload can overwrite this builtin attribute to manipulate…

  js-jquery kind-of node-kind-of node-kind-of Debian Ubuntu Azure Linux npm
  Dec 30, 2019
• Unscored —
  CVE-2019-19470 Public exploit

  Unsafe usage of .NET deserialization in Named Pipe message processing allows privilege escalation to NT AUTHORITY\SYSTE…

  Dec 30, 2019
• High 7.5
  CVE-2019-17558 Exploited Public exploit Scanner template EPSS 99%

  Improper Input Validation in Apache Solr

  Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A Velocity template can be provided through Velocity templates in a configset `velocity/` directory or as a parameter. A user defined configse…

  org.apache.solr:solr-core lucene-solr Debian Maven
  Dec 30, 2019

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2019-17621 Exploited Public exploit EPSS 91%

  The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated re…

  Dec 30, 2019

  KEV Jun 29, 2023
• High 7.5
  CVE-2019-20085 Exploited Public exploit Scanner template EPSS 96%

  TVT NVMS-1000 devices allow GET /.. Directory Traversal

  Dec 30, 2019

  KEV Nov 3, 2021