Skip to main content
CVE-2019-5123 Oct 25, 18:15 HIGH POC This Week

Specially crafted web requests can cause SQL injections in YouPHPTube 7.6. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Youphptube
NVD
CVSS 3.1
8.8
EPSS
1.0%
CVE-2019-5122 Oct 25, 18:15 HIGH POC This Week

SQL injection vulnerabilities exists in the authenticated part of YouPHPTube 7.6. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Youphptube
NVD
CVSS 3.1
8.8
EPSS
0.8%
CVE-2019-5121 Oct 25, 18:15 HIGH POC This Week

SQL injection vulnerabilities exists in the authenticated part of YouPHPTube 7.6. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Youphptube
NVD
CVSS 3.1
8.8
EPSS
1.1%
CVE-2019-5120 Oct 25, 18:15 HIGH POC This Week

An exploitable SQL injection vulnerability exists in the authenticated part of YouPHPTube 7.6. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

SQLi Youphptube
NVD
CVSS 3.1
8.8
EPSS
1.1%
CVE-2019-5117 Oct 25, 18:15 HIGH POC This Week

Exploitable SQL injection vulnerabilities exists in the authenticated portion of YouPHPTube 7.6. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

SQLi Youphptube
NVD
CVSS 3.1
8.8
EPSS
1.1%
CVE-2019-5116 Oct 25, 18:15 HIGH POC This Week

An exploitable SQL injection vulnerability exists in the authenticated part of YouPHPTube 7.6. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

SQLi Youphptube
NVD
CVSS 3.1
8.8
EPSS
1.1%
CVE-2019-8086 Oct 25, 16:15 HIGH POC THREAT This Week

Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a xml external entity injection vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure XXE Adobe Experience Manager
NVD
CVSS 3.1
7.5
EPSS
24.1%
CVE-2019-17145 Oct 25, 19:15 HIGH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Stack Overflow Phantompdf Foxitsoftware
NVD
CVSS 3.1
8.8
EPSS
5.5%
CVE-2019-17144 Oct 25, 19:15 HIGH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Phantompdf Foxitsoftware
NVD
CVSS 3.1
8.8
EPSS
5.5%
CVE-2019-17142 Oct 25, 19:15 HIGH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption Phantompdf Foxitsoftware
NVD
CVSS 3.1
8.8
EPSS
6.3%
CVE-2019-17141 Oct 25, 19:15 HIGH PATCH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

RCE Use After Free Memory Corruption Phantompdf Foxitsoftware
NVD
CVSS 3.1
8.8
EPSS
5.2%
CVE-2019-17140 Oct 25, 19:15 HIGH PATCH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

RCE Use After Free Memory Corruption Phantompdf Foxitsoftware
NVD
CVSS 3.1
8.8
EPSS
5.2%
CVE-2019-17139 Oct 25, 19:15 HIGH PATCH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

RCE Buffer Overflow Memory Corruption Foxit Reader Phantompdf +1
NVD
CVSS 3.1
8.8
EPSS
5.8%
CVE-2019-5119 Oct 25, 18:15 HIGH This Week

An exploitable SQL injection vulnerability exist in the authenticated part of YouPHPTube 7.6. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

SQLi Youphptube
NVD
CVSS 3.1
8.8
EPSS
1.0%
CVE-2019-5508 Oct 25, 19:15 HIGH This Week

Clustered Data ONTAP versions 9.2 through 9.4 are susceptible to a vulnerability which allows an attacker to use l2ping to cause a Denial of Service (DoS). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Clustered Data Ontap Netapp
NVD
CVSS 3.1
7.5
EPSS
1.3%
CVE-2019-13549 Oct 25, 18:15 HIGH This Week

Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 - B1.2.4. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Pcoweb Firmware Carel
NVD
CVSS 3.1
7.5
EPSS
1.0%
CVE-2019-4399 Oct 25, 17:15 HIGH This Week

IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure IBM Cloud Orchestrator
NVD
CVSS 3.1
7.5
EPSS
0.8%
CVE-2019-4036 Oct 25, 17:15 HIGH This Week

IBM Security Access Manager Appliance could allow unauthenticated attacker to cause a denial of service in the reverse proxy component. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service IBM Security Access Manager
NVD
CVSS 3.1
7.5
EPSS
1.4%
CVE-2019-8087 Oct 25, 16:15 HIGH This Week

Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a xml external entity injection vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure XXE Adobe Experience Manager
NVD
CVSS 3.1
7.5
EPSS
3.6%
CVE-2019-8082 Oct 25, 15:15 HIGH This Week

Adobe Experience Manager versions 6.4, 6.3 and 6.2 have a xml external entity injection vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure XXE Adobe Experience Manager
NVD
CVSS 3.1
7.5
EPSS
3.2%
CVE-2019-8081 Oct 25, 15:15 HIGH This Week

Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have an authentication bypass vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Information Disclosure Adobe Experience Manager
NVD
CVSS 3.1
7.5
EPSS
3.3%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy