CVE-2019-1010000 to CVE-2019-1010999

39 CVEs with public proof-of-concept exploits.

• CVE-2019-10100041 PoCSoX - Sound eXchange 14.4.2 and earlier is affected by: Out-of-bounds Read. The impact is: Denial of Service. The component is:…
• CVE-2019-10100052 PoCsHexoEditor v1.1.8-beta is affected by: XSS to code execution.
• CVE-2019-10100062 PoCsEvince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The component is:…
• CVE-2019-10100222 PoCsGNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The component is: nptl. The…
• CVE-2019-10100231 PoCGNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may…
• CVE-2019-10100251 PoCGNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthread_created thread. The…
• CVE-2019-10100541 PoCDolibarr 7.0.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: allow malitious html to change user password, disable…
• CVE-2019-10100912 PoCstinymce 4.7.11, 4.7.12 is affected by: CWE-79: Improper Neutralization of Input During Web Page Generation. The impact is: JavaScript code…
• CVE-2019-10101121 PoCOECMS v4.3.R60321 and v4.3 later is affected by: Cross Site Request Forgery (CSRF). The impact is: The victim clicks on adding an…
• CVE-2019-10101243 PoCsWebAppick WooCommerce Product Feed 2.2.18 and earlier is affected by: Cross Site Scripting (XSS). The impact is: XSS to RCE via editing…
• CVE-2019-10101271 PoCVCFTools vcftools prior to version 0.1.15 is affected by: Use-after-free. The impact is: Denial of Service or possibly other impact (eg.…
• CVE-2019-10101361 PoCChinaMobile GPN2.4P21-C-CN W2001EN-00 is affected by: Incorrect Access Control - Unauthenticated Remote Reboot. The impact is: PLC…
• CVE-2019-10101481 PoCzzcms version 8.3 and earlier is affected by: SQL Injection. The impact is: zzcms File Delete to Code Execution.
• CVE-2019-10101491 PoCzzcms version 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: zzcms File Delete to Code Execution. The…
• CVE-2019-10101501 PoCzzcms 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: getshell. The component is: /user/zssave.php.
• CVE-2019-10101511 PoCzzcms zzmcms 8.3 and earlier is affected by: File Delete to getshell. The impact is: getshell. The component is: /user/ppsave.php.
• CVE-2019-10101521 PoCzzcms 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: getshell. The component is: user/manage.php line 31-80.
• CVE-2019-10101531 PoCzzcms 8.3 and earlier is affected by: SQL Injection. The impact is: sql inject. The component is: zs/subzs.php.
• CVE-2019-10101552 PoCsD-Link DSL-2750U 1.11 is affected by: Authentication Bypass. The impact is: denial of service and information leakage. The component is:…
• CVE-2019-10101632 PoCsSocusoft Co Photo 2 Video Converter 8.0.0 is affected by: Buffer Overflow - Local shell-code execution and Denial of Service. The impact…
• CVE-2019-10101741 PoCCImg The CImg Library v.2.3.3 and earlier is affected by: command injection. The impact is: RCE. The component is: load_network()…
• CVE-2019-10101781 PoCFred MODX Revolution < 1.0.0-beta5 is affected by: Incorrect Access Control - CWE-648. The impact is: Remote Code Execution. The component…
• CVE-2019-10101931 PoChisiphp 1.0.8 is affected by: Cross Site Scripting (XSS).
• CVE-2019-10102071 PoCGenetechsolutions Pie Register 3.0.15 is affected by: Cross Site Scripting (XSS). The impact is: Stealing of session cookies. The…
• CVE-2019-10102091 PoCGoUrl.io GoURL Wordpress Plugin 1.4.13 and earlier is affected by: CWE-434. The impact is: unauthenticated/unzuthorized Attacker can…
• CVE-2019-10102411 PoCJenkins Credentials Binding Plugin Jenkins 1.17 is affected by: CWE-257: Storing Passwords in a Recoverable Format. The impact is:…
• CVE-2019-10102521 PoCThe Linux Foundation ONOS 2.0.0 and earlier is affected by: Poor Input-validation. The impact is: A network administrator (or attacker)…
• CVE-2019-10102571 PoCAn Information Disclosure / Data Modification issue exists in article2pdf_getfile.php in the article2pdf Wordpress plugin 0.24, 0.25,…
• CVE-2019-10102582 PoCsnanosvg library nanosvg after commit c1f6e209c16b18b46aa9f45d7e619acf42c29726 is affected by: Buffer Overflow. The impact is: Memory…
• CVE-2019-10102601 PoCUsing ktlint to download and execute custom rulesets can result in arbitrary code execution as the served jars can be compromised by a…
• CVE-2019-10102662 PoCslodash prior to 4.17.11 is affected by: CWE-400: Uncontrolled Resource Consumption. The impact is: Denial of service. The component is:…
• CVE-2019-10102682 PoCsLadon since 0.6.1 (since ebef0aae48af78c159b6fce81bc6f5e7e0ddb059) is affected by: XML External Entity (XXE). The impact is: Information…
• CVE-2019-10102791 PoCOpen Information Security Foundation Suricata prior to version 4.1.3 is affected by: Denial of Service - TCP/HTTP detection bypass. The…
• CVE-2019-10102831 PoCUnivention Corporate Server univention-directory-notifier 12.0.1-3 and earlier is affected by: CWE-213: Intentional Information Exposure.…
• CVE-2019-10102871 PoCTimesheet Next Gen 1.5.3 and earlier is affected by: Cross Site Scripting (XSS). The impact is: Allows an attacker to execute arbitrary…
• CVE-2019-10102902 PoCsBabel: Multilingual site Babel All is affected by: Open Redirection. The impact is: Redirection to any URL, which is supplied to…
• CVE-2019-10102981 PoCLinaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Code execution in the context of TEE core (kernel).…
• CVE-2019-10103011 PoCjhead 3.03 is affected by: Buffer Overflow. The impact is: Denial of service. The component is: gpsinfo.c Line 151 ProcessGpsInfo(). The…
• CVE-2019-10103051 PoClibmspack 0.9.1alpha is affected by: Buffer Overflow. The impact is: Information Disclosure. The component is: function…