CVE's - CVE Vulnerability

CVE

Vendors

Products

Updated

CVSS v2

CVSS v3

CVE-2019-15123

2020-06-23

N/A

7.2 HIGH

The Branding Module in Viki Vera 4.9.1.26180 allows an authenticated user to change the logo on the website. An attacker could use this to upload a malicious .aspx file and gain Remote Code Execution on the site.

CVE-2019-15120

2019-09-26

N/A

6.1 MEDIUM

The Kunena extension before 5.1.14 for Joomla! allows XSS via BBCode.

CVE-2019-1512

2020-01-24

N/A

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none.

CVE-2019-15119

2020-08-24

N/A

5.5 MEDIUM

lib/install/install.go in cnlh nps through 0.23.2 uses 0777 permissions for /usr/local/bin/nps and/or /usr/bin/nps, leading to a file overwrite by a local user.

CVE-2019-15118

2020-08-24

N/A

5.5 MEDIUM

check_input_term in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles recursion, leading to kernel stack exhaustion.

CVE-2019-15117

2019-09-06

N/A

7.8 HIGH

parse_audio_mixer_unit in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles a short descriptor, leading to out-of-bounds memory access.

CVE-2019-15116

Easy Digital Downloads, Sandhillsdev