CVE Vulnerability

NVD-CWE-noinfo

CVE-2019-1136

by

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka ‘Microsoft Exchange Server Elevation of Privilege Vulnerability’.

CVE-2019-11380

by

The master-password feature in the ES File Explorer File Manager application 4.2.0.1.3 for Android can be bypassed via a com.estrongs.android.pop.ftp.ESFtpShortcut intent, leading to remote FTP access to the entirety of local storage.

CVE-2019-1132

by

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka ‘Win32k Elevation of Privilege Vulnerability’.

CVE-2019-11320

by

In Motorola CX2 1.01 and M2 1.01, users can access the router’s /priv_mgt.html web page to launch telnetd, as demonstrated by the 192.168.51.1 address.

CVE-2019-11331

by

Network Time Protocol (NTP), as specified in RFC 5905, uses port 123 even for modes where a fixed port number is not required, which makes it easier for remote attackers to conduct off-path attacks.

CVE-2019-11332

by

MKCMS 5.0 allows remote attackers to take over arbitrary user accounts by posting a username and e-mail address to ucenter/repass.php, which triggers e-mail transmission with the password, as demonstrated by 123456.