14 matches found
CVE-2026-19001
creationtimestamp| type| source ---|---|--- 2026-08-12 21:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msw37annab2e 2026-08-12 22:02:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msw4zemw7z2l 2026-08-13 12:45:10+00:00| seen|...
CVE-2026-19001
The MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-size buffer when an application supplies an unusually long catalog, schema, or object name to a metadata retrieval function. This may result in memory corruption within the calling application's process, leading to...
CVE-2020-19001
Command Injection in Simiki v1.6.2.1 and prior allows remote attackers to execute arbitrary system commands via line 64 of the component 'simiki/blob/master/simiki/config.py'...
CVE-2019-19001
For ABB eSOMS versions 4.0 to 6.0.2, the X-Frame-Options header is not configured in HTTP response. This can potentially allow 'ClickJacking' attacks where an attacker can frame parts of the application on a malicious web site, revealing sensitive user information such as authentication credentia...
MSC-2024-19001
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...
MSC-2023-19001
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...
CVE-2020-19001
creationtimestamp| type| source ---|---|--- 2021-08-27 22:28:35+00:00| seen| https://t.me/cibsecurity/27966...
CVE-2020-19001
Command Injection in Simiki v1.6.2.1 and prior allows remote attackers to execute arbitrary system commands via line 64 of the component 'simiki/blob/master/simiki/config.py'...
CVE-2020-19001
CVE-2020-19001 affects Simiki (v1.6.2.1 and earlier). The issue is a command injection vulnerability in the component at simiki/blob/master/simiki/config.py (line 64), enabling remote attackers to execute arbitrary system commands. The CVE is rated as high/critical by NVD (CVSSv3.1: CVSS:3.1/AV:N...
CVE-2020-19001
Command Injection in Simiki v1.6.2.1 and prior allows remote attackers to execute arbitrary system commands via line 64 of the component 'simiki/blob/master/simiki/config.py'...
CVE-2019-19001
creationtimestamp| type| source ---|---|--- 2020-04-03 02:28:14+00:00| seen| https://t.me/cibsecurity/10972...
CVE-2019-19001
For ABB eSOMS versions 4.0 to 6.0.2, the X-Frame-Options header is not configured in HTTP response. This can potentially allow 'ClickJacking' attacks where an attacker can frame parts of the application on a malicious web site, revealing sensitive user information such as authentication credentia...
CVE-2019-19001
ABB eSOMS is affected by CVE-2019-19001 due to the absence of the X-Frame-Options header in HTTP responses for versions 4.0 to 6.0.2. This can enable ClickJacking by framing parts of the application on a malicious site, potentially exposing sensitive user credentials. Root cause: HTTP responses l...
CVE-2018-19001
CVE-2018-19001 affects the Philips HealthSuite Health Android App (all versions) due to inadequate encryption strength (CWE-326). The root cause is the use of simple encryption not strong enough for the required protection level, impacting confidentiality and integrity when physical access is ava...