3 matches found
CVE-2020-19891
CVE-2020-19891 affects DBHcms v1.2.0. A vulnerability in file dbhcms/mod/mod.editor.php allows arbitrary file write via POSTed updatefile (filename) and tinymce_content (file content) because there is no security filtering. A remote authenticated admin user can exploit this to obtain a webshell. ...
CVE-2019-19891
CVE-2019-19891 concerns an encryption key vulnerability in Mitel SIP-DECT wireless devices (firmware versions 8.0 and 8.1) that could allow an attacker to perform a man-in-the-middle (MITM) attack and potentially intercept sensitive information. The CVE is referenced across multiple sources (NVD,...
CVE-2018-19891
CVE-2018-19891 affects Freeware Advanced Audio Coder (FAAC) version 1.29.9.2. The vulnerability is an invalid memory address dereference in the function huffcode (libfaac/huff2.c) that can cause a segmentation fault and application crash, leading to a denial of service in the book 10 case. The co...