CVE-2019-10855

Computrols CBAS 18.0.0 mishandles password hashes. The approach is MD5 with a pw prefix, e.g., if the password is admin, it will calculate the MD5 hash of pwadmin and store it in a MySQL database.

Source: CVE-2019-10855

CVE-2016-8899

Exponent CMS version 2.3.9 suffers from a Object Injection vulnerability in framework/modules/core/controllers/expCatController.php related to change_cats.

Source: CVE-2016-8899

CVE-2019-10851

Computrols CBAS 18.0.0 has hard-coded encryption keys.

Source: CVE-2019-10851

CVE-2019-10852

Computrols CBAS 18.0.0 allows Authenticated Blind SQL Injection via the id GET parameter, as demonstrated by the index.php?m=servers&a=start_pulling&id= substring.

Source: CVE-2019-10852

CVE-2019-10853

Computrols CBAS 18.0.0 allows Authentication Bypass.

Source: CVE-2019-10853

CVE-2019-10854

Computrols CBAS 18.0.0 allows Authenticated Command Injection.

Source: CVE-2019-10854

CVE-2016-7550

asterisk 13.10.0 is affected by: denial of service issues in asterisk. The impact is: cause a denial of service (remote).

Source: CVE-2016-7550

CVE-2016-8897

Exponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules/help/controllers/helpController.php.

Source: CVE-2016-8897

CVE-2019-7120

Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .

Source: CVE-2019-7120

CVE-2019-7123

Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .

Source: CVE-2019-7123