Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: January 2019

85 records · 6 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2018-14718
    43Plan

    FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-

    CriticalCVSS 9.8No exploitEPSS 12%

    fasterxml · jackson-databindJan 2, 2019

  • CVE-2018-14721
    43Plan

    FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to conduct server-side request forgery (SSRF) attacks by leveraging

    CriticalCVSS 10.0No exploitEPSS 10%

    fasterxml · jackson-databindJan 2, 2019

  • CVE-2018-19360
    42Plan

    FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the axis2-transp

    CriticalCVSS 9.8No exploitEPSS 10%

    fasterxml · jackson-databindJan 2, 2019

  • CVE-2018-19361
    42Plan

    FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the openjpa clas

    CriticalCVSS 9.8No exploitEPSS 10%

    fasterxml · jackson-databindJan 2, 2019

  • CVE-2018-19362
    42Plan

    FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the jboss-common

    CriticalCVSS 9.8No exploitEPSS 10%

    fasterxml · jackson-databindJan 2, 2019

  • CVE-2018-18264
    51Plan

    Kubernetes Dashboard before 1.10.1 allows attackers to bypass authentication and use Dashboard's Service Account for reading secrets within

    HighCVSS 7.5Proof of conceptEPSS 70%

    kubernetes · dashboardJan 2, 2019

  • CVE-2018-19861
    43Plan

    Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP HEAD request.

    CriticalCVSS 9.8Proof of conceptEPSS 12%

    minishare project · minishareJan 3, 2019

  • CVE-2018-19862
    43Plan

    Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP POST request.

    CriticalCVSS 9.8Proof of conceptEPSS 12%

    minishare project · minishareJan 3, 2019

  • CVE-2019-0538
    37Monitor

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En

    HighCVSS 7.8No exploitEPSS 20%

    microsoft · officeJan 8, 2019

  • CVE-2019-0539
    55Plan

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    HighCVSS 7.5Proof of conceptEPSS 82%

    microsoft · chakracoreJan 8, 2019

  • CVE-2019-0541
    81Now

    A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Ex

    HighCVSS 8.8KEVWeaponizedEPSS 53%

    microsoft · internet explorerJan 8, 2019

  • CVE-2019-0543
    62This week

    An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka "Microsoft Windows Elevation of

    HighCVSS 7.8KEVWeaponizedEPSS 4%

    microsoft · windows 10 1507Jan 8, 2019

  • CVE-2019-0546
    36Monitor

    A remote code execution vulnerability exists in Visual Studio when the C++ compiler improperly handles specific combinations of C++ construc

    HighCVSS 7.8No exploitEPSS 16%

    microsoft · visual studio 2017Jan 8, 2019

  • CVE-2019-0547
    60This week

    A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka

    CriticalCVSS 9.8No exploitEPSS 71%

    microsoft · windows 10Jan 8, 2019

  • CVE-2019-0566
    41Plan

    An elevation of privilege vulnerability exists in Microsoft Edge Browser Broker COM object, aka "Microsoft Edge Elevation of Privilege Vulne

    HighCVSS 8.8Proof of conceptEPSS 18%

    microsoft · edgeJan 8, 2019

  • CVE-2019-0567
    54Plan

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    HighCVSS 7.5Proof of conceptEPSS 80%

    microsoft · chakracoreJan 8, 2019

  • CVE-2019-0568
    51Plan

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C

    HighCVSS 7.5Proof of conceptEPSS 69%

    microsoft · chakracoreJan 8, 2019

  • CVE-2019-0571
    36Monitor

    An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data S

    HighCVSS 7.8Proof of conceptEPSS 15%

    microsoft · windows 10Jan 8, 2019

  • CVE-2019-0572
    39Monitor

    An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data S

    HighCVSS 7.8Proof of conceptEPSS 25%

    microsoft · windows 10Jan 8, 2019

  • CVE-2019-0573
    37Monitor

    An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data S

    HighCVSS 7.8Proof of conceptEPSS 20%

    microsoft · windows 10Jan 8, 2019

  • CVE-2019-0574
    37Monitor

    An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data S

    HighCVSS 7.8Proof of conceptEPSS 19%

    microsoft · windows 10Jan 8, 2019

  • CVE-2019-0575
    35Monitor

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En

    HighCVSS 7.8No exploitEPSS 13%

    microsoft · windows 10Jan 8, 2019

  • CVE-2019-0576
    36Monitor

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En

    HighCVSS 7.8No exploitEPSS 17%

    microsoft · windows 10Jan 8, 2019

  • CVE-2019-0577
    36Monitor

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En

    HighCVSS 7.8No exploitEPSS 17%

    microsoft · windows 10Jan 8, 2019

  • CVE-2019-0578
    35Monitor

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En

    HighCVSS 7.8No exploitEPSS 13%

    microsoft · windows 10Jan 8, 2019

  • CVE-2019-0579
    36Monitor

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En

    HighCVSS 7.8No exploitEPSS 17%

    microsoft · windows 10Jan 8, 2019

  • CVE-2019-0580
    36Monitor

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En

    HighCVSS 7.8No exploitEPSS 17%

    microsoft · windows 10Jan 8, 2019

  • CVE-2019-0581
    35Monitor

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En

    HighCVSS 7.8No exploitEPSS 13%

    microsoft · windows 10Jan 8, 2019

  • CVE-2019-0582
    35Monitor

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En

    HighCVSS 7.8No exploitEPSS 12%

    microsoft · officeJan 8, 2019

  • CVE-2019-0583
    36Monitor

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En

    HighCVSS 7.8No exploitEPSS 16%

    microsoft · windows 10Jan 8, 2019

  • CVE-2019-0584
    35Monitor

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En

    HighCVSS 7.8No exploitEPSS 13%

    microsoft · windows 10Jan 8, 2019

  • CVE-2019-0585
    42Plan

    A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft W

    HighCVSS 8.8No exploitEPSS 21%

    microsoft · officeJan 8, 2019

  • CVE-2019-0586
    44Plan

    A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, ak

    CriticalCVSS 9.8No exploitEPSS 15%

    microsoft · exchange serverJan 8, 2019

  • CVE-2016-9651
    38Monitor

    A missing check for whether a property of a JS object is private in V8 in Google Chrome prior to 55.0.2883.75 allowed a remote attacker to e

    HighCVSS 8.8Proof of conceptEPSS 11%

    google · chromeJan 9, 2019

  • CVE-2017-15428
    40Plan

    Insufficient data validation in V8 builtins string generator could lead to out of bounds read and write access in V8 in Google Chrome prior

    HighCVSS 8.8Proof of conceptEPSS 18%

    google · chromeJan 9, 2019

  • CVE-2018-16167
    61This week

    LogonTracer 1.2.0 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.

    CriticalCVSS 9.8Proof of conceptEPSS 74%

    jpcert · logontracerJan 9, 2019

  • CVE-2019-5893
    46Plan

    Nelson Open Source ERP v6.3.1 allows SQL Injection via the db/utils/query/data.xml query parameter.

    CriticalCVSS 9.8Proof of conceptEPSS 24%

    nelson-it · open source erpJan 10, 2019

  • CVE-2018-4404
    40Plan

    In iOS before 11.4 and macOS High Sierra before 10.13.5, a memory corruption issue exists and was addressed with improved memory handling.

    HighCVSS 8.8WeaponizedEPSS 14%

    apple · iphone osJan 11, 2019

  • CVE-2017-18357
    40Plan

    Shopware before 5.3.4 has a PHP Object Instantiation issue via the sort parameter to the loadPreviewAction() method of the Shopware_Controll

    MediumCVSS 6.5WeaponizedEPSS 27%

    shopware · shopwareJan 15, 2019

  • CVE-2019-6442
    30Monitor

    An issue was discovered in NTPsec before 1.1.3.

    MediumCVSS 6.5Proof of conceptEPSS 13%

    ntpsec · ntpsecJan 16, 2019

  • CVE-2019-6443
    56Plan

    An issue was discovered in NTPsec before 1.1.3.

    CriticalCVSS 9.1Proof of conceptEPSS 66%

    ntpsec · ntpsecJan 16, 2019

  • CVE-2019-6444
    50Plan

    An issue was discovered in NTPsec before 1.1.3.

    CriticalCVSS 9.1Proof of conceptEPSS 45%

    ntpsec · ntpsecJan 16, 2019

  • CVE-2019-6445
    30Monitor

    An issue was discovered in NTPsec before 1.1.3.

    MediumCVSS 6.5Proof of conceptEPSS 14%

    ntpsec · ntpsecJan 16, 2019

  • CVE-2019-6446
    44Plan

    An issue was discovered in NumPy before 1.16.3.

    CriticalCVSS 9.8Proof of conceptEPSS 17%

    numpy · numpyJan 16, 2019

  • CVE-2019-6447
    51Plan

    The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary files or execute appli

    HighCVSS 8.1WeaponizedEPSS 63%

    estrongs · es file explorer file managerJan 16, 2019

  • CVE-2017-3135
    28Monitor

    Combination of DNS64 and RPZ Can Lead to Crash

    MediumCVSS 5.9No exploitEPSS 17%

    isc · bindJan 16, 2019

  • CVE-2017-3136
    26Monitor

    An error handling synthesized records could cause an assertion failure when using DNS64 with "break-dnssec yes;"

    MediumCVSS 5.9No exploitEPSS 11%

    isc · bindJan 16, 2019

  • CVE-2017-3140
    27Monitor

    An error processing RPZ rules can cause named to loop endlessly after handling a query

    MediumCVSS 5.9No exploitEPSS 12%

    isc · bindJan 16, 2019

  • CVE-2017-3143
    28Monitor

    An error in TSIG authentication can permit unauthorized dynamic updates

    MediumCVSS 5.9Proof of conceptEPSS 18%

    isc · bindJan 16, 2019

  • CVE-2017-3144
    52Plan

    Failure to properly clean up closed OMAPI connections can exhaust available sockets

    HighCVSS 7.5No exploitEPSS 72%

    isc · dhcpJan 16, 2019

  • CVE-2017-3145
    38Monitor

    Improper fetch cleanup sequencing in the resolver can cause named to crash

    HighCVSS 7.5No exploitEPSS 27%

    isc · bindJan 16, 2019

  • CVE-2018-5733
    36Monitor

    A malicious client can overflow a reference counter in ISC dhcpd

    HighCVSS 7.5No exploitEPSS 20%

    isc · dhcpJan 16, 2019

  • CVE-2018-5736
    26Monitor

    An error in zone database reference counting can lead to an assertion failure if a server which is running an affected version of BIND attem

    MediumCVSS 5.3No exploitEPSS 18%

    isc · bindJan 16, 2019

  • CVE-2018-5737
    33Monitor

    BIND 9.12's serve-stale implementation can cause an assertion failure in rbtdb.c or other undesirable behavior, even if serve-stale is not enabled.

    HighCVSS 7.5No exploitEPSS 10%

    isc · bindJan 16, 2019

  • CVE-2018-5738
    33Monitor

    Some versions of BIND can improperly permit recursive query service to unauthorized clients

    HighCVSS 7.5No exploitEPSS 11%

    isc · bindJan 16, 2019

  • CVE-2018-5740
    48Plan

    A flaw in the "deny-answer-aliases" feature can cause an assertion failure in named

    HighCVSS 7.5Proof of conceptEPSS 59%

    isc · bindJan 16, 2019

  • CVE-2018-20735
    40Plan

    An issue was discovered in BMC PATROL Agent through 11.3.01.

    HighCVSS 7.8WeaponizedEPSS 7%

    bmc · patrol agentJan 17, 2019

  • CVE-2018-16042
    51Plan

    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and ear

    MediumCVSS 6.5No exploitEPSS 82%

    adobe · acrobat dcJan 18, 2019

  • CVE-2018-15982
    88Now

    Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability.

    HighCVSS 7.8KEVWeaponizedEPSS 89%

    adobe · flash playerJan 18, 2019

  • CVE-2019-1003000
    65This week

    A sandbox bypass vulnerability exists in Script Security Plugin 1.49 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandb

    HighCVSS 8.8WeaponizedEPSS 98%

    jenkins · script securityJan 22, 2019

  • CVE-2019-1003001
    61This week

    A sandbox bypass vulnerability exists in Pipeline: Groovy Plugin 2.61 and earlier in src/main/java/org/jenkinsci/plugins/workflow/cps/CpsFlo

    HighCVSS 8.8WeaponizedEPSS 86%

    jenkins · pipeline\Jan 22, 2019

  • CVE-2019-1003002
    59Plan

    A sandbox bypass vulnerability exists in Pipeline: Declarative Plugin 1.3.3 and earlier in pipeline-model-definition/src/main/groovy/org/jen

    HighCVSS 8.8WeaponizedEPSS 81%

    jenkins · pipeline\Jan 22, 2019

  • CVE-2019-6339
    50Plan

    PHAR stream wrapper Arbitrary PHP code execution

    CriticalCVSS 9.8Proof of conceptEPSS 35%

    drupal · drupalJan 22, 2019

  • CVE-2018-13374
    58Plan

    A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 allows attacker to obt

    MediumCVSS 4.3KEVWeaponizedEPSS 38%

    fortinet · fortiadcJan 22, 2019

  • CVE-2019-6706
    35Monitor

    Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c.

    HighCVSS 7.5Proof of conceptEPSS 17%

    lua · luaJan 23, 2019

  • CVE-2019-1636
    45Plan

    Cisco Webex Teams URI Handler Insecure Library Loading Vulnerability

    HighCVSS 7.8No exploitEPSS 46%

    cisco · webex teamsJan 23, 2019

  • CVE-2018-17686
    33Monitor

    This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.2.0.9297.

    MediumCVSS 6.5No exploitEPSS 24%

    foxitsoftware · phantompdfJan 24, 2019

  • CVE-2019-1652
    87Now

    Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability

    HighCVSS 7.2KEVWeaponizedEPSS 95%

    cisco · rv320 firmwareJan 24, 2019

  • CVE-2019-1653
    90Now

    Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability

    HighCVSS 7.5KEVWeaponizedEPSS 99%

    cisco · rv320 firmwareJan 24, 2019

  • CVE-2019-6799
    27Monitor

    An issue was discovered in phpMyAdmin before 4.8.5.

    MediumCVSS 5.9Proof of conceptEPSS 14%

    phpmyadmin · phpmyadminJan 26, 2019

  • CVE-2019-6703
    47Plan

    Incorrect access control in migla_ajax_functions.php in the Calmar Webmedia Total Donations plugin through 2.0.5 for WordPress allows unauth

    CriticalCVSS 9.8Proof of conceptEPSS 26%

    calmar-webmedia · total donationsJan 26, 2019

  • CVE-2019-6977
    56Plan

    gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.

    HighCVSS 8.8Proof of conceptEPSS 71%

    libgd · libgdJan 26, 2019

  • CVE-2019-3462
    36Monitor

    Incorrect sanitation of the 302 redirect field in HTTP transport method of apt versions 1.4.8 and earlier can lead to content injection by a

    HighCVSS 8.1Proof of conceptEPSS 14%

    debian · advanced package toolJan 28, 2019

  • CVE-2018-17431
    64This week

    Web Console in Comodo UTM Firewall before 2.7.0 allows remote attackers to execute arbitrary code without authentication via a crafted URL.

    CriticalCVSS 9.8Proof of conceptEPSS 83%

    comodo · unified threat management firewallJan 30, 2019

  • CVE-2018-17189
    27Monitor

    In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the h2 stream for that re

    MediumCVSS 5.3No exploitEPSS 20%

    apache · http serverJan 30, 2019

  • CVE-2018-17199
    36Monitor

    In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time before decoding the session.

    HighCVSS 7.5No exploitEPSS 20%

    apache · http serverJan 30, 2019

  • CVE-2018-3956
    42Plan

    An exploitable out-of-bounds read vulnerability exists in the handling of certain XFA element attributes of Foxit Software's PDF Reader vers

    HighCVSS 7.1No exploitEPSS 46%

    foxitsoftware · phantompdfJan 30, 2019

  • CVE-2019-0190
    48Plan

    A bug exists in the way mod_ssl handled client renegotiations.

    HighCVSS 7.5No exploitEPSS 59%

    apache · http serverJan 30, 2019

  • CVE-2018-15517
    47Plan

    The MailConnect feature on D-Link Central WiFiManager CWM-100 1.03 r0098 devices is intended to check a connection to an SMTP server but act

    HighCVSS 8.6Proof of conceptEPSS 44%

    dlink · central wifimanagerJan 31, 2019

  • CVE-2018-19040
    25Monitor

    The Media File Manager plugin 1.4.2 for WordPress allows directory listing via a ../ directory traversal in the dir parameter of an mrelocat

    MediumCVSS 5.3Proof of conceptEPSS 12%

    media file manager project · media file managerJan 31, 2019

  • CVE-2018-19042
    24Monitor

    The Media File Manager plugin 1.4.2 for WordPress allows arbitrary file movement via a ../ directory traversal in the dir_from and dir_to pa

    MediumCVSS 5.3Proof of conceptEPSS 10%

    media file manager project · media file managerJan 31, 2019

  • CVE-2018-19043
    24Monitor

    The Media File Manager plugin 1.4.2 for WordPress allows arbitrary file renaming (specifying a "from" and "to" filename) via a ../ directory

    MediumCVSS 5.3Proof of conceptEPSS 10%

    media file manager project · media file managerJan 31, 2019

  • CVE-2019-7297
    43Plan

    An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03.

    CriticalCVSS 9.8No exploitEPSS 12%

    d-link · dir-823g firmwareJan 31, 2019

  • CVE-2019-6110
    34Monitor

    In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker)

    MediumCVSS 6.8Proof of conceptEPSS 24%

    openbsd · opensshJan 31, 2019

  • CVE-2019-6111
    40Plan

    An issue was discovered in OpenSSH 7.9.

    MediumCVSS 5.9Proof of conceptEPSS 58%

    openbsd · opensshJan 31, 2019