By publication date

Exploited and new serious CVEs: March 2019

120 records · 12 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 1 of 2

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
61This week	CVE-2019-6223Weaponized	A logic issue existed in the handling of Group FaceTime calls.apple · iphone os Pre-auth	High7.5	KEV	2.6%	Mar 5, 2019
40Plan	CVE-2019-6225Proof of concept	A memory corruption issue was addressed with improved validation.apple · iphone os · CWE-787 Local privilege escalation Memory safety	High7.8	—	28.7%	Mar 5, 2019
40Plan	CVE-2019-3921Proof of concept	The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to a stack buffer overflow via crafted HTTP POST renokia · i-240w-q gpon ont firmware · CWE-121 RCE Memory safety	High8.8	—	17.8%	Mar 5, 2019
40Plan	CVE-2019-9213Weaponized	In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum address, which makes it easier for attalinux · linux kernel · CWE-476 Memory safety Denial of service	Medium5.5	—	5.6%	Mar 5, 2019
26Monitor	CVE-2019-0540No exploit	A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafmicrosoft · excel viewer · CWE-601 Open redirect	Medium5.5	—	12.7%	Mar 5, 2019
33Monitor	CVE-2019-0590No exploit	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptinmicrosoft · edge · CWE-787 pre-auth RCE Memory safety	High7.5	—	11.1%	Mar 5, 2019
33Monitor	CVE-2019-0591No exploit	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptinmicrosoft · edge · CWE-787 pre-auth RCE Memory safety	High7.5	—	11.1%	Mar 5, 2019
36Monitor	CVE-2019-0593No exploit	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptinmicrosoft · edge · CWE-787 pre-auth RCE Memory safety	High7.5	—	19.7%	Mar 5, 2019
39Monitor	CVE-2019-0594No exploit	A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pamicrosoft · sharepoint enterprise server · CWE-20 RCE	High8.8	—	12.0%	Mar 5, 2019
37Monitor	CVE-2019-0595No exploit	A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Enmicrosoft · windows 10 RCE	High7.8	—	19.0%	Mar 5, 2019
36Monitor	CVE-2019-0596No exploit	A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Enmicrosoft · windows 10 RCE	High7.8	—	16.1%	Mar 5, 2019
36Monitor	CVE-2019-0597No exploit	A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Enmicrosoft · windows 10 RCE	High7.8	—	16.1%	Mar 5, 2019
37Monitor	CVE-2019-0598No exploit	A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Enmicrosoft · windows 10 RCE	High7.8	—	20.1%	Mar 5, 2019
37Monitor	CVE-2019-0599No exploit	A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Enmicrosoft · windows 10 RCE	High7.8	—	20.1%	Mar 5, 2019
99Now	CVE-2019-0604Weaponized	A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pamicrosoft · sharepoint enterprise server · CWE-20 pre-auth RCE	Critical9.8	KEV	99.9%	Mar 5, 2019
34Monitor	CVE-2019-0605No exploit	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptinmicrosoft · edge · CWE-787 pre-auth RCE Memory safety	High7.5	—	12.2%	Mar 5, 2019
33Monitor	CVE-2019-0606No exploit	A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Cormicrosoft · internet explorer · CWE-787 pre-auth RCE Memory safety	High7.5	—	11.1%	Mar 5, 2019
33Monitor	CVE-2019-0607No exploit	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptinmicrosoft · edge · CWE-787 pre-auth RCE Memory safety	High7.5	—	11.1%	Mar 5, 2019
33Monitor	CVE-2019-0610No exploit	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptinmicrosoft · edge · CWE-787 pre-auth RCE Memory safety	High7.5	—	11.1%	Mar 5, 2019
40Plan	CVE-2019-0613No exploit	A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the source markupmicrosoft · .net framework · CWE-119 pre-auth RCE Memory safety	High8.8	—	15.4%	Mar 5, 2019
55Plan	CVE-2019-0618No exploit	A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka microsoft · windows 10 pre-auth RCE	High8.8	—	67.0%	Mar 5, 2019
36Monitor	CVE-2019-0625No exploit	A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Enmicrosoft · windows 10 RCE	High7.8	—	16.1%	Mar 5, 2019
60This week	CVE-2019-0626No exploit	A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP servemicrosoft · windows 10 · CWE-787 pre-auth RCE Memory safety	Critical9.8	—	68.6%	Mar 5, 2019
40Plan	CVE-2019-0630No exploit	A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests,microsoft · windows 10 · CWE-19 RCE	High8.8	—	17.3%	Mar 5, 2019
39Monitor	CVE-2019-0633No exploit	A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests,microsoft · windows 10 · CWE-19 RCE	High8.8	—	13.0%	Mar 5, 2019
33Monitor	CVE-2019-0640No exploit	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptinmicrosoft · chakracore · CWE-787 pre-auth RCE Memory safety	High7.5	—	11.1%	Mar 5, 2019
33Monitor	CVE-2019-0642No exploit	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptinmicrosoft · chakracore · CWE-787 pre-auth RCE Memory safety	High7.5	—	11.1%	Mar 5, 2019
33Monitor	CVE-2019-0644No exploit	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptinmicrosoft · edge · CWE-787 pre-auth RCE Memory safety	High7.5	—	11.1%	Mar 5, 2019
36Monitor	CVE-2019-0650No exploit	A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruptiomicrosoft · edge · CWE-787 pre-auth RCE Memory safety	High7.5	—	19.4%	Mar 5, 2019
33Monitor	CVE-2019-0651No exploit	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptinmicrosoft · edge · CWE-787 pre-auth RCE Memory safety	High7.5	—	11.1%	Mar 5, 2019
33Monitor	CVE-2019-0652No exploit	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptinmicrosoft · edge · CWE-787 pre-auth RCE Memory safety	High7.5	—	11.1%	Mar 5, 2019
34Monitor	CVE-2019-0655No exploit	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptinmicrosoft · edge · CWE-787 pre-auth RCE Memory safety	High7.5	—	12.6%	Mar 5, 2019
40Plan	CVE-2019-0662No exploit	A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka microsoft · windows 10 pre-auth RCE	High8.8	—	15.3%	Mar 5, 2019
35Monitor	CVE-2019-0671No exploit	A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka microsoft · office RCE	High7.8	—	14.8%	Mar 5, 2019
35Monitor	CVE-2019-0672No exploit	A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka microsoft · office RCE	High7.8	—	14.8%	Mar 5, 2019
35Monitor	CVE-2019-0673No exploit	A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka microsoft · office RCE	High7.8	—	14.8%	Mar 5, 2019
37Monitor	CVE-2019-0674No exploit	A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka microsoft · office RCE	High7.8	—	18.4%	Mar 5, 2019
35Monitor	CVE-2019-0675No exploit	A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka microsoft · office RCE	High7.8	—	14.8%	Mar 5, 2019
60This week	CVE-2019-0676Weaponized	An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker who successfully explmicrosoft · internet explorer Pre-auth	Medium6.5	KEV	8.1%	Mar 5, 2019
60This week	CVE-2019-0724Weaponized	An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerabimicrosoft · exchange server Pre-auth	High8.1	—	23.7%	Mar 5, 2019
39Monitor	CVE-2019-0728No exploit	A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project, aka 'Visuamicrosoft · visual studio code RCE	High7.8	—	27.7%	Mar 5, 2019
39Monitor	CVE-2019-9581Proof of concept	phpscheduleit Booked Scheduler 2.7.5 allows arbitrary file upload via the Favicon field, leading to execution of arbitrary Web/custom-favicotwinkletoessoftware · booked · CWE-434 File upload	High8.8	—	13.4%	Mar 5, 2019
34Monitor	CVE-2019-9599Proof of concept	The AirDroid application through 4.2.1.6 for Android allows remote attackers to cause a denial of service (service crash) via many simultaneairdroid · airdroid Pre-auth Denial of service	High7.5	—	13.3%	Mar 6, 2019
40Plan	CVE-2019-9624Weaponized	Webmin 1.900 allows remote attackers to execute arbitrary code by leveraging the "Java file manager" and "Upload and Download" privileges towebmin · webmin · CWE-269 RCE Local privilege escalation	High7.8	—	23.6%	Mar 7, 2019
31Monitor	CVE-2019-3778Proof of concept	Open Redirect in spring-security-oauth2pivotal software · spring security oauth · CWE-601 Pre-auth Open redirect	Medium6.5	—	16.5%	Mar 7, 2019
38Monitor	CVE-2019-1599No exploit	Cisco NX-OS Software Netstack Denial of Service Vulnerabilitycisco · nx-os · CWE-399 Pre-auth Denial of service	High8.6	—	14.2%	Mar 7, 2019
62This week	CVE-2019-0192Proof of concept	In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request.apache · solr · CWE-502 pre-auth RCE Deserialization	Critical9.8	—	78.2%	Mar 7, 2019
80Now	CVE-2018-18809Weaponized	TIBCO JasperReports Library Directory Traversal Vulnerabilitytibco · jasperreports library · CWE-22 Path traversal	Medium6.5	KEV	79.0%	Mar 7, 2019
42Plan	CVE-2019-9632Proof of concept	ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack esafenet · electronic document security management system Pre-auth	High7.5	—	39.8%	Mar 8, 2019
36Monitor	CVE-2017-3164Proof of concept	Server Side Request Forgery in Apache Solr, versions 1.3 until 7.6 (inclusive).apache · solr · CWE-918 Pre-auth SSRF	High7.5	—	19.4%	Mar 8, 2019
91Now	CVE-2019-1003029Weaponized	A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.53 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurijenkins · script security RCE	Critical9.9	KEV	74.4%	Mar 8, 2019
98Now	CVE-2019-1003030Weaponized	A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 and earlier in pom.xml, src/main/java/org/jenkinsci/plugins/wojenkins · pipeline\ · CWE-693 RCE	Critical9.9	KEV	97.0%	Mar 8, 2019
40Plan	CVE-2019-9692Weaponized	class.showtime2_image.php in CMS Made Simple (CMSMS) before 2.2.10 does not ensure that a watermark file has a standard image file extensioncmsmadesimple · cms made simple · CWE-434 File upload	Medium6.5	—	45.8%	Mar 11, 2019
36Monitor	CVE-2019-5917No exploit	azure-umqtt-c (available through GitHub prior to 2017 October 6) allows remote attackers to cause a denial of service via unspecified vectormicrosoft · azure-umqtt-c Pre-auth Denial of service	High7.5	—	21.4%	Mar 12, 2019
60This week	CVE-2019-9760Weaponized	FTPGetter Standard v.5.97.0.177 allows remote code execution when a user initiates an FTP connection to an attacker-controlled machine that ftpgetter · ftpgetter · CWE-787 pre-auth RCE Memory safety	Critical9.8	—	53.0%	Mar 13, 2019
34Monitor	CVE-2019-9768Proof of concept	Thinkst Canarytokens through commit hash 4e89ee0 (2019-03-01) relies on limited variation in size, metadata, and timestamp, which makes it ethinkst · canarytokens · CWE-264 Pre-auth	High7.5	—	11.6%	Mar 14, 2019
47Plan	CVE-2019-9787Proof of concept	WordPress before 5.1.1 does not properly filter comment content, leading to Remote Code Execution by unauthenticated users in a default confwordpress · wordpress · CWE-352 pre-auth RCE XSS CSRF	High8.8	—	38.5%	Mar 14, 2019
34Monitor	CVE-2019-3816No exploit	Openwsman, versions up to and including 2.6.9, are vulnerable to arbitrary file disclosure because the working directory of openwsmand daemoopenwsman project · openwsman · CWE-22 Pre-auth Path traversal	High7.5	—	14.7%	Mar 14, 2019
35Monitor	CVE-2019-3833No exploit	Openwsman, versions up to and including 2.6.9, are vulnerable to infinite loop in process_connection() when parsing specially crafted HTTP ropenwsman project · openwsman · CWE-835 Pre-auth Denial of service	High7.5	—	15.2%	Mar 14, 2019
33Monitor	CVE-2019-9831Proof of concept	The AirMore application through 1.6.1 for Android allows remote attackers to cause a denial of service (system hang) via many simultaneous /airmore · airmore Pre-auth Denial of service	High7.5	—	10.5%	Mar 15, 2019
33Monitor	CVE-2019-9833Proof of concept	The Screen Stream application through 3.0.15 for Android allows remote attackers to cause a denial of service via many simultaneous /start-sscreen stream project · screen stream Pre-auth Denial of service	High7.5	—	10.3%	Mar 15, 2019
55Plan	CVE-2018-10093Proof of concept	AudioCodes IP phone 420HD devices using firmware version 2.2.12.126 allow Remote Code Execution.audiocodes · 420hd ip phone firmware · CWE-862 RCE Broken access control (IDOR)	High8.8	—	68.1%	Mar 21, 2019
33Monitor	CVE-2018-19191No exploit	Webmin 1.890 has XSS via /config.cgi?webmin, the /shell/index.cgi history parameter, /shell/index.cgi?stripped=1, or the /webminlog/search.cwebmin · webmin · CWE-79 XSS	Medium5.4	—	39.0%	Mar 21, 2019
69This week	CVE-2018-19276Weaponized	OpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerability that allows an unauthenticated user to execute arbitraopenmrs · openmrs · CWE-502 pre-auth RCE Deserialization	Critical9.8	—	98.7%	Mar 21, 2019
43Plan	CVE-2018-19365Proof of concept	The REST API in Wowza Streaming Engine 4.7.4.01 allows traversal of the directory structure and retrieval of a file via a remote, specificalwowza · streaming engine · CWE-22 Pre-auth Path traversal	Critical9.1	—	22.2%	Mar 21, 2019
45Plan	CVE-2018-19510No exploit	subscriber.php in Webgalamb through 7.0 is vulnerable to SQL injection via the Client-IP HTTP request header.ens · webgalamb · CWE-89 Pre-auth SQL injection	Critical9.8	—	19.9%	Mar 21, 2019
54Plan	CVE-2018-19524Proof of concept	An issue was discovered on Shenzhen Skyworth DT741 Converged Intelligent Terminal (G/EPON+IPTV) SDOTBGN1, DT721-cb SDOTBGN1, and DT741-cb SDskyworthdigital · dt740 firmware · CWE-20 pre-auth RCE	Critical9.8	—	50.5%	Mar 21, 2019
42Plan	CVE-2018-20218Proof of concept	An issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below.teracue · enc-400 hdmi firmware · CWE-78 pre-auth RCE Command injection	Critical9.8	—	10.7%	Mar 21, 2019
36Monitor	CVE-2018-20219Proof of concept	An issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below.teracue · enc-400 hdmi firmware · CWE-798 Pre-auth Auth bypass Hard-coded credentials	High8.1	—	14.5%	Mar 21, 2019
35Monitor	CVE-2018-20220Proof of concept	An issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below.teracue · enc-400 hdmi firmware · CWE-306 Pre-auth Auth bypass	High7.5	—	15.3%	Mar 21, 2019
38Monitor	CVE-2018-20221Proof of concept	Secure/SAService.rem in Deltek Ajera Timesheets 9.10.16 and prior are vulnerable to remote code execution via deserialization of untrusted udeltek · ajera · CWE-502 RCE Deserialization	High8.8	—	10.2%	Mar 21, 2019
51Plan	CVE-2018-20323Weaponized	www/soap/application/MCSoap/Logs.php in MailCleaner Community Edition 2018.08 allows remote attackers to execute arbitrary OS commands.mailcleaner · mailcleaner · CWE-78 RCE Command injection	High8.8	—	54.4%	Mar 21, 2019
42Plan	CVE-2018-20525Proof of concept	Roxy Fileman 1.4.5 allows Directory Traversal in copydir.php, copyfile.php, and fileslist.php.roxyfileman · roxy fileman · CWE-22 Pre-auth Path traversal	Critical9.1	—	21.6%	Mar 21, 2019
61This week	CVE-2018-20526Proof of concept	Roxy Fileman 1.4.5 allows unrestricted file upload in upload.php.roxyfileman · roxy fileman · CWE-434 Pre-auth File upload	Critical9.8	—	73.0%	Mar 21, 2019
42Plan	CVE-2018-20555Proof of concept	The Design Chemical Social Network Tabs plugin 1.7.1 for WordPress allows remote attackers to discover Twitter access_token, access_token_sedesignchemical · social network tabs · CWE-200 Pre-auth Info leak	Critical9.8	—	10.4%	Mar 21, 2019
41Plan	CVE-2018-20556Proof of concept	SQL injection vulnerability in Booking Calendar plugin 8.4.3 for WordPress allows remote attackers to execute arbitrary SQL commands via thebooking calendar project · booking calendar · CWE-89 RCE SQL injection	High8.8	—	18.9%	Mar 21, 2019
43Plan	CVE-2019-6116Proof of concept	In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to remote code executioartifex · ghostscript RCE	High7.8	—	41.5%	Mar 21, 2019
39Monitor	CVE-2019-6272Proof of concept	Command injection vulnerability in login_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to execute arbitragl-inet · gl-ar300m-lite firmware · CWE-77 RCE Command injection	High8.8	—	12.5%	Mar 21, 2019
29Monitor	CVE-2019-6273Proof of concept	download_file in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to download arbitrary files.gl-inet · gl-ar300m-lite firmware · CWE-22 Path traversal	Medium6.5	—	11.5%	Mar 21, 2019
38Monitor	CVE-2019-6274Proof of concept	Directory traversal vulnerability in storage_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to have unspecgl-inet · gl-ar300m-lite firmware · CWE-22 Path traversal	High8.8	—	11.2%	Mar 21, 2019
39Monitor	CVE-2019-6275Proof of concept	Command injection vulnerability in firmware_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to execute arbigl-inet · gl-ar300m-lite firmware · CWE-77 RCE Command injection	High8.8	—	12.5%	Mar 21, 2019
55Plan	CVE-2019-6441Proof of concept	An issue was discovered on Shenzhen Coship RT3050 4.0.0.40, RT3052 4.0.0.48, RT7620 10.0.0.49, WM3300 5.0.0.54, and WM3300 5.0.0.55 devices.coship · rt3050 firmware · CWE-287 Pre-auth Auth bypass	Critical9.8	—	53.6%	Mar 21, 2019
49Plan	CVE-2019-6714Proof of concept	An issue was discovered in BlogEngine.NET through 3.3.6.0.blogengine · blogengine.net · CWE-22 pre-auth RCE Path traversal	Critical9.8	—	31.7%	Mar 21, 2019
39Monitor	CVE-2019-6967Proof of concept	AirTies Air5341 1.0.0.12 devices allow cgi-bin/login CSRF.airties · air 5341 firmware · CWE-352 Pre-auth CSRF	High8.8	—	13.4%	Mar 21, 2019
34Monitor	CVE-2019-6973Proof of concept	Sricam IP CCTV cameras are vulnerable to denial of service via multiple incomplete HTTP requests because the web server (based on gSOAP 2.8.sricam · nvs001 Pre-auth Denial of service	High7.5	—	13.7%	Mar 21, 2019
35Monitor	CVE-2019-7385Proof of concept	An authenticated shell command injection issue has been discovered in Raisecom ISCOM HT803G-U, HT803G-W, HT803G-1GE, and HT803G GPON productraisecom · iscom ht803g-u firmware · CWE-78 RCE Command injection	High7.8	—	12.1%	Mar 21, 2019
39Monitor	CVE-2019-7391Proof of concept	ZyXEL VMG3312-B10B DSL-491HNU-B1B v2 devices allow login/login-page.cgi CSRF.zyxel · dsl-491hnu-b10b firmware · CWE-352 Pre-auth CSRF	High8.8	—	13.6%	Mar 21, 2019
44Plan	CVE-2019-9083Proof of concept	SQLiteManager 1.20 and 1.24 allows SQL injection via the /sqlitemanager/main.php dbsel parameter.sqlitemanager · sqlitemanager · CWE-89 Pre-auth SQL injection	Critical9.8	—	17.5%	Mar 21, 2019
92Now	CVE-2019-7238Weaponized	Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control.sonatype · nexus repository manager Pre-auth	Critical9.8	KEV	76.6%	Mar 21, 2019
39Monitor	CVE-2019-3871No exploit	A vulnerability was found in PowerDNS Authoritative Server before 4.0.7 and before 4.1.7.powerdns · authoritative server · CWE-20	High8.8	—	12.6%	Mar 21, 2019
25Monitor	CVE-2019-9648Proof of concept	An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674.coreftp · core ftp · CWE-22 Pre-auth Path traversal	Medium5.3	—	14.3%	Mar 22, 2019
25Monitor	CVE-2019-9649Proof of concept	An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674.coreftp · core ftp · CWE-22 Pre-auth Path traversal	Medium5.3	—	14.5%	Mar 22, 2019
40Plan	CVE-2019-9948No exploit	urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechanipython · python · CWE-22 Pre-auth Path traversal	Critical9.1	—	11.8%	Mar 23, 2019
60This week	CVE-2019-9960Weaponized	The downloadZip function in application/controllers/admin/export.php in LimeSurvey through 3.16.1+190225 allows a relative path.limesurvey · limesurvey · CWE-22 Pre-auth Path traversal	Critical9.8	—	13.3%	Mar 23, 2019
76This week	CVE-2019-9978Weaponized	The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swp_debug=load_options swp_url parameterwarfareplugins · social warfare · CWE-79 Pre-auth XSS	Medium6.1	KEV	72.9%	Mar 24, 2019
60This week	CVE-2018-16858Weaponized	It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute libreoffice · libreoffice · CWE-356 pre-auth RCE Path traversal	Critical9.8	—	67.3%	Mar 25, 2019
28Monitor	CVE-2019-3810Proof of concept	A flaw was found in moodle versions 3.6 to 3.6.1, 3.5 to 3.5.3, 3.4 to 3.4.6, 3.1 to 3.1.15 and earlier unsupported versions.moodle · moodle · CWE-79 Pre-auth XSS	Medium6.1	—	13.8%	Mar 25, 2019
99Now	CVE-2019-3396Weaponized	The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from version 6.7.0 before 6.1atlassian · confluence server · CWE-22 pre-auth RCE Path traversal SSTI	Critical9.8	KEV	99.9%	Mar 25, 2019
99Now	CVE-2019-7609Weaponized	Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer.elastic · kibana · CWE-94 pre-auth RCE	Critical10.0	KEV	95.3%	Mar 25, 2019
53Plan	CVE-2019-9053Proof of concept	An issue was discovered in CMS Made Simple 2.2.8.cmsmadesimple · cms made simple · CWE-89 Pre-auth SQL injection	High8.1	—	68.5%	Mar 26, 2019

CVE-2019-6223
61This week
A logic issue existed in the handling of Group FaceTime calls.
HighCVSS 7.5KEVWeaponizedEPSS 2%
- Pre-auth
apple · iphone osMar 5, 2019
CVE-2019-6225
40Plan
A memory corruption issue was addressed with improved validation.
HighCVSS 7.8Proof of conceptEPSS 28%
- Local privilege escalation
- Memory safety
apple · iphone osMar 5, 2019
CVE-2019-3921
40Plan
The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to a stack buffer overflow via crafted HTTP POST re
HighCVSS 8.8Proof of conceptEPSS 17%
- RCE
- Memory safety
nokia · i-240w-q gpon ont firmwareMar 5, 2019
CVE-2019-9213
40Plan
In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum address, which makes it easier for atta
MediumCVSS 5.5WeaponizedEPSS 5%
- Memory safety
- Denial of service
linux · linux kernelMar 5, 2019
CVE-2019-0540
26Monitor
A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially craf
MediumCVSS 5.5No exploitEPSS 12%
- Open redirect
microsoft · excel viewerMar 5, 2019
CVE-2019-0590
33Monitor
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin
HighCVSS 7.5No exploitEPSS 11%
- pre-auth RCE
- Memory safety
microsoft · edgeMar 5, 2019
CVE-2019-0591
33Monitor
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin
HighCVSS 7.5No exploitEPSS 11%
- pre-auth RCE
- Memory safety
microsoft · edgeMar 5, 2019
CVE-2019-0593
36Monitor
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin
HighCVSS 7.5No exploitEPSS 19%
- pre-auth RCE
- Memory safety
microsoft · edgeMar 5, 2019
CVE-2019-0594
39Monitor
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa
HighCVSS 8.8No exploitEPSS 12%
- RCE
microsoft · sharepoint enterprise serverMar 5, 2019
CVE-2019-0595
37Monitor
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En
HighCVSS 7.8No exploitEPSS 19%
- RCE
microsoft · windows 10Mar 5, 2019
CVE-2019-0596
36Monitor
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En
HighCVSS 7.8No exploitEPSS 16%
- RCE
microsoft · windows 10Mar 5, 2019
CVE-2019-0597
36Monitor
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En
HighCVSS 7.8No exploitEPSS 16%
- RCE
microsoft · windows 10Mar 5, 2019
CVE-2019-0598
37Monitor
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En
HighCVSS 7.8No exploitEPSS 20%
- RCE
microsoft · windows 10Mar 5, 2019
CVE-2019-0599
37Monitor
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En
HighCVSS 7.8No exploitEPSS 20%
- RCE
microsoft · windows 10Mar 5, 2019
CVE-2019-0604
99Now
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa
CriticalCVSS 9.8KEVWeaponizedEPSS 99%
- pre-auth RCE
microsoft · sharepoint enterprise serverMar 5, 2019
CVE-2019-0605
34Monitor
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin
HighCVSS 7.5No exploitEPSS 12%
- pre-auth RCE
- Memory safety
microsoft · edgeMar 5, 2019
CVE-2019-0606
33Monitor
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Cor
HighCVSS 7.5No exploitEPSS 11%
- pre-auth RCE
- Memory safety
microsoft · internet explorerMar 5, 2019
CVE-2019-0607
33Monitor
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin
HighCVSS 7.5No exploitEPSS 11%
- pre-auth RCE
- Memory safety
microsoft · edgeMar 5, 2019
CVE-2019-0610
33Monitor
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin
HighCVSS 7.5No exploitEPSS 11%
- pre-auth RCE
- Memory safety
microsoft · edgeMar 5, 2019
CVE-2019-0613
40Plan
A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the source markup
HighCVSS 8.8No exploitEPSS 15%
- pre-auth RCE
- Memory safety
microsoft · .net frameworkMar 5, 2019
CVE-2019-0618
55Plan
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka
HighCVSS 8.8No exploitEPSS 67%
- pre-auth RCE
microsoft · windows 10Mar 5, 2019
CVE-2019-0625
36Monitor
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En
HighCVSS 7.8No exploitEPSS 16%
- RCE
microsoft · windows 10Mar 5, 2019
CVE-2019-0626
60This week
A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP serve
CriticalCVSS 9.8No exploitEPSS 68%
- pre-auth RCE
- Memory safety
microsoft · windows 10Mar 5, 2019
CVE-2019-0630
40Plan
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests,
HighCVSS 8.8No exploitEPSS 17%
- RCE
microsoft · windows 10Mar 5, 2019
CVE-2019-0633
39Monitor
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests,
HighCVSS 8.8No exploitEPSS 13%
- RCE
microsoft · windows 10Mar 5, 2019
CVE-2019-0640
33Monitor
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin
HighCVSS 7.5No exploitEPSS 11%
- pre-auth RCE
- Memory safety
microsoft · chakracoreMar 5, 2019
CVE-2019-0642
33Monitor
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin
HighCVSS 7.5No exploitEPSS 11%
- pre-auth RCE
- Memory safety
microsoft · chakracoreMar 5, 2019
CVE-2019-0644
33Monitor
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin
HighCVSS 7.5No exploitEPSS 11%
- pre-auth RCE
- Memory safety
microsoft · edgeMar 5, 2019
CVE-2019-0650
36Monitor
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruptio
HighCVSS 7.5No exploitEPSS 19%
- pre-auth RCE
- Memory safety
microsoft · edgeMar 5, 2019
CVE-2019-0651
33Monitor
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin
HighCVSS 7.5No exploitEPSS 11%
- pre-auth RCE
- Memory safety
microsoft · edgeMar 5, 2019
CVE-2019-0652
33Monitor
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin
HighCVSS 7.5No exploitEPSS 11%
- pre-auth RCE
- Memory safety
microsoft · edgeMar 5, 2019
CVE-2019-0655
34Monitor
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin
HighCVSS 7.5No exploitEPSS 12%
- pre-auth RCE
- Memory safety
microsoft · edgeMar 5, 2019
CVE-2019-0662
40Plan
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka
HighCVSS 8.8No exploitEPSS 15%
- pre-auth RCE
microsoft · windows 10Mar 5, 2019
CVE-2019-0671
35Monitor
A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka
HighCVSS 7.8No exploitEPSS 14%
- RCE
microsoft · officeMar 5, 2019
CVE-2019-0672
35Monitor
A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka
HighCVSS 7.8No exploitEPSS 14%
- RCE
microsoft · officeMar 5, 2019
CVE-2019-0673
35Monitor
A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka
HighCVSS 7.8No exploitEPSS 14%
- RCE
microsoft · officeMar 5, 2019
CVE-2019-0674
37Monitor
A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka
HighCVSS 7.8No exploitEPSS 18%
- RCE
microsoft · officeMar 5, 2019
CVE-2019-0675
35Monitor
A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka
HighCVSS 7.8No exploitEPSS 14%
- RCE
microsoft · officeMar 5, 2019
CVE-2019-0676
60This week
An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker who successfully expl
MediumCVSS 6.5KEVWeaponizedEPSS 8%
- Pre-auth
microsoft · internet explorerMar 5, 2019
CVE-2019-0724
60This week
An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerabi
HighCVSS 8.1WeaponizedEPSS 23%
- Pre-auth
microsoft · exchange serverMar 5, 2019
CVE-2019-0728
39Monitor
A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project, aka 'Visua
HighCVSS 7.8No exploitEPSS 27%
- RCE
microsoft · visual studio codeMar 5, 2019
CVE-2019-9581
39Monitor
phpscheduleit Booked Scheduler 2.7.5 allows arbitrary file upload via the Favicon field, leading to execution of arbitrary Web/custom-favico
HighCVSS 8.8Proof of conceptEPSS 13%
- File upload
twinkletoessoftware · bookedMar 5, 2019
CVE-2019-9599
34Monitor
The AirDroid application through 4.2.1.6 for Android allows remote attackers to cause a denial of service (service crash) via many simultane
HighCVSS 7.5Proof of conceptEPSS 13%
- Pre-auth
- Denial of service
airdroid · airdroidMar 6, 2019
CVE-2019-9624
40Plan
Webmin 1.900 allows remote attackers to execute arbitrary code by leveraging the "Java file manager" and "Upload and Download" privileges to
HighCVSS 7.8WeaponizedEPSS 23%
- RCE
- Local privilege escalation
webmin · webminMar 7, 2019
CVE-2019-3778
31Monitor
Open Redirect in spring-security-oauth2
MediumCVSS 6.5Proof of conceptEPSS 16%
- Pre-auth
- Open redirect
pivotal software · spring security oauthMar 7, 2019
CVE-2019-1599
38Monitor
Cisco NX-OS Software Netstack Denial of Service Vulnerability
HighCVSS 8.6No exploitEPSS 14%
- Pre-auth
- Denial of service
cisco · nx-osMar 7, 2019
CVE-2019-0192
62This week
In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request.
CriticalCVSS 9.8Proof of conceptEPSS 78%
- pre-auth RCE
- Deserialization
apache · solrMar 7, 2019
CVE-2018-18809
80Now
TIBCO JasperReports Library Directory Traversal Vulnerability
MediumCVSS 6.5KEVWeaponizedEPSS 79%
- Path traversal
tibco · jasperreports libraryMar 7, 2019
CVE-2019-9632
42Plan
ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack
HighCVSS 7.5Proof of conceptEPSS 39%
- Pre-auth
esafenet · electronic document security management systemMar 8, 2019
CVE-2017-3164
36Monitor
Server Side Request Forgery in Apache Solr, versions 1.3 until 7.6 (inclusive).
HighCVSS 7.5Proof of conceptEPSS 19%
- Pre-auth
- SSRF
apache · solrMar 8, 2019
CVE-2019-1003029
91Now
A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.53 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecuri
CriticalCVSS 9.9KEVWeaponizedEPSS 74%
- RCE
jenkins · script securityMar 8, 2019
CVE-2019-1003030
98Now
A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 and earlier in pom.xml, src/main/java/org/jenkinsci/plugins/wo
CriticalCVSS 9.9KEVWeaponizedEPSS 97%
- RCE
jenkins · pipeline\Mar 8, 2019
CVE-2019-9692
40Plan
class.showtime2_image.php in CMS Made Simple (CMSMS) before 2.2.10 does not ensure that a watermark file has a standard image file extension
MediumCVSS 6.5WeaponizedEPSS 45%
- File upload
cmsmadesimple · cms made simpleMar 11, 2019
CVE-2019-5917
36Monitor
azure-umqtt-c (available through GitHub prior to 2017 October 6) allows remote attackers to cause a denial of service via unspecified vector
HighCVSS 7.5No exploitEPSS 21%
- Pre-auth
- Denial of service
microsoft · azure-umqtt-cMar 12, 2019
CVE-2019-9760
60This week
FTPGetter Standard v.5.97.0.177 allows remote code execution when a user initiates an FTP connection to an attacker-controlled machine that
CriticalCVSS 9.8WeaponizedEPSS 53%
- pre-auth RCE
- Memory safety
ftpgetter · ftpgetterMar 13, 2019
CVE-2019-9768
34Monitor
Thinkst Canarytokens through commit hash 4e89ee0 (2019-03-01) relies on limited variation in size, metadata, and timestamp, which makes it e
HighCVSS 7.5Proof of conceptEPSS 11%
- Pre-auth
thinkst · canarytokensMar 14, 2019
CVE-2019-9787
47Plan
WordPress before 5.1.1 does not properly filter comment content, leading to Remote Code Execution by unauthenticated users in a default conf
HighCVSS 8.8Proof of conceptEPSS 38%
- pre-auth RCE
- XSS
- CSRF
wordpress · wordpressMar 14, 2019
CVE-2019-3816
34Monitor
Openwsman, versions up to and including 2.6.9, are vulnerable to arbitrary file disclosure because the working directory of openwsmand daemo
HighCVSS 7.5No exploitEPSS 14%
- Pre-auth
- Path traversal
openwsman project · openwsmanMar 14, 2019
CVE-2019-3833
35Monitor
Openwsman, versions up to and including 2.6.9, are vulnerable to infinite loop in process_connection() when parsing specially crafted HTTP r
HighCVSS 7.5No exploitEPSS 15%
- Pre-auth
- Denial of service
openwsman project · openwsmanMar 14, 2019
CVE-2019-9831
33Monitor
The AirMore application through 1.6.1 for Android allows remote attackers to cause a denial of service (system hang) via many simultaneous /
HighCVSS 7.5Proof of conceptEPSS 10%
- Pre-auth
- Denial of service
airmore · airmoreMar 15, 2019
CVE-2019-9833
33Monitor
The Screen Stream application through 3.0.15 for Android allows remote attackers to cause a denial of service via many simultaneous /start-s
HighCVSS 7.5Proof of conceptEPSS 10%
- Pre-auth
- Denial of service
screen stream project · screen streamMar 15, 2019
CVE-2018-10093
55Plan
AudioCodes IP phone 420HD devices using firmware version 2.2.12.126 allow Remote Code Execution.
HighCVSS 8.8Proof of conceptEPSS 68%
- RCE
- Broken access control (IDOR)
audiocodes · 420hd ip phone firmwareMar 21, 2019
CVE-2018-19191
33Monitor
Webmin 1.890 has XSS via /config.cgi?webmin, the /shell/index.cgi history parameter, /shell/index.cgi?stripped=1, or the /webminlog/search.c
MediumCVSS 5.4No exploitEPSS 39%
- XSS
webmin · webminMar 21, 2019
CVE-2018-19276
69This week
OpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerability that allows an unauthenticated user to execute arbitra
CriticalCVSS 9.8WeaponizedEPSS 98%
- pre-auth RCE
- Deserialization
openmrs · openmrsMar 21, 2019
CVE-2018-19365
43Plan
The REST API in Wowza Streaming Engine 4.7.4.01 allows traversal of the directory structure and retrieval of a file via a remote, specifical
CriticalCVSS 9.1Proof of conceptEPSS 22%
- Pre-auth
- Path traversal
wowza · streaming engineMar 21, 2019
CVE-2018-19510
45Plan
subscriber.php in Webgalamb through 7.0 is vulnerable to SQL injection via the Client-IP HTTP request header.
CriticalCVSS 9.8No exploitEPSS 19%
- Pre-auth
- SQL injection
ens · webgalambMar 21, 2019
CVE-2018-19524
54Plan
An issue was discovered on Shenzhen Skyworth DT741 Converged Intelligent Terminal (G/EPON+IPTV) SDOTBGN1, DT721-cb SDOTBGN1, and DT741-cb SD
CriticalCVSS 9.8Proof of conceptEPSS 50%
- pre-auth RCE
skyworthdigital · dt740 firmwareMar 21, 2019
CVE-2018-20218
42Plan
An issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below.
CriticalCVSS 9.8Proof of conceptEPSS 10%
- pre-auth RCE
- Command injection
teracue · enc-400 hdmi firmwareMar 21, 2019
CVE-2018-20219
36Monitor
An issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below.
HighCVSS 8.1Proof of conceptEPSS 14%
- Pre-auth
- Auth bypass
- Hard-coded credentials
teracue · enc-400 hdmi firmwareMar 21, 2019
CVE-2018-20220
35Monitor
An issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below.
HighCVSS 7.5Proof of conceptEPSS 15%
- Pre-auth
- Auth bypass
teracue · enc-400 hdmi firmwareMar 21, 2019
CVE-2018-20221
38Monitor
Secure/SAService.rem in Deltek Ajera Timesheets 9.10.16 and prior are vulnerable to remote code execution via deserialization of untrusted u
HighCVSS 8.8Proof of conceptEPSS 10%
- RCE
- Deserialization
deltek · ajeraMar 21, 2019
CVE-2018-20323
51Plan
www/soap/application/MCSoap/Logs.php in MailCleaner Community Edition 2018.08 allows remote attackers to execute arbitrary OS commands.
HighCVSS 8.8WeaponizedEPSS 54%
- RCE
- Command injection
mailcleaner · mailcleanerMar 21, 2019
CVE-2018-20525
42Plan
Roxy Fileman 1.4.5 allows Directory Traversal in copydir.php, copyfile.php, and fileslist.php.
CriticalCVSS 9.1Proof of conceptEPSS 21%
- Pre-auth
- Path traversal
roxyfileman · roxy filemanMar 21, 2019
CVE-2018-20526
61This week
Roxy Fileman 1.4.5 allows unrestricted file upload in upload.php.
CriticalCVSS 9.8Proof of conceptEPSS 73%
- Pre-auth
- File upload
roxyfileman · roxy filemanMar 21, 2019
CVE-2018-20555
42Plan
The Design Chemical Social Network Tabs plugin 1.7.1 for WordPress allows remote attackers to discover Twitter access_token, access_token_se
CriticalCVSS 9.8Proof of conceptEPSS 10%
- Pre-auth
- Info leak
designchemical · social network tabsMar 21, 2019
CVE-2018-20556
41Plan
SQL injection vulnerability in Booking Calendar plugin 8.4.3 for WordPress allows remote attackers to execute arbitrary SQL commands via the
HighCVSS 8.8Proof of conceptEPSS 18%
- RCE
- SQL injection
booking calendar project · booking calendarMar 21, 2019
CVE-2019-6116
43Plan
In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to remote code executio
HighCVSS 7.8Proof of conceptEPSS 41%
- RCE
artifex · ghostscriptMar 21, 2019
CVE-2019-6272
39Monitor
Command injection vulnerability in login_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to execute arbitra
HighCVSS 8.8Proof of conceptEPSS 12%
- RCE
- Command injection
gl-inet · gl-ar300m-lite firmwareMar 21, 2019
CVE-2019-6273
29Monitor
download_file in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to download arbitrary files.
MediumCVSS 6.5Proof of conceptEPSS 11%
- Path traversal
gl-inet · gl-ar300m-lite firmwareMar 21, 2019
CVE-2019-6274
38Monitor
Directory traversal vulnerability in storage_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to have unspec
HighCVSS 8.8Proof of conceptEPSS 11%
- Path traversal
gl-inet · gl-ar300m-lite firmwareMar 21, 2019
CVE-2019-6275
39Monitor
Command injection vulnerability in firmware_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to execute arbi
HighCVSS 8.8Proof of conceptEPSS 12%
- RCE
- Command injection
gl-inet · gl-ar300m-lite firmwareMar 21, 2019
CVE-2019-6441
55Plan
An issue was discovered on Shenzhen Coship RT3050 4.0.0.40, RT3052 4.0.0.48, RT7620 10.0.0.49, WM3300 5.0.0.54, and WM3300 5.0.0.55 devices.
CriticalCVSS 9.8Proof of conceptEPSS 53%
- Pre-auth
- Auth bypass
coship · rt3050 firmwareMar 21, 2019
CVE-2019-6714
49Plan
An issue was discovered in BlogEngine.NET through 3.3.6.0.
CriticalCVSS 9.8Proof of conceptEPSS 31%
- pre-auth RCE
- Path traversal
blogengine · blogengine.netMar 21, 2019
CVE-2019-6967
39Monitor
AirTies Air5341 1.0.0.12 devices allow cgi-bin/login CSRF.
HighCVSS 8.8Proof of conceptEPSS 13%
- Pre-auth
- CSRF
airties · air 5341 firmwareMar 21, 2019
CVE-2019-6973
34Monitor
Sricam IP CCTV cameras are vulnerable to denial of service via multiple incomplete HTTP requests because the web server (based on gSOAP 2.8.
HighCVSS 7.5Proof of conceptEPSS 13%
- Pre-auth
- Denial of service
sricam · nvs001Mar 21, 2019
CVE-2019-7385
35Monitor
An authenticated shell command injection issue has been discovered in Raisecom ISCOM HT803G-U, HT803G-W, HT803G-1GE, and HT803G GPON product
HighCVSS 7.8Proof of conceptEPSS 12%
- RCE
- Command injection
raisecom · iscom ht803g-u firmwareMar 21, 2019
CVE-2019-7391
39Monitor
ZyXEL VMG3312-B10B DSL-491HNU-B1B v2 devices allow login/login-page.cgi CSRF.
HighCVSS 8.8Proof of conceptEPSS 13%
- Pre-auth
- CSRF
zyxel · dsl-491hnu-b10b firmwareMar 21, 2019
CVE-2019-9083
44Plan
SQLiteManager 1.20 and 1.24 allows SQL injection via the /sqlitemanager/main.php dbsel parameter.
CriticalCVSS 9.8Proof of conceptEPSS 17%
- Pre-auth
- SQL injection
sqlitemanager · sqlitemanagerMar 21, 2019
CVE-2019-7238
92Now
Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control.
CriticalCVSS 9.8KEVWeaponizedEPSS 76%
- Pre-auth
sonatype · nexus repository managerMar 21, 2019
CVE-2019-3871
39Monitor
A vulnerability was found in PowerDNS Authoritative Server before 4.0.7 and before 4.1.7.
HighCVSS 8.8No exploitEPSS 12%
powerdns · authoritative serverMar 21, 2019
CVE-2019-9648
25Monitor
An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674.
MediumCVSS 5.3Proof of conceptEPSS 14%
- Pre-auth
- Path traversal
coreftp · core ftpMar 22, 2019
CVE-2019-9649
25Monitor
An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674.
MediumCVSS 5.3Proof of conceptEPSS 14%
- Pre-auth
- Path traversal
coreftp · core ftpMar 22, 2019
CVE-2019-9948
40Plan
urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechani
CriticalCVSS 9.1No exploitEPSS 11%
- Pre-auth
- Path traversal
python · pythonMar 23, 2019
CVE-2019-9960
60This week
The downloadZip function in application/controllers/admin/export.php in LimeSurvey through 3.16.1+190225 allows a relative path.
CriticalCVSS 9.8WeaponizedEPSS 13%
- Pre-auth
- Path traversal
limesurvey · limesurveyMar 23, 2019
CVE-2019-9978
76This week
The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swp_debug=load_options swp_url parameter
MediumCVSS 6.1KEVWeaponizedEPSS 72%
- Pre-auth
- XSS
warfareplugins · social warfareMar 24, 2019
CVE-2018-16858
60This week
It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute
CriticalCVSS 9.8WeaponizedEPSS 67%
- pre-auth RCE
- Path traversal
libreoffice · libreofficeMar 25, 2019
CVE-2019-3810
28Monitor
A flaw was found in moodle versions 3.6 to 3.6.1, 3.5 to 3.5.3, 3.4 to 3.4.6, 3.1 to 3.1.15 and earlier unsupported versions.
MediumCVSS 6.1Proof of conceptEPSS 13%
- Pre-auth
- XSS
moodle · moodleMar 25, 2019
CVE-2019-3396
99Now
The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from version 6.7.0 before 6.1
CriticalCVSS 9.8KEVWeaponizedEPSS 99%
- pre-auth RCE
- Path traversal
- SSTI
atlassian · confluence serverMar 25, 2019
CVE-2019-7609
99Now
Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer.
CriticalCVSS 10.0KEVWeaponizedEPSS 95%
- pre-auth RCE
elastic · kibanaMar 25, 2019
CVE-2019-9053
53Plan
An issue was discovered in CMS Made Simple 2.2.8.
HighCVSS 8.1Proof of conceptEPSS 68%
- Pre-auth
- SQL injection
cmsmadesimple · cms made simpleMar 26, 2019