Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: September 2019

87 records · 11 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2019-15858
    41Plan

    admin/includes/class.import.snippet.php in the "Woody ad snippets" plugin before 2.2.5 for WordPress allows unauthenticated options import,

    HighCVSS 8.8Proof of conceptEPSS 18%

    webcraftic · woody ad snippetsSep 3, 2019

  • CVE-2019-15043
    49Plan

    In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use.

    HighCVSS 7.5Proof of conceptEPSS 63%

    grafana · grafanaSep 3, 2019

  • CVE-2019-15889
    27Monitor

    The download-manager plugin before 2.9.94 for WordPress has XSS via the category shortcode feature, as demonstrated by the orderby or search

    MediumCVSS 6.1Proof of conceptEPSS 11%

    w3eden · download managerSep 3, 2019

  • CVE-2019-5475
    41Plan

    The Nexus Yum Repository Plugin in v2 is vulnerable to Remote Code Execution when instances using CommandLineExecutor.java are supplied vuln

    HighCVSS 8.8Proof of conceptEPSS 18%

    sonatype · nexus repository managerSep 3, 2019

  • CVE-2019-10709
    42Plan

    AsusPTPFilter.sys on Asus Precision TouchPad 11.0.0.25 hardware has a Pool Overflow associated with the \\.\AsusTP device, leading to a DoS

    CriticalCVSS 9.8Proof of conceptEPSS 11%

    asus · precision touchpadSep 4, 2019

  • CVE-2019-15813
    45Plan

    Multiple file upload restriction bypass vulnerabilities in Sentrifugo 3.2 could allow authenticated users to execute arbitrary code via a we

    HighCVSS 8.8Proof of conceptEPSS 33%

    sentrifugo · sentrifugoSep 4, 2019

  • CVE-2019-14470
    49Plan

    cosenary Instagram-PHP-API (aka Instagram PHP API V2), as used in the UserPro plugin through 4.9.32 for WordPress, has XSS via the example/s

    MediumCVSS 6.1Proof of conceptEPSS 82%

    instagram-php-api project · instagram-php-apiSep 4, 2019

  • CVE-2019-15949
    88Now

    Nagios XI before 5.6.6 allows remote command execution as root.

    HighCVSS 8.8KEVWeaponizedEPSS 77%

    nagios · nagios xiSep 5, 2019

  • CVE-2019-15954
    63This week

    An issue was discovered in Total.js CMS 12.0.0.

    CriticalCVSS 9.9WeaponizedEPSS 78%

    totaljs · total.js cmsSep 5, 2019

  • CVE-2019-15029
    39Monitor

    FusionPBX 4.4.8 allows an attacker to execute arbitrary system commands by submitting a malicious command to the service_edit.php file (whic

    HighCVSS 8.8Proof of conceptEPSS 12%

    fusionpbx · fusionpbxSep 5, 2019

  • CVE-2019-15846
    50Plan

    Exim before 4.92.2 allows remote attackers to execute arbitrary code as root via a trailing backslash.

    CriticalCVSS 9.8Proof of conceptEPSS 35%

    exim · eximSep 6, 2019

  • CVE-2019-14813
    42Plan

    A flaw was found in ghostscript, versions 9.x before 9.50, in the setsystemparams procedure where it did not properly secure its privileged

    CriticalCVSS 9.8No exploitEPSS 10%

    artifex · ghostscriptSep 6, 2019

  • CVE-2019-10891
    45Plan

    An issue was discovered in D-Link DIR-806 devices.

    CriticalCVSS 9.8No exploitEPSS 19%

    dlink · dir-806 firmwareSep 6, 2019

  • CVE-2019-16097
    33Monitor

    core/api/user.go in Harbor 1.7.0 through 1.8.2 allows non-admin users to create admin accounts via the POST /api/users API, when Harbor is s

    MediumCVSS 6.5Proof of conceptEPSS 22%

    linuxfoundation · harborSep 8, 2019

  • CVE-2019-16113
    58Plan

    Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .jpg file name, and th

    HighCVSS 8.8WeaponizedEPSS 77%

    bludit · bluditSep 8, 2019

  • CVE-2019-16119
    46Plan

    SQL injection in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress exists via the admin/controllers/Albumsgalleries

    CriticalCVSS 9.8Proof of conceptEPSS 24%

    10web · photo gallerySep 8, 2019

  • CVE-2019-16123
    35Monitor

    In Kartatopia PilusCart 1.4.1, the parameter filename in the file catalog.php is mishandled, leading to ../ Local File Disclosure.

    HighCVSS 7.5Proof of conceptEPSS 16%

    kartatopia · piluscartSep 8, 2019

  • CVE-2019-16124
    47Plan

    In YouPHPTube 7.4, the file install/checkConfiguration.php has no access control, which leads to everyone being able to edit the configurati

    CriticalCVSS 9.8No exploitEPSS 27%

    youphptube · youphptubeSep 8, 2019

  • CVE-2019-10669
    52Plan

    An issue was discovered in LibreNMS through 1.47.

    HighCVSS 7.2WeaponizedEPSS 80%

    librenms · librenmsSep 9, 2019

  • CVE-2019-15639
    37Monitor

    main/translate.c in Sangoma Asterisk 13.28.0 and 16.5.0 allows a remote attacker to send a specific RTP packet during a call and cause a cra

    HighCVSS 7.5No exploitEPSS 21%

    digium · asteriskSep 9, 2019

  • CVE-2019-8449
    46Plan

    The /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allows remote attackers to enumerate usernames via an information

    MediumCVSS 5.3Proof of conceptEPSS 84%

    atlassian · jiraSep 11, 2019

  • CVE-2019-8451
    54Plan

    The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.4.0 allows remote attackers to access the content of internal net

    MediumCVSS 6.5Proof of conceptEPSS 94%

    atlassian · jira serverSep 11, 2019

  • CVE-2019-16098
    37Monitor

    The driver in Micro-Star MSI Afterburner 4.6.2.15658 (aka RTCore64.sys and RTCore32.sys) allows any authenticated user to read and write to

    HighCVSS 7.8Proof of conceptEPSS 19%

    msi · afterburnerSep 11, 2019

  • CVE-2019-0189
    46Plan

    The java.io.ObjectInputStream is known to cause Java serialisation issues.

    CriticalCVSS 9.8No exploitEPSS 23%

    apache · ofbizSep 11, 2019

  • CVE-2019-0787
    39Monitor

    A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote De

    HighCVSS 8.8No exploitEPSS 12%

    microsoft · windows 10Sep 11, 2019

  • CVE-2019-0788
    39Monitor

    A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote De

    HighCVSS 8.8No exploitEPSS 12%

    microsoft · windows 10Sep 11, 2019

  • CVE-2019-1208
    34Monitor

    A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execut

    HighCVSS 7.5No exploitEPSS 12%

    microsoft · internet explorerSep 11, 2019

  • CVE-2019-1214
    61This week

    An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, a

    HighCVSS 7.8KEVWeaponizedEPSS 1%

    microsoft · windows 10 1507Sep 11, 2019

  • CVE-2019-1215
    67This week

    An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of Pr

    HighCVSS 7.8KEVWeaponizedEPSS 19%

    microsoft · windows 10 1507Sep 11, 2019

  • CVE-2019-1221
    36Monitor

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scrip

    HighCVSS 7.5Proof of conceptEPSS 19%

    microsoft · internet explorerSep 11, 2019

  • CVE-2019-1240
    35Monitor

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    HighCVSS 7.8No exploitEPSS 11%

    microsoft · windows 10Sep 11, 2019

  • CVE-2019-1241
    36Monitor

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    HighCVSS 7.8No exploitEPSS 17%

    microsoft · windows 10Sep 11, 2019

  • CVE-2019-1242
    35Monitor

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    HighCVSS 7.8No exploitEPSS 11%

    microsoft · windows 10Sep 11, 2019

  • CVE-2019-1243
    37Monitor

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    HighCVSS 7.8No exploitEPSS 18%

    microsoft · windows 10Sep 11, 2019

  • CVE-2019-1244
    30Monitor

    An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Informatio

    MediumCVSS 6.5Proof of conceptEPSS 12%

    microsoft · windows 10Sep 11, 2019

  • CVE-2019-1245
    30Monitor

    An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Informatio

    MediumCVSS 6.5Proof of conceptEPSS 12%

    microsoft · windows 10Sep 11, 2019

  • CVE-2019-1246
    35Monitor

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    HighCVSS 7.8No exploitEPSS 12%

    microsoft · officeSep 11, 2019

  • CVE-2019-1247
    35Monitor

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    HighCVSS 7.8No exploitEPSS 11%

    microsoft · windows 10Sep 11, 2019

  • CVE-2019-1248
    35Monitor

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    HighCVSS 7.8No exploitEPSS 11%

    microsoft · windows 10Sep 11, 2019

  • CVE-2019-1249
    35Monitor

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    HighCVSS 7.8No exploitEPSS 11%

    microsoft · windows 10Sep 11, 2019

  • CVE-2019-1250
    37Monitor

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    HighCVSS 7.8No exploitEPSS 18%

    microsoft · windows 10Sep 11, 2019

  • CVE-2019-1252
    44Plan

    An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows

    MediumCVSS 6.5No exploitEPSS 60%

    microsoft · windows 10Sep 11, 2019

  • CVE-2019-1253
    64This week

    An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerab

    HighCVSS 7.8KEVWeaponizedEPSS 11%

    microsoft · windows 10 1703Sep 11, 2019

  • CVE-2019-1257
    38Monitor

    A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa

    HighCVSS 8.8No exploitEPSS 11%

    microsoft · sharepoint enterprise serverSep 11, 2019

  • CVE-2019-1280
    37Monitor

    A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An atta

    HighCVSS 7.8No exploitEPSS 18%

    microsoft · windows 10Sep 11, 2019

  • CVE-2019-1290
    39Monitor

    A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote De

    HighCVSS 8.8No exploitEPSS 12%

    microsoft · windows 10Sep 11, 2019

  • CVE-2019-1291
    39Monitor

    A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote De

    HighCVSS 8.8No exploitEPSS 12%

    microsoft · windows 10Sep 11, 2019

  • CVE-2019-1297
    72This week

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka '

    HighCVSS 8.8KEVWeaponizedEPSS 21%

    microsoft · excelSep 11, 2019

  • CVE-2019-1306
    44Plan

    A remote code execution vulnerability exists when Azure DevOps Server (ADO) and Team Foundation Server (TFS) fail to validate input properly

    CriticalCVSS 9.8No exploitEPSS 16%

    microsoft · team foundation serverSep 11, 2019

  • CVE-2019-16256
    70This week

    Some Samsung devices include the SIMalliance Toolbox Browser (aka S@T Browser) on the UICC, which might allow remote attackers to retrieve l

    CriticalCVSS 9.8KEVWeaponizedEPSS 4%

    trustedconnectivityalliance · s\@t browserSep 12, 2019

  • CVE-2019-10392
    43Plan

    Jenkins Git Client Plugin 2.8.4 and earlier and 3.0.0-rc did not properly restrict values passed as URL argument to an invocation of 'git ls

    HighCVSS 8.8Proof of conceptEPSS 26%

    jenkins · git clientSep 12, 2019

  • CVE-2019-12922
    29Monitor

    A CSRF issue in phpMyAdmin 4.9.0.1 allows deletion of any server in the Setup page.

    MediumCVSS 6.5Proof of conceptEPSS 10%

    phpmyadmin · phpmyadminSep 13, 2019

  • CVE-2010-5333
    44Plan

    The web server in Integard Pro and Home before 2.0.0.9037 and 2.2.x before 2.2.0.9037 has a buffer overflow via a long password in an admini

    CriticalCVSS 9.8WeaponizedEPSS 16%

    integard home project · integard homeSep 13, 2019

  • CVE-2019-11660
    33Monitor

    Privileges manipulation in Micro Focus Data Protector, versions 10.00, 10.01, 10.02, 10.03, 10.04, 10.10, 10.20, 10.30, 10.40.

    HighCVSS 7.8WeaponizedEPSS 7%

    microfocus · data protectorSep 13, 2019

  • CVE-2019-5485
    58Plan

    NPM package gitlabhook version 0.0.17 is vulnerable to a Command Injection vulnerability.

    CriticalCVSS 10.0Proof of conceptEPSS 58%

    gitlabhook project · gitlabhookSep 13, 2019

  • CVE-2019-16313
    44Plan

    ifw8 Router ROM v4.31 allows credential disclosure by reading the action/usermanager.htm HTML source code.

    HighCVSS 7.5Proof of conceptEPSS 46%

    ifw8 · fr6 firmwareSep 14, 2019

  • CVE-2019-16314
    51Plan

    Indexhibit 2.1.5 allows a product reinstallation, with resultant remote code execution, via /ndxzstudio/install.php?p=2.

    CriticalCVSS 9.8No exploitEPSS 38%

    indexhibit · indexhibitSep 14, 2019

  • CVE-2019-14540
    42Plan

    A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10.

    CriticalCVSS 9.8Proof of conceptEPSS 10%

    fasterxml · jackson-databindSep 15, 2019

  • CVE-2016-10956
    33Monitor

    The mail-masta plugin 1.0 for WordPress has local file inclusion in count_of_send.php and csvexport.php.

    HighCVSS 7.5Proof of conceptEPSS 10%

    mail-masta project · mail-mastaSep 16, 2019

  • CVE-2019-16057
    95Now

    The login_mgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection.

    CriticalCVSS 9.8KEVWeaponizedEPSS 86%

    dlink · dns-320 firmwareSep 16, 2019

  • CVE-2019-0195
    43Plan

    Manipulating classpath asset file URLs, an attacker could guess the path to a known file in the classpath and have it downloaded.

    CriticalCVSS 9.8Proof of conceptEPSS 14%

    apache · tapestrySep 16, 2019

  • CVE-2019-8368
    38Monitor

    OpenEMR v5.0.1-6 allows XSS.

    MediumCVSS 6.1No exploitEPSS 45%

    open-emr · openemrSep 16, 2019

  • CVE-2019-5482
    44Plan

    Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.

    CriticalCVSS 9.8No exploitEPSS 17%

    haxx · curlSep 16, 2019

  • CVE-2019-15001
    31Monitor

    The Jira Importers Plugin in Atlassian Jira Server and Data Cente from version with 7.0.10 before 7.6.16, from 7.7.0 before 7.13.8, from 8.0

    HighCVSS 7.2No exploitEPSS 10%

    atlassian · jira serverSep 19, 2019

  • CVE-2015-9406
    47Plan

    Directory traversal vulnerability in the mTheme-Unus theme before 2.3 for WordPress allows an attacker to read arbitrary files via a ..

    HighCVSS 7.5WeaponizedEPSS 55%

    mtheme-unus project · mtheme-unusSep 20, 2019

  • CVE-2019-16692
    42Plan

    phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter-result.php table parameter when action=add is used.

    CriticalCVSS 9.8Proof of conceptEPSS 10%

    phpipam · phpipamSep 22, 2019

  • CVE-2019-16702
    42Plan

    Integard Pro 2.2.0.9026 allows remote attackers to execute arbitrary code via a buffer overflow involving a long NoJs parameter to the /Logi

    CriticalCVSS 9.8Proof of conceptEPSS 10%

    integard pro project · integard proSep 22, 2019

  • CVE-2019-13063
    38Monitor

    Within Sahi Pro 8.0.0, an attacker can send a specially crafted URL to include any victim files on the system via the script parameter on th

    HighCVSS 7.5Proof of conceptEPSS 27%

    sahipro · sahi proSep 23, 2019

  • CVE-2019-1367
    76This week

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scrip

    HighCVSS 7.5KEVWeaponizedEPSS 52%

    microsoft · internet explorerSep 23, 2019

  • CVE-2019-16746
    43Plan

    An issue was discovered in net/wireless/nl80211.c in the Linux kernel through 5.2.17.

    CriticalCVSS 9.8Proof of conceptEPSS 12%

    linux · linux kernelSep 24, 2019

  • CVE-2019-16724
    61This week

    File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Exception Handler (SEH) bas

    CriticalCVSS 9.8WeaponizedEPSS 72%

    upredsun · file sharing wizardSep 24, 2019

  • CVE-2019-16759
    99Now

    vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter in an ajax/render/widget_php routestring re

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    vbulletin · vbulletinSep 24, 2019

  • CVE-2019-10405
    41Plan

    Jenkins 2.196 and earlier, LTS 2.176.3 and earlier printed the value of the "Cookie" HTTP request header on the /whoAmI/ URL, allowing attac

    MediumCVSS 5.4Proof of conceptEPSS 65%

    jenkins · jenkinsSep 25, 2019

  • CVE-2019-16701
    41Plan

    pfSense through 2.3.4 through 2.4.4-p3 allows Remote Code Injection via a methodCall XML document with a pfsense.exec_php call containing sh

    HighCVSS 8.8Proof of conceptEPSS 19%

    netgate · pfsenseSep 25, 2019

  • CVE-2019-10098
    46Plan

    In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with mod_rewrite that were intended to be self-referential might be fooled by en

    MediumCVSS 6.1Proof of conceptEPSS 73%

    apache · http serverSep 25, 2019

  • CVE-2019-12650
    44Plan

    Cisco IOS XE Software Web UI Command Injection Vulnerabilities

    HighCVSS 8.8No exploitEPSS 28%

    cisco · iosSep 25, 2019

  • CVE-2015-9436
    21Monitor

    The dynamic-widgets plugin before 1.5.11 for WordPress has XSS via the wp-admin/admin-ajax.php?action=term_tree prefix or widget_id paramete

    MediumCVSS 5.4No exploitEPSS 1%

    vivwebsolutions · dynamic widgetsSep 25, 2019

  • CVE-2019-10082
    41Plan

    In Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling could be made to read memory after being freed,

    CriticalCVSS 9.1No exploitEPSS 16%

    apache · http serverSep 26, 2019

  • CVE-2019-10092
    48Plan

    In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the mod_proxy error page.

    MediumCVSS 6.1Proof of conceptEPSS 81%

    apache · http serverSep 26, 2019

  • CVE-2019-10097
    44Plan

    In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol,

    HighCVSS 7.2No exploitEPSS 52%

    apache · http serverSep 26, 2019

  • CVE-2019-16667
    51Plan

    diag_command.php in pfSense 2.4.4-p3 allows CSRF via the txtCommand or txtRecallBuffer field, as demonstrated by executing OS commands.

    HighCVSS 8.8Proof of conceptEPSS 54%

    netgate · pfsenseSep 26, 2019

  • CVE-2019-16920
    99Now

    Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565.

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    dlink · dir-655 firmwareSep 27, 2019

  • CVE-2019-8074
    45Plan

    ColdFusion 2018- update 4 and earlier and ColdFusion 2016- update 11 and earlier have a Path Traversal vulnerability.

    CriticalCVSS 9.8No exploitEPSS 18%

    adobe · coldfusionSep 27, 2019

  • CVE-2019-16928
    81Now

    Exim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than CVE-2019-15846.

    CriticalCVSS 9.8KEVWeaponizedEPSS 41%

    exim · eximSep 27, 2019

  • CVE-2019-16996
    32Monitor

    In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/product/admin/product_admin.class.php via the admin/?n=product&c=product_

    HighCVSS 7.2Proof of conceptEPSS 12%

    metinfo · metinfoSep 30, 2019

  • CVE-2019-16997
    43Plan

    In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/language/admin/language_general.class.php via the admin/?n=language&c=lan

    HighCVSS 7.2Proof of conceptEPSS 49%

    metinfo · metinfoSep 30, 2019

  • CVE-2019-16932
    52Plan

    A blind SSRF vulnerability exists in the Visualizer plugin before 3.3.1 for WordPress via wp-json/visualizer/v1/upload-data.

    CriticalCVSS 10.0Proof of conceptEPSS 39%

    themeisle · visualizerSep 30, 2019