Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: November 2019

61 records · 9 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2011-3923
    66This week

    Apache Struts before 2.3.1.2 allows remote attackers to bypass security protections in the ParameterInterceptor class and execute arbitrary

    CriticalCVSS 9.8WeaponizedEPSS 89%

    apache · strutsNov 1, 2019

  • CVE-2013-2227
    34Monitor

    GLPI 0.83.7 has Local File Inclusion in common.tabs.php.

    HighCVSS 7.5Proof of conceptEPSS 12%

    glpi-project · glpiNov 1, 2019

  • CVE-2019-18665
    34Monitor

    The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion.

    HighCVSS 7.5Proof of conceptEPSS 14%

    secudos · domosNov 2, 2019

  • CVE-2013-2261
    33Monitor

    Cryptocat before 2.0.22 Chrome Extension 'img/keygen.gif' has Information Disclosure

    HighCVSS 7.5Proof of conceptEPSS 11%

    cryptocat project · cryptocatNov 4, 2019

  • CVE-2014-9013
    49Plan

    The ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplace plugin 2.4.0 for WordPress allows remote authenticated users to c

    HighCVSS 8.8Proof of conceptEPSS 46%

    wpmarketplace project · wpmarketplaceNov 6, 2019

  • CVE-2014-9014
    20Monitor

    Directory traversal vulnerability in the ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplace plugin before 2.4.1 for Word

    MediumCVSS 4.3Proof of conceptEPSS 11%

    wpmarketplace project · wpmarketplaceNov 6, 2019

  • CVE-2019-12419
    43Plan

    Apache CXF before 3.3.4 and 3.2.11 provides all of the components that are required to build a fully fledged OpenId Connect service.

    CriticalCVSS 9.8No exploitEPSS 13%

    apache · cxfNov 6, 2019

  • CVE-2019-18818
    68This week

    strapi before 3.0.0-beta.17.5 mishandles password resets within packages/strapi-admin/controllers/Auth.js and packages/strapi-plugin-users-p

    CriticalCVSS 9.8WeaponizedEPSS 97%

    strapi · strapiNov 7, 2019

  • CVE-2019-18655
    43Plan

    File Sharing Wizard version 1.5.0 build 2008 is affected by a Structured Exception Handler based buffer overflow vulnerability.

    CriticalCVSS 9.8Proof of conceptEPSS 14%

    upredsun · file sharing wizardNov 12, 2019

  • CVE-2019-0719
    39Monitor

    A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an a

    CriticalCVSS 9.1No exploitEPSS 11%

    microsoft · windows 10Nov 12, 2019

  • CVE-2019-0721
    40Plan

    A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an a

    CriticalCVSS 9.1No exploitEPSS 12%

    microsoft · windows 10Nov 12, 2019

  • CVE-2019-1234
    53Plan

    A spoofing vulnerability exists when Azure Stack fails to validate certain requests, aka 'Azure Stack Spoofing Vulnerability'.

    HighCVSS 7.5No exploitEPSS 75%

    microsoft · azure stackNov 12, 2019

  • CVE-2019-1373
    46Plan

    A remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via PowerShell, aka 'Microsoft Ex

    CriticalCVSS 9.8No exploitEPSS 21%

    microsoft · exchange serverNov 12, 2019

  • CVE-2019-1385
    62This week

    An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulti

    HighCVSS 7.8KEVWeaponizedEPSS 3%

    microsoft · windows 10 1709Nov 12, 2019

  • CVE-2019-1388
    64This week

    An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'Win

    HighCVSS 7.8KEVWeaponizedEPSS 8%

    microsoft · windows 10 1507Nov 12, 2019

  • CVE-2019-1405
    70This week

    An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation

    HighCVSS 7.8KEVWeaponizedEPSS 30%

    microsoft · windows 10 1507Nov 12, 2019

  • CVE-2019-1406
    35Monitor

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    HighCVSS 7.8No exploitEPSS 13%

    microsoft · windows 10Nov 12, 2019

  • CVE-2019-1419
    38Monitor

    A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially c

    HighCVSS 8.8No exploitEPSS 11%

    microsoft · windows 10Nov 12, 2019

  • CVE-2019-1429
    83Now

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scrip

    HighCVSS 7.5KEVWeaponizedEPSS 77%

    microsoft · internet explorerNov 12, 2019

  • CVE-2019-1430
    35Monitor

    A remote code execution vulnerability exists when Windows Media Foundation improperly parses specially crafted QuickTime media files.An atta

    HighCVSS 7.8No exploitEPSS 13%

    microsoft · windows 10Nov 12, 2019

  • CVE-2019-1439
    49Plan

    An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows

    MediumCVSS 6.5No exploitEPSS 75%

    microsoft · windows 10Nov 12, 2019

  • CVE-2019-1441
    39Monitor

    A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Win32k

    HighCVSS 8.8No exploitEPSS 12%

    microsoft · windows 7Nov 12, 2019

  • CVE-2019-1448
    40Plan

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka '

    HighCVSS 7.8No exploitEPSS 29%

    microsoft · excelNov 12, 2019

  • CVE-2019-18240
    43Plan

    In Fuji Electric V-Server 4.0.6 and prior, several heap-based buffer overflows have been identified, which may allow an attacker to remotely

    CriticalCVSS 9.8No exploitEPSS 14%

    fujielectric · v-serverNov 13, 2019

  • CVE-2019-18951
    36Monitor

    SibSoft Xfilesharing through 2.5.1 allows op=page&tmpl=../ directory traversal to read arbitrary files.

    HighCVSS 7.5Proof of conceptEPSS 19%

    sibsoft · xfilesharingNov 13, 2019

  • CVE-2019-18952
    53Plan

    SibSoft Xfilesharing through 2.5.1 allows cgi-bin/up.cgi arbitrary file upload.

    CriticalCVSS 9.8Proof of conceptEPSS 45%

    sibsoft · xfilesharingNov 13, 2019

  • CVE-2019-5029
    56Plan

    An exploitable command injection vulnerability exists in the Config editor of the Exhibitor Web UI versions 1.0.9 to 1.7.1.

    CriticalCVSS 9.8Proof of conceptEPSS 57%

    exhibitor project · exhibitorNov 13, 2019

  • CVE-2011-1930
    45Plan

    In klibc 1.5.20 and 1.5.21, the DHCP options written by ipconfig to /tmp/net-$DEVICE.conf are not properly escaped.

    CriticalCVSS 9.8Proof of conceptEPSS 20%

    klibc project · klibcNov 13, 2019

  • CVE-2019-18937
    49Plan

    eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the Script Parser AddOn through 1.8 installed allow Remote Code Execution by unauthenticat

    CriticalCVSS 9.8No exploitEPSS 33%

    eq-3 · homematic ccu2Nov 14, 2019

  • CVE-2019-18938
    49Plan

    eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the E-Mail AddOn through 1.6.8.c installed allow Remote Code Execution by unauthenticated

    CriticalCVSS 9.8No exploitEPSS 33%

    eq-3 · homematic ccu2Nov 14, 2019

  • CVE-2019-18939
    51Plan

    eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the HM-Print AddOn through 1.2a installed allow Remote Code Execution by unauthenticated a

    CriticalCVSS 9.8No exploitEPSS 40%

    eq-3 · homematic ccu2Nov 14, 2019

  • CVE-2019-19012
    42Plan

    An integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9.4_rc2 leads to an out-of-bounds read, in which

    CriticalCVSS 9.8Proof of conceptEPSS 10%

    oniguruma project · onigurumaNov 17, 2019

  • CVE-2019-10172
    35Monitor

    A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries.

    HighCVSS 7.5Proof of conceptEPSS 17%

    fasterxml · jackson-mapper-aslNov 18, 2019

  • CVE-2019-12409
    45Plan

    The 8.1.1 and 8.2.0 releases of Apache Solr contain an insecure setting for the ENABLE_REMOTE_JMX_OPTS configuration option in the default s

    CriticalCVSS 9.8Proof of conceptEPSS 21%

    apache · solrNov 18, 2019

  • CVE-2011-2921
    64This week

    ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can res

    CriticalCVSS 9.8WeaponizedEPSS 83%

    ktsuss project · ktsussNov 19, 2019

  • CVE-2019-16340
    45Plan

    Belkin Linksys Velop 1.1.8.192419 devices allows remote attackers to discover the recovery key via a direct request for the /sysinfo_json.cg

    CriticalCVSS 9.8No exploitEPSS 19%

    linksys · velop whw0303 firmwareNov 21, 2019

  • CVE-2018-8879
    44Plan

    Stack-based buffer overflow in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devi

    CriticalCVSS 9.8No exploitEPSS 17%

    asus · rt-ac66u firmwareNov 21, 2019

  • CVE-2019-6693
    58Plan

    Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup file may allow an attacker with access to the

    MediumCVSS 6.5KEVWeaponizedEPSS 6%

    fortinet · fortiosNov 21, 2019

  • CVE-2019-16405
    36Monitor

    Centreon Web before 2.8.30, 18.10.x before 18.10.8, 19.04.x before 19.04.5 and 19.10.x before 19.10.2 allows Remote Code Execution by an adm

    HighCVSS 7.2Proof of conceptEPSS 27%

    centreon · centreon webNov 21, 2019

  • CVE-2019-16758
    35Monitor

    In Lexmark Services Monitor 2.27.4.0.39 (running on TCP port 2070), a remote attacker can use a directory traversal technique using /../../.

    HighCVSS 7.5Proof of conceptEPSS 16%

    lexmark · services monitor firmwareNov 21, 2019

  • CVE-2019-19006
    86Now

    Sangoma FreePBX 115.0.16.26 and below, 14.0.13.11 and below, 13.0.197.13 and below have Incorrect Access Control.

    CriticalCVSS 9.8KEVWeaponizedEPSS 55%

    sangoma · freepbxNov 21, 2019

  • CVE-2019-19207
    42Plan

    rConfig 3.9.2 allows devices.php?searchColumn= SQL injection.

    HighCVSS 8.8No exploitEPSS 22%

    rconfig · rconfigNov 21, 2019

  • CVE-2019-18889
    49Plan

    An issue was discovered in Symfony 3.4.0 through 3.4.34, 4.2.0 through 4.2.11, and 4.3.0 through 4.3.7.

    CriticalCVSS 9.8No exploitEPSS 33%

    sensiolabs · symfonyNov 21, 2019

  • CVE-2019-18976
    34Monitor

    An issue was discovered in res_pjsip_t38.c in Sangoma Asterisk through 13.x and Certified Asterisk through 13.21-x.

    HighCVSS 7.5No exploitEPSS 12%

    digium · asteriskNov 22, 2019

  • CVE-2019-18610
    50Plan

    An issue was discovered in manager.c in Sangoma Asterisk through 13.x, 16.x, 17.x and Certified Asterisk 13.21 through 13.21-cert4.

    HighCVSS 8.8No exploitEPSS 50%

    digium · asteriskNov 22, 2019

  • CVE-2019-13720
    80Now

    Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a cra

    HighCVSS 8.8KEVWeaponizedEPSS 49%

    google · chromeNov 25, 2019

  • CVE-2019-5825
    73This week

    Out of bounds write in JavaScript in Google Chrome prior to 73.0.3683.86 allowed a remote attacker to potentially exploit heap corruption vi

    MediumCVSS 6.5KEVWeaponizedEPSS 55%

    google · chromeNov 25, 2019

  • CVE-2011-3596
    33Monitor

    Polipo before 1.0.4.1 suffers from a DoD vulnerability via specially-crafted HTTP POST / PUT request.

    HighCVSS 7.5Proof of conceptEPSS 11%

    polipo project · polipoNov 25, 2019

  • CVE-2011-3600
    35Monitor

    The /webtools/control/xmlrpc endpoint in OFBiz XML-RPC event handler is exposed to External Entity Injection by passing DOCTYPE declarations

    HighCVSS 7.5Proof of conceptEPSS 15%

    apache · ofbizNov 25, 2019

  • CVE-2019-15271
    67This week

    Cisco Small Business RV016, RV042, RV042G, and RV082 Routers Arbitrary Command Execution Vulnerability

    HighCVSS 8.8KEVWeaponizedEPSS 5%

    cisco · rv016 multi-wan vpn firmwareNov 25, 2019

  • CVE-2019-15276
    40Plan

    Cisco Wireless LAN Controller HTTP Parsing Engine Denial of Service Vulnerability

    MediumCVSS 6.5Proof of conceptEPSS 46%

    cisco · wireless lan controller softwareNov 25, 2019

  • CVE-2011-4350
    40Plan

    Yaws 1.91 has a directory traversal vulnerability in the way certain URLs are processed.

    MediumCVSS 6.5WeaponizedEPSS 16%

    yaws · yawsNov 26, 2019

  • CVE-2015-9538
    40Plan

    The NextGEN Gallery plugin before 2.1.15 for WordPress allows ../ Directory Traversal in path selection.

    MediumCVSS 6.5WeaponizedEPSS 10%

    imagely · nextgen galleryNov 26, 2019

  • CVE-2019-19307
    52Plan

    An integer overflow in parse_mqtt in mongoose.c in Cesanta Mongoose 6.16 allows an attacker to achieve remote DoS (infinite loop), or possib

    CriticalCVSS 9.8No exploitEPSS 42%

    cesanta · mongooseNov 26, 2019

  • CVE-2019-12526
    45Plan

    An issue was discovered in Squid before 4.9.

    CriticalCVSS 9.8No exploitEPSS 20%

    squid-cache · squidNov 26, 2019

  • CVE-2019-18679
    42Plan

    An issue was discovered in Squid 2.x, 3.x, and 4.x through 4.8.

    HighCVSS 7.5No exploitEPSS 40%

    squid-cache · squidNov 26, 2019

  • CVE-2019-15298
    43Plan

    A problem was found in Centreon Web through 19.04.3.

    HighCVSS 8.8No exploitEPSS 26%

    centreon · centreon webNov 27, 2019

  • CVE-2017-12945
    40Plan

    Insufficient validation of user-supplied input for the Solstice Pod before 2.8.4 networking configuration enables authenticated attackers to

    HighCVSS 8.8Proof of conceptEPSS 17%

    mersive · solstice firmwareNov 27, 2019

  • CVE-2011-2523
    68This week

    vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

    CriticalCVSS 9.8WeaponizedEPSS 96%

    vsftpd project · vsftpdNov 27, 2019

  • CVE-2019-14901
    44Plan

    A heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver.

    CriticalCVSS 9.8No exploitEPSS 16%

    linux · linux kernelNov 29, 2019

  • CVE-2019-18922
    37Monitor

    A Directory Traversal in the Web interface of the Allied Telesis AT-GS950/8 until Firmware AT-S107 V.1.1.3 [1.00.047] allows unauthenticated

    HighCVSS 7.5Proof of conceptEPSS 23%

    alliedtelesis · at-gs950\/8 firmwareNov 29, 2019