Эксплуатируемые и новые серьёзные CVE: март 2019 г.

A logic issue existed in the handling of Group FaceTime calls.

• Без аутентификации

apple · iphone os5 мар. 2019 г.

A memory corruption issue was addressed with improved validation.

• Локальное повышение привилегий
• Ошибки памяти

apple · iphone os5 мар. 2019 г.

The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to a stack buffer overflow via crafted HTTP POST re

• RCE
• Ошибки памяти

nokia · i-240w-q gpon ont firmware5 мар. 2019 г.

In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum address, which makes it easier for atta

• Ошибки памяти
• Отказ в обслуживании

linux · linux kernel5 мар. 2019 г.

A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially craf

• Открытый редирект

microsoft · excel viewer5 мар. 2019 г.

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin

• RCE без входа
• Ошибки памяти

microsoft · edge5 мар. 2019 г.

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin

• RCE без входа
• Ошибки памяти

microsoft · edge5 мар. 2019 г.

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin

• RCE без входа
• Ошибки памяти

microsoft · edge5 мар. 2019 г.

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa

• RCE

microsoft · sharepoint enterprise server5 мар. 2019 г.

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

• RCE

microsoft · windows 105 мар. 2019 г.

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

• RCE

microsoft · windows 105 мар. 2019 г.

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

• RCE

microsoft · windows 105 мар. 2019 г.

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

• RCE

microsoft · windows 105 мар. 2019 г.

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

• RCE

microsoft · windows 105 мар. 2019 г.

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa

• RCE без входа

microsoft · sharepoint enterprise server5 мар. 2019 г.

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin

• RCE без входа
• Ошибки памяти

microsoft · edge5 мар. 2019 г.

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Cor

• RCE без входа
• Ошибки памяти

microsoft · internet explorer5 мар. 2019 г.

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin

• RCE без входа
• Ошибки памяти

microsoft · edge5 мар. 2019 г.

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin

• RCE без входа
• Ошибки памяти

microsoft · edge5 мар. 2019 г.

A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the source markup

• RCE без входа
• Ошибки памяти

microsoft · .net framework5 мар. 2019 г.

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka

• RCE без входа

microsoft · windows 105 мар. 2019 г.

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

• RCE

microsoft · windows 105 мар. 2019 г.

A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP serve

• RCE без входа
• Ошибки памяти

microsoft · windows 105 мар. 2019 г.

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests,

• RCE

microsoft · windows 105 мар. 2019 г.

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests,

• RCE

microsoft · windows 105 мар. 2019 г.

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin

• RCE без входа
• Ошибки памяти

microsoft · chakracore5 мар. 2019 г.

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin

• RCE без входа
• Ошибки памяти

microsoft · chakracore5 мар. 2019 г.

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin

• RCE без входа
• Ошибки памяти

microsoft · edge5 мар. 2019 г.

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruptio

• RCE без входа
• Ошибки памяти

microsoft · edge5 мар. 2019 г.

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin

• RCE без входа
• Ошибки памяти

microsoft · edge5 мар. 2019 г.

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin

• RCE без входа
• Ошибки памяти

microsoft · edge5 мар. 2019 г.

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin

• RCE без входа
• Ошибки памяти

microsoft · edge5 мар. 2019 г.

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka

• RCE без входа

microsoft · windows 105 мар. 2019 г.

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka

• RCE

microsoft · office5 мар. 2019 г.

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka

• RCE

microsoft · office5 мар. 2019 г.

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka

• RCE

microsoft · office5 мар. 2019 г.

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka

• RCE

microsoft · office5 мар. 2019 г.

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka

• RCE

microsoft · office5 мар. 2019 г.

An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker who successfully expl

• Без аутентификации

microsoft · internet explorer5 мар. 2019 г.

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerabi

• Без аутентификации

microsoft · exchange server5 мар. 2019 г.

A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project, aka 'Visua

• RCE

microsoft · visual studio code5 мар. 2019 г.

phpscheduleit Booked Scheduler 2.7.5 allows arbitrary file upload via the Favicon field, leading to execution of arbitrary Web/custom-favico

• Загрузка файлов

twinkletoessoftware · booked5 мар. 2019 г.

The AirDroid application through 4.2.1.6 for Android allows remote attackers to cause a denial of service (service crash) via many simultane

• Без аутентификации
• Отказ в обслуживании

airdroid · airdroid6 мар. 2019 г.

Webmin 1.900 allows remote attackers to execute arbitrary code by leveraging the "Java file manager" and "Upload and Download" privileges to

• RCE
• Локальное повышение привилегий

webmin · webmin7 мар. 2019 г.

Open Redirect in spring-security-oauth2

• Без аутентификации
• Открытый редирект

pivotal software · spring security oauth7 мар. 2019 г.

Cisco NX-OS Software Netstack Denial of Service Vulnerability

• Без аутентификации
• Отказ в обслуживании

cisco · nx-os7 мар. 2019 г.

In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request.

• RCE без входа
• Десериализация

apache · solr7 мар. 2019 г.

TIBCO JasperReports Library Directory Traversal Vulnerability

• Обход пути

tibco · jasperreports library7 мар. 2019 г.

ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack

• Без аутентификации

esafenet · electronic document security management system8 мар. 2019 г.

Server Side Request Forgery in Apache Solr, versions 1.3 until 7.6 (inclusive).

• Без аутентификации
• SSRF

apache · solr8 мар. 2019 г.

A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.53 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecuri

• RCE

jenkins · script security8 мар. 2019 г.

A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 and earlier in pom.xml, src/main/java/org/jenkinsci/plugins/wo

• RCE

jenkins · pipeline\8 мар. 2019 г.

class.showtime2_image.php in CMS Made Simple (CMSMS) before 2.2.10 does not ensure that a watermark file has a standard image file extension

• Загрузка файлов

cmsmadesimple · cms made simple11 мар. 2019 г.

azure-umqtt-c (available through GitHub prior to 2017 October 6) allows remote attackers to cause a denial of service via unspecified vector

• Без аутентификации
• Отказ в обслуживании

microsoft · azure-umqtt-c12 мар. 2019 г.

FTPGetter Standard v.5.97.0.177 allows remote code execution when a user initiates an FTP connection to an attacker-controlled machine that

• RCE без входа
• Ошибки памяти

ftpgetter · ftpgetter13 мар. 2019 г.

Thinkst Canarytokens through commit hash 4e89ee0 (2019-03-01) relies on limited variation in size, metadata, and timestamp, which makes it e

• Без аутентификации

thinkst · canarytokens14 мар. 2019 г.

WordPress before 5.1.1 does not properly filter comment content, leading to Remote Code Execution by unauthenticated users in a default conf

• RCE без входа
• XSS
• CSRF

wordpress · wordpress14 мар. 2019 г.

Openwsman, versions up to and including 2.6.9, are vulnerable to arbitrary file disclosure because the working directory of openwsmand daemo

• Без аутентификации
• Обход пути

openwsman project · openwsman14 мар. 2019 г.

Openwsman, versions up to and including 2.6.9, are vulnerable to infinite loop in process_connection() when parsing specially crafted HTTP r

• Без аутентификации
• Отказ в обслуживании

openwsman project · openwsman14 мар. 2019 г.

The AirMore application through 1.6.1 for Android allows remote attackers to cause a denial of service (system hang) via many simultaneous /

• Без аутентификации
• Отказ в обслуживании

airmore · airmore15 мар. 2019 г.

The Screen Stream application through 3.0.15 for Android allows remote attackers to cause a denial of service via many simultaneous /start-s

• Без аутентификации
• Отказ в обслуживании

screen stream project · screen stream15 мар. 2019 г.

AudioCodes IP phone 420HD devices using firmware version 2.2.12.126 allow Remote Code Execution.

• RCE
• Нарушение контроля доступа (IDOR)

audiocodes · 420hd ip phone firmware21 мар. 2019 г.

Webmin 1.890 has XSS via /config.cgi?webmin, the /shell/index.cgi history parameter, /shell/index.cgi?stripped=1, or the /webminlog/search.c

• XSS

webmin · webmin21 мар. 2019 г.

OpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerability that allows an unauthenticated user to execute arbitra

• RCE без входа
• Десериализация

openmrs · openmrs21 мар. 2019 г.

The REST API in Wowza Streaming Engine 4.7.4.01 allows traversal of the directory structure and retrieval of a file via a remote, specifical

• Без аутентификации
• Обход пути

wowza · streaming engine21 мар. 2019 г.

subscriber.php in Webgalamb through 7.0 is vulnerable to SQL injection via the Client-IP HTTP request header.

• Без аутентификации
• SQL-инъекция

ens · webgalamb21 мар. 2019 г.

An issue was discovered on Shenzhen Skyworth DT741 Converged Intelligent Terminal (G/EPON+IPTV) SDOTBGN1, DT721-cb SDOTBGN1, and DT741-cb SD

• RCE без входа

skyworthdigital · dt740 firmware21 мар. 2019 г.

An issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below.

• RCE без входа
• Инъекция команд

teracue · enc-400 hdmi firmware21 мар. 2019 г.

An issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below.

• Без аутентификации
• Обход аутентификации
• Зашитые учётные данные

teracue · enc-400 hdmi firmware21 мар. 2019 г.

An issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below.

• Без аутентификации
• Обход аутентификации

teracue · enc-400 hdmi firmware21 мар. 2019 г.

Secure/SAService.rem in Deltek Ajera Timesheets 9.10.16 and prior are vulnerable to remote code execution via deserialization of untrusted u

• RCE
• Десериализация

deltek · ajera21 мар. 2019 г.

www/soap/application/MCSoap/Logs.php in MailCleaner Community Edition 2018.08 allows remote attackers to execute arbitrary OS commands.

• RCE
• Инъекция команд

mailcleaner · mailcleaner21 мар. 2019 г.

Roxy Fileman 1.4.5 allows Directory Traversal in copydir.php, copyfile.php, and fileslist.php.

• Без аутентификации
• Обход пути

roxyfileman · roxy fileman21 мар. 2019 г.

Roxy Fileman 1.4.5 allows unrestricted file upload in upload.php.

• Без аутентификации
• Загрузка файлов

roxyfileman · roxy fileman21 мар. 2019 г.

The Design Chemical Social Network Tabs plugin 1.7.1 for WordPress allows remote attackers to discover Twitter access_token, access_token_se

• Без аутентификации
• Утечка информации

designchemical · social network tabs21 мар. 2019 г.

SQL injection vulnerability in Booking Calendar plugin 8.4.3 for WordPress allows remote attackers to execute arbitrary SQL commands via the

• RCE
• SQL-инъекция

booking calendar project · booking calendar21 мар. 2019 г.

In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to remote code executio

• RCE

artifex · ghostscript21 мар. 2019 г.

Command injection vulnerability in login_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to execute arbitra

• RCE
• Инъекция команд

gl-inet · gl-ar300m-lite firmware21 мар. 2019 г.

download_file in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to download arbitrary files.

• Обход пути

gl-inet · gl-ar300m-lite firmware21 мар. 2019 г.

Directory traversal vulnerability in storage_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to have unspec

• Обход пути

gl-inet · gl-ar300m-lite firmware21 мар. 2019 г.

Command injection vulnerability in firmware_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to execute arbi

• RCE
• Инъекция команд

gl-inet · gl-ar300m-lite firmware21 мар. 2019 г.

An issue was discovered on Shenzhen Coship RT3050 4.0.0.40, RT3052 4.0.0.48, RT7620 10.0.0.49, WM3300 5.0.0.54, and WM3300 5.0.0.55 devices.

• Без аутентификации
• Обход аутентификации

coship · rt3050 firmware21 мар. 2019 г.

An issue was discovered in BlogEngine.NET through 3.3.6.0.

• RCE без входа
• Обход пути

blogengine · blogengine.net21 мар. 2019 г.

AirTies Air5341 1.0.0.12 devices allow cgi-bin/login CSRF.

• Без аутентификации
• CSRF

airties · air 5341 firmware21 мар. 2019 г.

Sricam IP CCTV cameras are vulnerable to denial of service via multiple incomplete HTTP requests because the web server (based on gSOAP 2.8.

• Без аутентификации
• Отказ в обслуживании

sricam · nvs00121 мар. 2019 г.

An authenticated shell command injection issue has been discovered in Raisecom ISCOM HT803G-U, HT803G-W, HT803G-1GE, and HT803G GPON product

• RCE
• Инъекция команд

raisecom · iscom ht803g-u firmware21 мар. 2019 г.

ZyXEL VMG3312-B10B DSL-491HNU-B1B v2 devices allow login/login-page.cgi CSRF.

• Без аутентификации
• CSRF

zyxel · dsl-491hnu-b10b firmware21 мар. 2019 г.

SQLiteManager 1.20 and 1.24 allows SQL injection via the /sqlitemanager/main.php dbsel parameter.

• Без аутентификации
• SQL-инъекция

sqlitemanager · sqlitemanager21 мар. 2019 г.

Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control.

• Без аутентификации

sonatype · nexus repository manager21 мар. 2019 г.

A vulnerability was found in PowerDNS Authoritative Server before 4.0.7 and before 4.1.7.

powerdns · authoritative server21 мар. 2019 г.

An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674.

• Без аутентификации
• Обход пути

coreftp · core ftp22 мар. 2019 г.

An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674.

• Без аутентификации
• Обход пути

coreftp · core ftp22 мар. 2019 г.

urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechani

• Без аутентификации
• Обход пути

python · python23 мар. 2019 г.

The downloadZip function in application/controllers/admin/export.php in LimeSurvey through 3.16.1+190225 allows a relative path.

• Без аутентификации
• Обход пути

limesurvey · limesurvey23 мар. 2019 г.

The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swp_debug=load_options swp_url parameter

• Без аутентификации
• XSS

warfareplugins · social warfare24 мар. 2019 г.

It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute

• RCE без входа
• Обход пути

libreoffice · libreoffice25 мар. 2019 г.

A flaw was found in moodle versions 3.6 to 3.6.1, 3.5 to 3.5.3, 3.4 to 3.4.6, 3.1 to 3.1.15 and earlier unsupported versions.

• Без аутентификации
• XSS

moodle · moodle25 мар. 2019 г.

The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from version 6.7.0 before 6.1

• RCE без входа
• Обход пути
• SSTI

atlassian · confluence server25 мар. 2019 г.

Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer.

• RCE без входа

elastic · kibana25 мар. 2019 г.

An issue was discovered in CMS Made Simple 2.2.8.

• Без аутентификации
• SQL-инъекция

cmsmadesimple · cms made simple26 мар. 2019 г.