Перейти к содержимому
Noroxi

По дате публикации

Эксплуатируемые и новые серьёзные CVE: ноябрь 2019 г.

61 записей · 9 KEV. В порядке публикации.

В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.

Границы месяца считаются по UTC, как и дата публикации на странице записи.

  • CVE-2011-3923
    66На этой неделе

    Apache Struts before 2.3.1.2 allows remote attackers to bypass security protections in the ParameterInterceptor class and execute arbitrary

    КритическаяCVSS 9,8Готовый эксплойтEPSS 89 %

    apache · struts1 нояб. 2019 г.

  • CVE-2013-2227
    34Наблюдать

    GLPI 0.83.7 has Local File Inclusion in common.tabs.php.

    ВысокаяCVSS 7,5Proof of conceptEPSS 12 %

    glpi-project · glpi1 нояб. 2019 г.

  • CVE-2019-18665
    34Наблюдать

    The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion.

    ВысокаяCVSS 7,5Proof of conceptEPSS 14 %

    secudos · domos2 нояб. 2019 г.

  • CVE-2013-2261
    33Наблюдать

    Cryptocat before 2.0.22 Chrome Extension 'img/keygen.gif' has Information Disclosure

    ВысокаяCVSS 7,5Proof of conceptEPSS 11 %

    cryptocat project · cryptocat4 нояб. 2019 г.

  • CVE-2014-9013
    49В плане

    The ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplace plugin 2.4.0 for WordPress allows remote authenticated users to c

    ВысокаяCVSS 8,8Proof of conceptEPSS 46 %

    wpmarketplace project · wpmarketplace6 нояб. 2019 г.

  • CVE-2014-9014
    20Наблюдать

    Directory traversal vulnerability in the ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplace plugin before 2.4.1 for Word

    СредняяCVSS 4,3Proof of conceptEPSS 11 %

    wpmarketplace project · wpmarketplace6 нояб. 2019 г.

  • CVE-2019-12419
    43В плане

    Apache CXF before 3.3.4 and 3.2.11 provides all of the components that are required to build a fully fledged OpenId Connect service.

    КритическаяCVSS 9,8Эксплойта нетEPSS 13 %

    apache · cxf6 нояб. 2019 г.

  • CVE-2019-18818
    68На этой неделе

    strapi before 3.0.0-beta.17.5 mishandles password resets within packages/strapi-admin/controllers/Auth.js and packages/strapi-plugin-users-p

    КритическаяCVSS 9,8Готовый эксплойтEPSS 97 %

    strapi · strapi7 нояб. 2019 г.

  • CVE-2019-18655
    43В плане

    File Sharing Wizard version 1.5.0 build 2008 is affected by a Structured Exception Handler based buffer overflow vulnerability.

    КритическаяCVSS 9,8Proof of conceptEPSS 14 %

    upredsun · file sharing wizard12 нояб. 2019 г.

  • CVE-2019-0719
    39Наблюдать

    A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an a

    КритическаяCVSS 9,1Эксплойта нетEPSS 11 %

    microsoft · windows 1012 нояб. 2019 г.

  • CVE-2019-0721
    40В плане

    A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an a

    КритическаяCVSS 9,1Эксплойта нетEPSS 12 %

    microsoft · windows 1012 нояб. 2019 г.

  • CVE-2019-1234
    53В плане

    A spoofing vulnerability exists when Azure Stack fails to validate certain requests, aka 'Azure Stack Spoofing Vulnerability'.

    ВысокаяCVSS 7,5Эксплойта нетEPSS 75 %

    microsoft · azure stack12 нояб. 2019 г.

  • CVE-2019-1373
    46В плане

    A remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via PowerShell, aka 'Microsoft Ex

    КритическаяCVSS 9,8Эксплойта нетEPSS 21 %

    microsoft · exchange server12 нояб. 2019 г.

  • CVE-2019-1385
    62На этой неделе

    An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulti

    ВысокаяCVSS 7,8KEVГотовый эксплойтEPSS 3 %

    microsoft · windows 10 170912 нояб. 2019 г.

  • CVE-2019-1388
    64На этой неделе

    An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'Win

    ВысокаяCVSS 7,8KEVГотовый эксплойтEPSS 8 %

    microsoft · windows 10 150712 нояб. 2019 г.

  • CVE-2019-1405
    70На этой неделе

    An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation

    ВысокаяCVSS 7,8KEVГотовый эксплойтEPSS 30 %

    microsoft · windows 10 150712 нояб. 2019 г.

  • CVE-2019-1406
    35Наблюдать

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    ВысокаяCVSS 7,8Эксплойта нетEPSS 13 %

    microsoft · windows 1012 нояб. 2019 г.

  • CVE-2019-1419
    38Наблюдать

    A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially c

    ВысокаяCVSS 8,8Эксплойта нетEPSS 11 %

    microsoft · windows 1012 нояб. 2019 г.

  • CVE-2019-1429
    83Срочно

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scrip

    ВысокаяCVSS 7,5KEVГотовый эксплойтEPSS 77 %

    microsoft · internet explorer12 нояб. 2019 г.

  • CVE-2019-1430
    35Наблюдать

    A remote code execution vulnerability exists when Windows Media Foundation improperly parses specially crafted QuickTime media files.An atta

    ВысокаяCVSS 7,8Эксплойта нетEPSS 13 %

    microsoft · windows 1012 нояб. 2019 г.

  • CVE-2019-1439
    49В плане

    An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows

    СредняяCVSS 6,5Эксплойта нетEPSS 75 %

    microsoft · windows 1012 нояб. 2019 г.

  • CVE-2019-1441
    39Наблюдать

    A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Win32k

    ВысокаяCVSS 8,8Эксплойта нетEPSS 12 %

    microsoft · windows 712 нояб. 2019 г.

  • CVE-2019-1448
    40В плане

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka '

    ВысокаяCVSS 7,8Эксплойта нетEPSS 29 %

    microsoft · excel12 нояб. 2019 г.

  • CVE-2019-18240
    43В плане

    In Fuji Electric V-Server 4.0.6 and prior, several heap-based buffer overflows have been identified, which may allow an attacker to remotely

    КритическаяCVSS 9,8Эксплойта нетEPSS 14 %

    fujielectric · v-server13 нояб. 2019 г.

  • CVE-2019-18951
    36Наблюдать

    SibSoft Xfilesharing through 2.5.1 allows op=page&tmpl=../ directory traversal to read arbitrary files.

    ВысокаяCVSS 7,5Proof of conceptEPSS 19 %

    sibsoft · xfilesharing13 нояб. 2019 г.

  • CVE-2019-18952
    53В плане

    SibSoft Xfilesharing through 2.5.1 allows cgi-bin/up.cgi arbitrary file upload.

    КритическаяCVSS 9,8Proof of conceptEPSS 45 %

    sibsoft · xfilesharing13 нояб. 2019 г.

  • CVE-2019-5029
    56В плане

    An exploitable command injection vulnerability exists in the Config editor of the Exhibitor Web UI versions 1.0.9 to 1.7.1.

    КритическаяCVSS 9,8Proof of conceptEPSS 57 %

    exhibitor project · exhibitor13 нояб. 2019 г.

  • CVE-2011-1930
    45В плане

    In klibc 1.5.20 and 1.5.21, the DHCP options written by ipconfig to /tmp/net-$DEVICE.conf are not properly escaped.

    КритическаяCVSS 9,8Proof of conceptEPSS 20 %

    klibc project · klibc13 нояб. 2019 г.

  • CVE-2019-18937
    49В плане

    eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the Script Parser AddOn through 1.8 installed allow Remote Code Execution by unauthenticat

    КритическаяCVSS 9,8Эксплойта нетEPSS 33 %

    eq-3 · homematic ccu214 нояб. 2019 г.

  • CVE-2019-18938
    49В плане

    eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the E-Mail AddOn through 1.6.8.c installed allow Remote Code Execution by unauthenticated

    КритическаяCVSS 9,8Эксплойта нетEPSS 33 %

    eq-3 · homematic ccu214 нояб. 2019 г.

  • CVE-2019-18939
    51В плане

    eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the HM-Print AddOn through 1.2a installed allow Remote Code Execution by unauthenticated a

    КритическаяCVSS 9,8Эксплойта нетEPSS 40 %

    eq-3 · homematic ccu214 нояб. 2019 г.

  • CVE-2019-19012
    42В плане

    An integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9.4_rc2 leads to an out-of-bounds read, in which

    КритическаяCVSS 9,8Proof of conceptEPSS 10 %

    oniguruma project · oniguruma17 нояб. 2019 г.

  • CVE-2019-10172
    35Наблюдать

    A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries.

    ВысокаяCVSS 7,5Proof of conceptEPSS 17 %

    fasterxml · jackson-mapper-asl18 нояб. 2019 г.

  • CVE-2019-12409
    45В плане

    The 8.1.1 and 8.2.0 releases of Apache Solr contain an insecure setting for the ENABLE_REMOTE_JMX_OPTS configuration option in the default s

    КритическаяCVSS 9,8Proof of conceptEPSS 21 %

    apache · solr18 нояб. 2019 г.

  • CVE-2011-2921
    64На этой неделе

    ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can res

    КритическаяCVSS 9,8Готовый эксплойтEPSS 83 %

    ktsuss project · ktsuss19 нояб. 2019 г.

  • CVE-2019-16340
    45В плане

    Belkin Linksys Velop 1.1.8.192419 devices allows remote attackers to discover the recovery key via a direct request for the /sysinfo_json.cg

    КритическаяCVSS 9,8Эксплойта нетEPSS 19 %

    linksys · velop whw0303 firmware21 нояб. 2019 г.

  • CVE-2018-8879
    44В плане

    Stack-based buffer overflow in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devi

    КритическаяCVSS 9,8Эксплойта нетEPSS 17 %

    asus · rt-ac66u firmware21 нояб. 2019 г.

  • CVE-2019-6693
    58В плане

    Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup file may allow an attacker with access to the

    СредняяCVSS 6,5KEVГотовый эксплойтEPSS 6 %

    fortinet · fortios21 нояб. 2019 г.

  • CVE-2019-16405
    36Наблюдать

    Centreon Web before 2.8.30, 18.10.x before 18.10.8, 19.04.x before 19.04.5 and 19.10.x before 19.10.2 allows Remote Code Execution by an adm

    ВысокаяCVSS 7,2Proof of conceptEPSS 27 %

    centreon · centreon web21 нояб. 2019 г.

  • CVE-2019-16758
    35Наблюдать

    In Lexmark Services Monitor 2.27.4.0.39 (running on TCP port 2070), a remote attacker can use a directory traversal technique using /../../.

    ВысокаяCVSS 7,5Proof of conceptEPSS 16 %

    lexmark · services monitor firmware21 нояб. 2019 г.

  • CVE-2019-19006
    86Срочно

    Sangoma FreePBX 115.0.16.26 and below, 14.0.13.11 and below, 13.0.197.13 and below have Incorrect Access Control.

    КритическаяCVSS 9,8KEVГотовый эксплойтEPSS 55 %

    sangoma · freepbx21 нояб. 2019 г.

  • CVE-2019-19207
    42В плане

    rConfig 3.9.2 allows devices.php?searchColumn= SQL injection.

    ВысокаяCVSS 8,8Эксплойта нетEPSS 22 %

    rconfig · rconfig21 нояб. 2019 г.

  • CVE-2019-18889
    49В плане

    An issue was discovered in Symfony 3.4.0 through 3.4.34, 4.2.0 through 4.2.11, and 4.3.0 through 4.3.7.

    КритическаяCVSS 9,8Эксплойта нетEPSS 33 %

    sensiolabs · symfony21 нояб. 2019 г.

  • CVE-2019-18976
    34Наблюдать

    An issue was discovered in res_pjsip_t38.c in Sangoma Asterisk through 13.x and Certified Asterisk through 13.21-x.

    ВысокаяCVSS 7,5Эксплойта нетEPSS 12 %

    digium · asterisk22 нояб. 2019 г.

  • CVE-2019-18610
    50В плане

    An issue was discovered in manager.c in Sangoma Asterisk through 13.x, 16.x, 17.x and Certified Asterisk 13.21 through 13.21-cert4.

    ВысокаяCVSS 8,8Эксплойта нетEPSS 50 %

    digium · asterisk22 нояб. 2019 г.

  • CVE-2019-13720
    80Срочно

    Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a cra

    ВысокаяCVSS 8,8KEVГотовый эксплойтEPSS 49 %

    google · chrome25 нояб. 2019 г.

  • CVE-2019-5825
    73На этой неделе

    Out of bounds write in JavaScript in Google Chrome prior to 73.0.3683.86 allowed a remote attacker to potentially exploit heap corruption vi

    СредняяCVSS 6,5KEVГотовый эксплойтEPSS 55 %

    google · chrome25 нояб. 2019 г.

  • CVE-2011-3596
    33Наблюдать

    Polipo before 1.0.4.1 suffers from a DoD vulnerability via specially-crafted HTTP POST / PUT request.

    ВысокаяCVSS 7,5Proof of conceptEPSS 11 %

    polipo project · polipo25 нояб. 2019 г.

  • CVE-2011-3600
    35Наблюдать

    The /webtools/control/xmlrpc endpoint in OFBiz XML-RPC event handler is exposed to External Entity Injection by passing DOCTYPE declarations

    ВысокаяCVSS 7,5Proof of conceptEPSS 15 %

    apache · ofbiz25 нояб. 2019 г.

  • CVE-2019-15271
    67На этой неделе

    Cisco Small Business RV016, RV042, RV042G, and RV082 Routers Arbitrary Command Execution Vulnerability

    ВысокаяCVSS 8,8KEVГотовый эксплойтEPSS 5 %

    cisco · rv016 multi-wan vpn firmware25 нояб. 2019 г.

  • CVE-2019-15276
    40В плане

    Cisco Wireless LAN Controller HTTP Parsing Engine Denial of Service Vulnerability

    СредняяCVSS 6,5Proof of conceptEPSS 46 %

    cisco · wireless lan controller software25 нояб. 2019 г.

  • CVE-2011-4350
    40В плане

    Yaws 1.91 has a directory traversal vulnerability in the way certain URLs are processed.

    СредняяCVSS 6,5Готовый эксплойтEPSS 16 %

    yaws · yaws26 нояб. 2019 г.

  • CVE-2015-9538
    40В плане

    The NextGEN Gallery plugin before 2.1.15 for WordPress allows ../ Directory Traversal in path selection.

    СредняяCVSS 6,5Готовый эксплойтEPSS 10 %

    imagely · nextgen gallery26 нояб. 2019 г.

  • CVE-2019-19307
    52В плане

    An integer overflow in parse_mqtt in mongoose.c in Cesanta Mongoose 6.16 allows an attacker to achieve remote DoS (infinite loop), or possib

    КритическаяCVSS 9,8Эксплойта нетEPSS 42 %

    cesanta · mongoose26 нояб. 2019 г.

  • CVE-2019-12526
    45В плане

    An issue was discovered in Squid before 4.9.

    КритическаяCVSS 9,8Эксплойта нетEPSS 20 %

    squid-cache · squid26 нояб. 2019 г.

  • CVE-2019-18679
    42В плане

    An issue was discovered in Squid 2.x, 3.x, and 4.x through 4.8.

    ВысокаяCVSS 7,5Эксплойта нетEPSS 40 %

    squid-cache · squid26 нояб. 2019 г.

  • CVE-2019-15298
    43В плане

    A problem was found in Centreon Web through 19.04.3.

    ВысокаяCVSS 8,8Эксплойта нетEPSS 26 %

    centreon · centreon web27 нояб. 2019 г.

  • CVE-2017-12945
    40В плане

    Insufficient validation of user-supplied input for the Solstice Pod before 2.8.4 networking configuration enables authenticated attackers to

    ВысокаяCVSS 8,8Proof of conceptEPSS 17 %

    mersive · solstice firmware27 нояб. 2019 г.

  • CVE-2011-2523
    68На этой неделе

    vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

    КритическаяCVSS 9,8Готовый эксплойтEPSS 96 %

    vsftpd project · vsftpd27 нояб. 2019 г.

  • CVE-2019-14901
    44В плане

    A heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver.

    КритическаяCVSS 9,8Эксплойта нетEPSS 16 %

    linux · linux kernel29 нояб. 2019 г.

  • CVE-2019-18922
    37Наблюдать

    A Directory Traversal in the Web interface of the Allied Telesis AT-GS950/8 until Firmware AT-S107 V.1.1.3 [1.00.047] allows unauthenticated

    ВысокаяCVSS 7,5Proof of conceptEPSS 23 %

    alliedtelesis · at-gs950\/8 firmware29 нояб. 2019 г.