İçeriğe atla
Noroxi

Yayın tarihine göre

Mart 2019: sömürülen ve yeni ciddi CVE kayıtları

120 kayıt · 12 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 2

  • CVE-2019-6223
    61Bu hafta

    A logic issue existed in the handling of Group FaceTime calls.

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %2

    apple · iphone os5 Mar 2019

  • CVE-2019-6225
    40Planlayın

    A memory corruption issue was addressed with improved validation.

    YüksekCVSS 7,8Kavram kanıtıEPSS %28

    apple · iphone os5 Mar 2019

  • CVE-2019-3921
    40Planlayın

    The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to a stack buffer overflow via crafted HTTP POST re

    YüksekCVSS 8,8Kavram kanıtıEPSS %17

    nokia · i-240w-q gpon ont firmware5 Mar 2019

  • CVE-2019-9213
    40Planlayın

    In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum address, which makes it easier for atta

    OrtaCVSS 5,5SilahlaştırılmışEPSS %5

    linux · linux kernel5 Mar 2019

  • CVE-2019-0540
    26İzleyin

    A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially craf

    OrtaCVSS 5,5İstismar yokEPSS %12

    microsoft · excel viewer5 Mar 2019

  • CVE-2019-0590
    33İzleyin

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin

    YüksekCVSS 7,5İstismar yokEPSS %11

    microsoft · edge5 Mar 2019

  • CVE-2019-0591
    33İzleyin

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin

    YüksekCVSS 7,5İstismar yokEPSS %11

    microsoft · edge5 Mar 2019

  • CVE-2019-0593
    36İzleyin

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin

    YüksekCVSS 7,5İstismar yokEPSS %19

    microsoft · edge5 Mar 2019

  • CVE-2019-0594
    39İzleyin

    A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa

    YüksekCVSS 8,8İstismar yokEPSS %12

    microsoft · sharepoint enterprise server5 Mar 2019

  • CVE-2019-0595
    37İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %19

    microsoft · windows 105 Mar 2019

  • CVE-2019-0596
    36İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %16

    microsoft · windows 105 Mar 2019

  • CVE-2019-0597
    36İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %16

    microsoft · windows 105 Mar 2019

  • CVE-2019-0598
    37İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %20

    microsoft · windows 105 Mar 2019

  • CVE-2019-0599
    37İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %20

    microsoft · windows 105 Mar 2019

  • CVE-2019-0604
    99Hemen

    A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    microsoft · sharepoint enterprise server5 Mar 2019

  • CVE-2019-0605
    34İzleyin

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin

    YüksekCVSS 7,5İstismar yokEPSS %12

    microsoft · edge5 Mar 2019

  • CVE-2019-0606
    33İzleyin

    A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Cor

    YüksekCVSS 7,5İstismar yokEPSS %11

    microsoft · internet explorer5 Mar 2019

  • CVE-2019-0607
    33İzleyin

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin

    YüksekCVSS 7,5İstismar yokEPSS %11

    microsoft · edge5 Mar 2019

  • CVE-2019-0610
    33İzleyin

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin

    YüksekCVSS 7,5İstismar yokEPSS %11

    microsoft · edge5 Mar 2019

  • CVE-2019-0613
    40Planlayın

    A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the source markup

    YüksekCVSS 8,8İstismar yokEPSS %15

    microsoft · .net framework5 Mar 2019

  • CVE-2019-0618
    55Planlayın

    A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka

    YüksekCVSS 8,8İstismar yokEPSS %67

    microsoft · windows 105 Mar 2019

  • CVE-2019-0625
    36İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %16

    microsoft · windows 105 Mar 2019

  • CVE-2019-0626
    60Bu hafta

    A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP serve

    KritikCVSS 9,8İstismar yokEPSS %68

    microsoft · windows 105 Mar 2019

  • CVE-2019-0630
    40Planlayın

    A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests,

    YüksekCVSS 8,8İstismar yokEPSS %17

    microsoft · windows 105 Mar 2019

  • CVE-2019-0633
    39İzleyin

    A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests,

    YüksekCVSS 8,8İstismar yokEPSS %13

    microsoft · windows 105 Mar 2019

  • CVE-2019-0640
    33İzleyin

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin

    YüksekCVSS 7,5İstismar yokEPSS %11

    microsoft · chakracore5 Mar 2019

  • CVE-2019-0642
    33İzleyin

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin

    YüksekCVSS 7,5İstismar yokEPSS %11

    microsoft · chakracore5 Mar 2019

  • CVE-2019-0644
    33İzleyin

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin

    YüksekCVSS 7,5İstismar yokEPSS %11

    microsoft · edge5 Mar 2019

  • CVE-2019-0650
    36İzleyin

    A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruptio

    YüksekCVSS 7,5İstismar yokEPSS %19

    microsoft · edge5 Mar 2019

  • CVE-2019-0651
    33İzleyin

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin

    YüksekCVSS 7,5İstismar yokEPSS %11

    microsoft · edge5 Mar 2019

  • CVE-2019-0652
    33İzleyin

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin

    YüksekCVSS 7,5İstismar yokEPSS %11

    microsoft · edge5 Mar 2019

  • CVE-2019-0655
    34İzleyin

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin

    YüksekCVSS 7,5İstismar yokEPSS %12

    microsoft · edge5 Mar 2019

  • CVE-2019-0662
    40Planlayın

    A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka

    YüksekCVSS 8,8İstismar yokEPSS %15

    microsoft · windows 105 Mar 2019

  • CVE-2019-0671
    35İzleyin

    A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka

    YüksekCVSS 7,8İstismar yokEPSS %14

    microsoft · office5 Mar 2019

  • CVE-2019-0672
    35İzleyin

    A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka

    YüksekCVSS 7,8İstismar yokEPSS %14

    microsoft · office5 Mar 2019

  • CVE-2019-0673
    35İzleyin

    A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka

    YüksekCVSS 7,8İstismar yokEPSS %14

    microsoft · office5 Mar 2019

  • CVE-2019-0674
    37İzleyin

    A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka

    YüksekCVSS 7,8İstismar yokEPSS %18

    microsoft · office5 Mar 2019

  • CVE-2019-0675
    35İzleyin

    A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka

    YüksekCVSS 7,8İstismar yokEPSS %14

    microsoft · office5 Mar 2019

  • CVE-2019-0676
    60Bu hafta

    An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker who successfully expl

    OrtaCVSS 6,5KEVSilahlaştırılmışEPSS %8

    microsoft · internet explorer5 Mar 2019

  • CVE-2019-0724
    60Bu hafta

    An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerabi

    YüksekCVSS 8,1SilahlaştırılmışEPSS %23

    microsoft · exchange server5 Mar 2019

  • CVE-2019-0728
    39İzleyin

    A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project, aka 'Visua

    YüksekCVSS 7,8İstismar yokEPSS %27

    microsoft · visual studio code5 Mar 2019

  • CVE-2019-9581
    39İzleyin

    phpscheduleit Booked Scheduler 2.7.5 allows arbitrary file upload via the Favicon field, leading to execution of arbitrary Web/custom-favico

    YüksekCVSS 8,8Kavram kanıtıEPSS %13

    twinkletoessoftware · booked5 Mar 2019

  • CVE-2019-9599
    34İzleyin

    The AirDroid application through 4.2.1.6 for Android allows remote attackers to cause a denial of service (service crash) via many simultane

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    airdroid · airdroid6 Mar 2019

  • CVE-2019-9624
    40Planlayın

    Webmin 1.900 allows remote attackers to execute arbitrary code by leveraging the "Java file manager" and "Upload and Download" privileges to

    YüksekCVSS 7,8SilahlaştırılmışEPSS %23

    webmin · webmin7 Mar 2019

  • CVE-2019-3778
    31İzleyin

    Open Redirect in spring-security-oauth2

    OrtaCVSS 6,5Kavram kanıtıEPSS %16

    pivotal software · spring security oauth7 Mar 2019

  • CVE-2019-1599
    38İzleyin

    Cisco NX-OS Software Netstack Denial of Service Vulnerability

    YüksekCVSS 8,6İstismar yokEPSS %14

    cisco · nx-os7 Mar 2019

  • CVE-2019-0192
    62Bu hafta

    In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request.

    KritikCVSS 9,8Kavram kanıtıEPSS %78

    apache · solr7 Mar 2019

  • CVE-2018-18809
    80Hemen

    TIBCO JasperReports Library Directory Traversal Vulnerability

    OrtaCVSS 6,5KEVSilahlaştırılmışEPSS %79

    tibco · jasperreports library7 Mar 2019

  • CVE-2019-9632
    42Planlayın

    ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack

    YüksekCVSS 7,5Kavram kanıtıEPSS %39

    esafenet · electronic document security management system8 Mar 2019

  • CVE-2017-3164
    36İzleyin

    Server Side Request Forgery in Apache Solr, versions 1.3 until 7.6 (inclusive).

    YüksekCVSS 7,5Kavram kanıtıEPSS %19

    apache · solr8 Mar 2019

  • CVE-2019-1003029
    91Hemen

    A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.53 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecuri

    KritikCVSS 9,9KEVSilahlaştırılmışEPSS %74

    jenkins · script security8 Mar 2019

  • CVE-2019-1003030
    98Hemen

    A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 and earlier in pom.xml, src/main/java/org/jenkinsci/plugins/wo

    KritikCVSS 9,9KEVSilahlaştırılmışEPSS %97

    jenkins · pipeline\8 Mar 2019

  • CVE-2019-9692
    40Planlayın

    class.showtime2_image.php in CMS Made Simple (CMSMS) before 2.2.10 does not ensure that a watermark file has a standard image file extension

    OrtaCVSS 6,5SilahlaştırılmışEPSS %45

    cmsmadesimple · cms made simple11 Mar 2019

  • CVE-2019-5917
    36İzleyin

    azure-umqtt-c (available through GitHub prior to 2017 October 6) allows remote attackers to cause a denial of service via unspecified vector

    YüksekCVSS 7,5İstismar yokEPSS %21

    microsoft · azure-umqtt-c12 Mar 2019

  • CVE-2019-9760
    60Bu hafta

    FTPGetter Standard v.5.97.0.177 allows remote code execution when a user initiates an FTP connection to an attacker-controlled machine that

    KritikCVSS 9,8SilahlaştırılmışEPSS %53

    ftpgetter · ftpgetter13 Mar 2019

  • CVE-2019-9768
    34İzleyin

    Thinkst Canarytokens through commit hash 4e89ee0 (2019-03-01) relies on limited variation in size, metadata, and timestamp, which makes it e

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    thinkst · canarytokens14 Mar 2019

  • CVE-2019-9787
    47Planlayın

    WordPress before 5.1.1 does not properly filter comment content, leading to Remote Code Execution by unauthenticated users in a default conf

    YüksekCVSS 8,8Kavram kanıtıEPSS %38

    wordpress · wordpress14 Mar 2019

  • CVE-2019-3816
    34İzleyin

    Openwsman, versions up to and including 2.6.9, are vulnerable to arbitrary file disclosure because the working directory of openwsmand daemo

    YüksekCVSS 7,5İstismar yokEPSS %14

    openwsman project · openwsman14 Mar 2019

  • CVE-2019-3833
    35İzleyin

    Openwsman, versions up to and including 2.6.9, are vulnerable to infinite loop in process_connection() when parsing specially crafted HTTP r

    YüksekCVSS 7,5İstismar yokEPSS %15

    openwsman project · openwsman14 Mar 2019

  • CVE-2019-9831
    33İzleyin

    The AirMore application through 1.6.1 for Android allows remote attackers to cause a denial of service (system hang) via many simultaneous /

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    airmore · airmore15 Mar 2019

  • CVE-2019-9833
    33İzleyin

    The Screen Stream application through 3.0.15 for Android allows remote attackers to cause a denial of service via many simultaneous /start-s

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    screen stream project · screen stream15 Mar 2019

  • CVE-2018-10093
    55Planlayın

    AudioCodes IP phone 420HD devices using firmware version 2.2.12.126 allow Remote Code Execution.

    YüksekCVSS 8,8Kavram kanıtıEPSS %68

    audiocodes · 420hd ip phone firmware21 Mar 2019

  • CVE-2018-19191
    33İzleyin

    Webmin 1.890 has XSS via /config.cgi?webmin, the /shell/index.cgi history parameter, /shell/index.cgi?stripped=1, or the /webminlog/search.c

    OrtaCVSS 5,4İstismar yokEPSS %39

    webmin · webmin21 Mar 2019

  • CVE-2018-19276
    69Bu hafta

    OpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerability that allows an unauthenticated user to execute arbitra

    KritikCVSS 9,8SilahlaştırılmışEPSS %98

    openmrs · openmrs21 Mar 2019

  • CVE-2018-19365
    43Planlayın

    The REST API in Wowza Streaming Engine 4.7.4.01 allows traversal of the directory structure and retrieval of a file via a remote, specifical

    KritikCVSS 9,1Kavram kanıtıEPSS %22

    wowza · streaming engine21 Mar 2019

  • CVE-2018-19510
    45Planlayın

    subscriber.php in Webgalamb through 7.0 is vulnerable to SQL injection via the Client-IP HTTP request header.

    KritikCVSS 9,8İstismar yokEPSS %19

    ens · webgalamb21 Mar 2019

  • CVE-2018-19524
    54Planlayın

    An issue was discovered on Shenzhen Skyworth DT741 Converged Intelligent Terminal (G/EPON+IPTV) SDOTBGN1, DT721-cb SDOTBGN1, and DT741-cb SD

    KritikCVSS 9,8Kavram kanıtıEPSS %50

    skyworthdigital · dt740 firmware21 Mar 2019

  • CVE-2018-20218
    42Planlayın

    An issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below.

    KritikCVSS 9,8Kavram kanıtıEPSS %10

    teracue · enc-400 hdmi firmware21 Mar 2019

  • CVE-2018-20219
    36İzleyin

    An issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below.

    YüksekCVSS 8,1Kavram kanıtıEPSS %14

    teracue · enc-400 hdmi firmware21 Mar 2019

  • CVE-2018-20220
    35İzleyin

    An issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below.

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    teracue · enc-400 hdmi firmware21 Mar 2019

  • CVE-2018-20221
    38İzleyin

    Secure/SAService.rem in Deltek Ajera Timesheets 9.10.16 and prior are vulnerable to remote code execution via deserialization of untrusted u

    YüksekCVSS 8,8Kavram kanıtıEPSS %10

    deltek · ajera21 Mar 2019

  • CVE-2018-20323
    51Planlayın

    www/soap/application/MCSoap/Logs.php in MailCleaner Community Edition 2018.08 allows remote attackers to execute arbitrary OS commands.

    YüksekCVSS 8,8SilahlaştırılmışEPSS %54

    mailcleaner · mailcleaner21 Mar 2019

  • CVE-2018-20525
    42Planlayın

    Roxy Fileman 1.4.5 allows Directory Traversal in copydir.php, copyfile.php, and fileslist.php.

    KritikCVSS 9,1Kavram kanıtıEPSS %21

    roxyfileman · roxy fileman21 Mar 2019

  • CVE-2018-20526
    61Bu hafta

    Roxy Fileman 1.4.5 allows unrestricted file upload in upload.php.

    KritikCVSS 9,8Kavram kanıtıEPSS %73

    roxyfileman · roxy fileman21 Mar 2019

  • CVE-2018-20555
    42Planlayın

    The Design Chemical Social Network Tabs plugin 1.7.1 for WordPress allows remote attackers to discover Twitter access_token, access_token_se

    KritikCVSS 9,8Kavram kanıtıEPSS %10

    designchemical · social network tabs21 Mar 2019

  • CVE-2018-20556
    41Planlayın

    SQL injection vulnerability in Booking Calendar plugin 8.4.3 for WordPress allows remote attackers to execute arbitrary SQL commands via the

    YüksekCVSS 8,8Kavram kanıtıEPSS %18

    booking calendar project · booking calendar21 Mar 2019

  • CVE-2019-6116
    43Planlayın

    In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to remote code executio

    YüksekCVSS 7,8Kavram kanıtıEPSS %41

    artifex · ghostscript21 Mar 2019

  • CVE-2019-6272
    39İzleyin

    Command injection vulnerability in login_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to execute arbitra

    YüksekCVSS 8,8Kavram kanıtıEPSS %12

    gl-inet · gl-ar300m-lite firmware21 Mar 2019

  • CVE-2019-6273
    29İzleyin

    download_file in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to download arbitrary files.

    OrtaCVSS 6,5Kavram kanıtıEPSS %11

    gl-inet · gl-ar300m-lite firmware21 Mar 2019

  • CVE-2019-6274
    38İzleyin

    Directory traversal vulnerability in storage_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to have unspec

    YüksekCVSS 8,8Kavram kanıtıEPSS %11

    gl-inet · gl-ar300m-lite firmware21 Mar 2019

  • CVE-2019-6275
    39İzleyin

    Command injection vulnerability in firmware_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to execute arbi

    YüksekCVSS 8,8Kavram kanıtıEPSS %12

    gl-inet · gl-ar300m-lite firmware21 Mar 2019

  • CVE-2019-6441
    55Planlayın

    An issue was discovered on Shenzhen Coship RT3050 4.0.0.40, RT3052 4.0.0.48, RT7620 10.0.0.49, WM3300 5.0.0.54, and WM3300 5.0.0.55 devices.

    KritikCVSS 9,8Kavram kanıtıEPSS %53

    coship · rt3050 firmware21 Mar 2019

  • CVE-2019-6714
    49Planlayın

    An issue was discovered in BlogEngine.NET through 3.3.6.0.

    KritikCVSS 9,8Kavram kanıtıEPSS %31

    blogengine · blogengine.net21 Mar 2019

  • CVE-2019-6967
    39İzleyin

    AirTies Air5341 1.0.0.12 devices allow cgi-bin/login CSRF.

    YüksekCVSS 8,8Kavram kanıtıEPSS %13

    airties · air 5341 firmware21 Mar 2019

  • CVE-2019-6973
    34İzleyin

    Sricam IP CCTV cameras are vulnerable to denial of service via multiple incomplete HTTP requests because the web server (based on gSOAP 2.8.

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    sricam · nvs00121 Mar 2019

  • CVE-2019-7385
    35İzleyin

    An authenticated shell command injection issue has been discovered in Raisecom ISCOM HT803G-U, HT803G-W, HT803G-1GE, and HT803G GPON product

    YüksekCVSS 7,8Kavram kanıtıEPSS %12

    raisecom · iscom ht803g-u firmware21 Mar 2019

  • CVE-2019-7391
    39İzleyin

    ZyXEL VMG3312-B10B DSL-491HNU-B1B v2 devices allow login/login-page.cgi CSRF.

    YüksekCVSS 8,8Kavram kanıtıEPSS %13

    zyxel · dsl-491hnu-b10b firmware21 Mar 2019

  • CVE-2019-9083
    44Planlayın

    SQLiteManager 1.20 and 1.24 allows SQL injection via the /sqlitemanager/main.php dbsel parameter.

    KritikCVSS 9,8Kavram kanıtıEPSS %17

    sqlitemanager · sqlitemanager21 Mar 2019

  • CVE-2019-7238
    92Hemen

    Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %76

    sonatype · nexus repository manager21 Mar 2019

  • CVE-2019-3871
    39İzleyin

    A vulnerability was found in PowerDNS Authoritative Server before 4.0.7 and before 4.1.7.

    YüksekCVSS 8,8İstismar yokEPSS %12

    powerdns · authoritative server21 Mar 2019

  • CVE-2019-9648
    25İzleyin

    An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674.

    OrtaCVSS 5,3Kavram kanıtıEPSS %14

    coreftp · core ftp22 Mar 2019

  • CVE-2019-9649
    25İzleyin

    An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674.

    OrtaCVSS 5,3Kavram kanıtıEPSS %14

    coreftp · core ftp22 Mar 2019

  • CVE-2019-9948
    40Planlayın

    urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechani

    KritikCVSS 9,1İstismar yokEPSS %11

    python · python23 Mar 2019

  • CVE-2019-9960
    60Bu hafta

    The downloadZip function in application/controllers/admin/export.php in LimeSurvey through 3.16.1+190225 allows a relative path.

    KritikCVSS 9,8SilahlaştırılmışEPSS %13

    limesurvey · limesurvey23 Mar 2019

  • CVE-2019-9978
    76Bu hafta

    The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swp_debug=load_options swp_url parameter

    OrtaCVSS 6,1KEVSilahlaştırılmışEPSS %72

    warfareplugins · social warfare24 Mar 2019

  • CVE-2018-16858
    60Bu hafta

    It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute

    KritikCVSS 9,8SilahlaştırılmışEPSS %67

    libreoffice · libreoffice25 Mar 2019

  • CVE-2019-3810
    28İzleyin

    A flaw was found in moodle versions 3.6 to 3.6.1, 3.5 to 3.5.3, 3.4 to 3.4.6, 3.1 to 3.1.15 and earlier unsupported versions.

    OrtaCVSS 6,1Kavram kanıtıEPSS %13

    moodle · moodle25 Mar 2019

  • CVE-2019-3396
    99Hemen

    The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from version 6.7.0 before 6.1

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    atlassian · confluence server25 Mar 2019

  • CVE-2019-7609
    99Hemen

    Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer.

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %95

    elastic · kibana25 Mar 2019

  • CVE-2019-9053
    53Planlayın

    An issue was discovered in CMS Made Simple 2.2.8.

    YüksekCVSS 8,1Kavram kanıtıEPSS %68

    cmsmadesimple · cms made simple26 Mar 2019