İçeriğe atla
Noroxi

Yayın tarihine göre

Mart 2019: sömürülen ve yeni ciddi CVE kayıtları

120 kayıt · 12 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 2 / 2

  • CVE-2019-9055
    40Planlayın

    An issue was discovered in CMS Made Simple 2.2.8.

    YüksekCVSS 8,8SilahlaştırılmışEPSS %12

    cmsmadesimple · cms made simple26 Mar 2019

  • CVE-2019-10068
    98Hemen

    An issue was discovered in Kentico 12.0.x before 12.0.15, 11.0.x before 11.0.48, 10.0.x before 10.0.52, and 9.x versions.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %95

    kentico · xperience26 Mar 2019

  • CVE-2019-6341
    25İzleyin

    Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2019-004

    OrtaCVSS 5,4İstismar yokEPSS %12

    drupal · drupal26 Mar 2019

  • CVE-2019-5418
    90Hemen

    There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 where specially crafted accep

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %98

    rubyonrails · rails27 Mar 2019

  • CVE-2019-5420
    66Bu hafta

    A remote code execution vulnerability in development mode Rails <5.2.2.1, <6.0.0.beta3 can allow an attacker to guess the automatically gene

    KritikCVSS 9,8SilahlaştırılmışEPSS %89

    rubyonrails · rails27 Mar 2019

  • CVE-2019-10232
    46Planlayın

    Teclib GLPI through 9.3.3 has SQL injection via the "cycle" parameter in /scripts/unlock_tasks.php.

    KritikCVSS 9,8Kavram kanıtıEPSS %22

    teclib-edition · gestionnaire libre de parc informatique27 Mar 2019

  • CVE-2019-3829
    48Planlayın

    A vulnerability was found in gnutls versions from 3.5.8 before 3.6.7.

    YüksekCVSS 7,5İstismar yokEPSS %58

    gnu · gnutls27 Mar 2019

  • CVE-2017-18365
    60Bu hafta

    The Management Console in GitHub Enterprise 2.8.x before 2.8.7 has a deserialization issue that allows unauthenticated remote attackers to e

    KritikCVSS 9,8SilahlaştırılmışEPSS %21

    github · github28 Mar 2019

  • CVE-2019-5737
    35İzleyin

    In Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before 11.10.1, an attacker can cause a Denial of S

    YüksekCVSS 7,5Kavram kanıtıEPSS %16

    nodejs · node.js28 Mar 2019

  • CVE-2019-9164
    49Planlayın

    Command injection in Nagios XI before 5.5.11 allows an authenticated users to execute arbitrary remote commands via a new autodiscovery job.

    YüksekCVSS 8,8İstismar yokEPSS %45

    nagios · nagios xi28 Mar 2019

  • CVE-2019-9202
    42Planlayın

    Nagios IM (component of Nagios XI) before 2.2.7 allows authenticated users to execute arbitrary code via API key issues.

    YüksekCVSS 8,8Kavram kanıtıEPSS %23

    nagios · incident manager28 Mar 2019

  • CVE-2019-9203
    45Planlayın

    Authorization bypass in Nagios IM (component of Nagios XI) before 2.2.7 allows closing incidents in IM via the API.

    KritikCVSS 9,8İstismar yokEPSS %20

    nagios · incident manager28 Mar 2019

  • CVE-2019-9204
    45Planlayın

    SQL injection vulnerability in Nagios IM (component of Nagios XI) before 2.2.7 allows attackers to execute arbitrary SQL commands.

    KritikCVSS 9,8İstismar yokEPSS %19

    nagios · incident manager28 Mar 2019

  • CVE-2019-9167
    31İzleyin

    Cross-site scripting (XSS) vulnerability in Nagios XI before 5.5.11 allows attackers to inject arbitrary web script or HTML via the xiwindow

    OrtaCVSS 6,1İstismar yokEPSS %21

    nagios · nagios xi28 Mar 2019

  • CVE-2019-0222
    34İzleyin

    In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive.

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    apache · activemq28 Mar 2019

  • CVE-2019-9922
    33İzleyin

    An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!.

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    harmistechnology · je messenger29 Mar 2019

  • CVE-2019-10655
    60Bu hafta

    Grandstream GAC2500 1.0.3.35, GXP2200 1.0.3.27, GVC3202 1.0.3.51, GXV3275 before 1.0.3.219 Beta, and GXV3240 before 1.0.3.219 Beta devices a

    KritikCVSS 9,8SilahlaştırılmışEPSS %15

    grandstream · gac2500 firmware30 Mar 2019

  • CVE-2019-10662
    48Planlayın

    Grandstream UCM6204 before 1.0.19.20 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the back

    YüksekCVSS 8,8İstismar yokEPSS %43

    grandstream · ucm6204 firmware30 Mar 2019

  • CVE-2019-10663
    43Planlayın

    Grandstream UCM6204 before 1.0.19.20 devices allow remote authenticated users to conduct SQL injection attacks via the sord parameter in a l

    YüksekCVSS 8,8İstismar yokEPSS %27

    grandstream · ucm6204 firmware30 Mar 2019

  • CVE-2019-10678
    35İzleyin

    Domoticz before 4.10579 neglects to categorize \n and \r as insecure argument options.

    YüksekCVSS 7,5Kavram kanıtıEPSS %17

    domoticz · domoticz31 Mar 2019