İçeriğe atla
Noroxi

Yayın tarihine göre

Nisan 2019: sömürülen ve yeni ciddi CVE kayıtları

122 kayıt · 16 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 2

  • CVE-2019-1002100
    31İzleyin

    In all Kubernetes versions prior to v1.11.8, v1.12.6, and v1.13.4, users that are authorized to make patch requests to the Kubernetes API Se

    OrtaCVSS 6,5İstismar yokEPSS %16

    kubernetes · kubernetes1 Nis 2019

  • CVE-2019-1002101
    26İzleyin

    kubectl cp path traversal

    OrtaCVSS 5,5Kavram kanıtıEPSS %12

    kubernetes · kubernetes1 Nis 2019

  • CVE-2019-6715
    36İzleyin

    pub/sns.php in the W3 Total Cache plugin before 0.9.4 for WordPress allows remote attackers to read arbitrary files via the SubscribeURL fie

    YüksekCVSS 7,5Kavram kanıtıEPSS %19

    boldgrid · w3 total cache1 Nis 2019

  • CVE-2019-9193
    55Planlayın

    In PostgreSQL 9.3 through 11.2, the "COPY TO/FROM PROGRAM" function allows superusers and users in the 'pg_execute_server_program' group to

    YüksekCVSS 7,2SilahlaştırılmışEPSS %91

    postgresql · postgresql1 Nis 2019

  • CVE-2019-10692
    62Bu hafta

    In the wp-google-maps plugin before 7.11.18 for WordPress, includes/class.rest-api.php in the REST API does not sanitize field names before

    KritikCVSS 9,8SilahlaştırılmışEPSS %77

    codecabin · wp go maps2 Nis 2019

  • CVE-2018-4314
    38İzleyin

    A use after free issue was addressed with improved memory management.

    YüksekCVSS 8,8Kavram kanıtıEPSS %10

    apple · safari3 Nis 2019

  • CVE-2018-4344
    62Bu hafta

    A memory corruption issue was addressed with improved memory handling.

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %2

    apple · iphone os3 Nis 2019

  • CVE-2018-4407
    41Planlayın

    A memory corruption issue was addressed with improved validation.

    YüksekCVSS 8,8Kavram kanıtıEPSS %21

    apple · iphone os3 Nis 2019

  • CVE-2018-4416
    46Planlayın

    Multiple memory corruption issues were addressed with improved memory handling.

    YüksekCVSS 8,8Kavram kanıtıEPSS %35

    apple · safari3 Nis 2019

  • CVE-2018-4441
    39İzleyin

    A memory corruption issue was addressed with improved memory handling.

    YüksekCVSS 8,8Kavram kanıtıEPSS %12

    apple · safari3 Nis 2019

  • CVE-2019-10863
    32İzleyin

    A command injection vulnerability exists in TeemIp versions before 2.4.0.

    YüksekCVSS 7,2Kavram kanıtıEPSS %13

    combodo · teemip4 Nis 2019

  • CVE-2019-10867
    56Planlayın

    An issue was discovered in Pimcore before 5.7.1.

    YüksekCVSS 8,8SilahlaştırılmışEPSS %68

    pimcore · pimcore4 Nis 2019

  • CVE-2019-6553
    59Planlayın

    A vulnerability was found in Rockwell Automation RSLinx Classic versions 4.10.00 and prior.

    KritikCVSS 9,8İstismar yokEPSS %66

    rockwellautomation · rslinx4 Nis 2019

  • CVE-2019-11001
    69Bu hafta

    On Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W devices through 1.0.227, an authenticated admin can use the "TestEmail" function

    YüksekCVSS 7,2KEVSilahlaştırılmışEPSS %37

    reolink · rlc-410w firmware8 Nis 2019

  • CVE-2019-0215
    33İzleyin

    In Apache HTTP Server 2.4 releases 2.4.37 and 2.4.38, a bug in mod_ssl when using per-location client certificate verification with TLSv1.3

    YüksekCVSS 7,5İstismar yokEPSS %10

    apache · http server8 Nis 2019

  • CVE-2019-0217
    35İzleyin

    In Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when running in a threaded server could allow a user

    YüksekCVSS 7,5Kavram kanıtıEPSS %17

    apache · http server8 Nis 2019

  • CVE-2019-0211
    81Hemen

    In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %65

    apache · http server8 Nis 2019

  • CVE-2019-0592
    37İzleyin

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'C

    YüksekCVSS 7,5İstismar yokEPSS %22

    microsoft · chakracore8 Nis 2019

  • CVE-2019-0603
    40Planlayın

    A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory.

    YüksekCVSS 7,5İstismar yokEPSS %34

    microsoft · windows 108 Nis 2019

  • CVE-2019-0612
    24İzleyin

    A security feature bypass vulnerability exists when Click2Play protection in Microsoft Edge improperly handles flash objects.

    OrtaCVSS 5,3Kavram kanıtıEPSS %10

    microsoft · edge8 Nis 2019

  • CVE-2019-0617
    37İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %19

    microsoft · windows 108 Nis 2019

  • CVE-2019-0639
    34İzleyin

    A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin

    YüksekCVSS 7,5İstismar yokEPSS %12

    microsoft · internet explorer8 Nis 2019

  • CVE-2019-0666
    36İzleyin

    A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Rem

    YüksekCVSS 7,5İstismar yokEPSS %20

    microsoft · internet explorer8 Nis 2019

  • CVE-2019-0667
    39İzleyin

    A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Rem

    YüksekCVSS 7,5Kavram kanıtıEPSS %31

    microsoft · internet explorer8 Nis 2019

  • CVE-2019-0697
    49Planlayın

    A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka

    KritikCVSS 9,8İstismar yokEPSS %32

    microsoft · windows 108 Nis 2019

  • CVE-2019-0698
    58Planlayın

    A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka

    KritikCVSS 9,8İstismar yokEPSS %62

    microsoft · windows 108 Nis 2019

  • CVE-2019-0703
    59Planlayın

    An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information

    OrtaCVSS 6,5KEVSilahlaştırılmışEPSS %9

    microsoft · windows 10 15078 Nis 2019

  • CVE-2019-0726
    55Planlayın

    A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka

    KritikCVSS 9,8İstismar yokEPSS %54

    microsoft · windows 108 Nis 2019

  • CVE-2019-0748
    35İzleyin

    A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka

    YüksekCVSS 7,8İstismar yokEPSS %13

    microsoft · office8 Nis 2019

  • CVE-2019-0756
    39İzleyin

    A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code

    YüksekCVSS 8,8İstismar yokEPSS %12

    microsoft · windows 108 Nis 2019

  • CVE-2019-0765
    39İzleyin

    A remote code execution vulnerability exists in the way that comctl32.dll handles objects in memory, aka 'Comctl32 Remote Code Execution Vul

    YüksekCVSS 8,8İstismar yokEPSS %14

    microsoft · windows 108 Nis 2019

  • CVE-2019-0768
    32İzleyin

    A security feature bypass vulnerability exists when Internet Explorer VBScript execution policy does not properly restrict VBScript under sp

    OrtaCVSS 4,3Kavram kanıtıEPSS %48

    microsoft · internet explorer8 Nis 2019

  • CVE-2019-0769
    33İzleyin

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin

    YüksekCVSS 7,5İstismar yokEPSS %10

    microsoft · chakracore8 Nis 2019

  • CVE-2019-0771
    33İzleyin

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin

    YüksekCVSS 7,5İstismar yokEPSS %10

    microsoft · chakracore8 Nis 2019

  • CVE-2019-0772
    39İzleyin

    A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Rem

    YüksekCVSS 8,8İstismar yokEPSS %13

    microsoft · windows 108 Nis 2019

  • CVE-2019-0773
    33İzleyin

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin

    YüksekCVSS 7,5İstismar yokEPSS %10

    microsoft · chakracore8 Nis 2019

  • CVE-2019-0797
    62Bu hafta

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %1

    microsoft · windows 10 15078 Nis 2019

  • CVE-2019-0808
    77Bu hafta

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %53

    microsoft · windows 78 Nis 2019

  • CVE-2019-0809
    34İzleyin

    A remote code execution vulnerability exists when the Visual Studio C++ Redistributable Installer improperly validates input before loading

    YüksekCVSS 7,8İstismar yokEPSS %10

    microsoft · visual studio 20178 Nis 2019

  • CVE-2019-0739
    33İzleyin

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin

    YüksekCVSS 7,5İstismar yokEPSS %11

    microsoft · edge9 Nis 2019

  • CVE-2019-0752
    85Hemen

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scrip

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %81

    microsoft · internet explorer9 Nis 2019

  • CVE-2019-0790
    40Planlayın

    A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code

    YüksekCVSS 8,8İstismar yokEPSS %16

    microsoft · windows 109 Nis 2019

  • CVE-2019-0791
    40Planlayın

    A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code

    YüksekCVSS 8,8İstismar yokEPSS %18

    microsoft · windows 109 Nis 2019

  • CVE-2019-0792
    40Planlayın

    A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code

    YüksekCVSS 8,8İstismar yokEPSS %18

    microsoft · windows 109 Nis 2019

  • CVE-2019-0793
    40Planlayın

    A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code

    YüksekCVSS 8,8İstismar yokEPSS %18

    microsoft · windows 109 Nis 2019

  • CVE-2019-0794
    40Planlayın

    A remote code execution vulnerability exists when OLE automation improperly handles objects in memory, aka 'OLE Automation Remote Code Execu

    YüksekCVSS 8,8İstismar yokEPSS %15

    microsoft · windows 109 Nis 2019

  • CVE-2019-0795
    41Planlayın

    A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code

    YüksekCVSS 8,8İstismar yokEPSS %21

    microsoft · windows 109 Nis 2019

  • CVE-2019-0801
    37İzleyin

    A remote code execution vulnerability exists when Microsoft Office fails to properly handle certain files.To exploit the vulnerability, an a

    YüksekCVSS 7,8İstismar yokEPSS %18

    microsoft · office9 Nis 2019

  • CVE-2019-0803
    75Bu hafta

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %45

    microsoft · windows 10 15079 Nis 2019

  • CVE-2019-0810
    33İzleyin

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'C

    YüksekCVSS 7,5İstismar yokEPSS %11

    microsoft · chakracore9 Nis 2019

  • CVE-2019-0812
    36İzleyin

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'C

    YüksekCVSS 7,5İstismar yokEPSS %18

    microsoft · chakracore9 Nis 2019

  • CVE-2019-0822
    35İzleyin

    A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics

    YüksekCVSS 7,8İstismar yokEPSS %13

    microsoft · office9 Nis 2019

  • CVE-2019-0823
    34İzleyin

    A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka

    YüksekCVSS 7,8İstismar yokEPSS %10

    microsoft · office9 Nis 2019

  • CVE-2019-0824
    34İzleyin

    A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka

    YüksekCVSS 7,8İstismar yokEPSS %10

    microsoft · office9 Nis 2019

  • CVE-2019-0825
    34İzleyin

    A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka

    YüksekCVSS 7,8İstismar yokEPSS %10

    microsoft · office9 Nis 2019

  • CVE-2019-0826
    34İzleyin

    A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka

    YüksekCVSS 7,8İstismar yokEPSS %10

    microsoft · office9 Nis 2019

  • CVE-2019-0827
    34İzleyin

    A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka

    YüksekCVSS 7,8İstismar yokEPSS %10

    microsoft · office9 Nis 2019

  • CVE-2019-0828
    35İzleyin

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka '

    YüksekCVSS 7,8İstismar yokEPSS %13

    microsoft · excel9 Nis 2019

  • CVE-2019-0841
    73Bu hafta

    An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows El

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %41

    microsoft · windows 10 17039 Nis 2019

  • CVE-2019-0842
    40Planlayın

    A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Rem

    YüksekCVSS 8,8İstismar yokEPSS %18

    microsoft · windows 109 Nis 2019

  • CVE-2019-0845
    39İzleyin

    A remote code execution vulnerability exists when the IOleCvt interface renders ASP webpage content, aka 'Windows IOleCvt Interface Remote C

    YüksekCVSS 8,8İstismar yokEPSS %14

    microsoft · windows 109 Nis 2019

  • CVE-2019-0846
    36İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %16

    microsoft · windows 109 Nis 2019

  • CVE-2019-0847
    36İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %16

    microsoft · windows 109 Nis 2019

  • CVE-2019-0851
    36İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %16

    microsoft · windows 109 Nis 2019

  • CVE-2019-0853
    44Planlayın

    A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka

    YüksekCVSS 8,8İstismar yokEPSS %30

    microsoft · windows 109 Nis 2019

  • CVE-2019-0856
    34İzleyin

    A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Remote Code Execution Vulnerabi

    YüksekCVSS 7,2İstismar yokEPSS %19

    microsoft · windows 109 Nis 2019

  • CVE-2019-0859
    62Bu hafta

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %4

    microsoft · windows 10 15079 Nis 2019

  • CVE-2019-0860
    33İzleyin

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'C

    YüksekCVSS 7,5İstismar yokEPSS %10

    microsoft · edge9 Nis 2019

  • CVE-2019-0861
    33İzleyin

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'C

    YüksekCVSS 7,5İstismar yokEPSS %11

    microsoft · edge9 Nis 2019

  • CVE-2019-0862
    33İzleyin

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scrip

    YüksekCVSS 7,5İstismar yokEPSS %11

    microsoft · internet explorer9 Nis 2019

  • CVE-2019-8456
    29İzleyin

    Check Point IKEv2 IPsec VPN up to R80.30, in some less common conditions, may allow an attacker with knowledge of the internal configuration

    OrtaCVSS 5,9İstismar yokEPSS %20

    checkpoint · ipsec vpn9 Nis 2019

  • CVE-2019-0199
    52Planlayın

    The HTTP/2 implementation in Apache Tomcat 9.0.0.M1 to 9.0.14 and 8.5.0 to 8.5.37 accepted streams with excessive numbers of SETTINGS frames

    YüksekCVSS 7,5İstismar yokEPSS %72

    apache · tomcat10 Nis 2019

  • CVE-2019-4013
    43Planlayın

    IBM BigFix Platform 9.5 could allow any authenticated user to upload any file to any location on the server with root privileges.

    KritikCVSS 9,9Kavram kanıtıEPSS %13

    ibm · bigfix platform10 Nis 2019

  • CVE-2019-7139
    44Planlayın

    An unauthenticated user can execute SQL statements that allow arbitrary read access to the underlying database, which causes sensitive data

    KritikCVSS 9,8Kavram kanıtıEPSS %17

    magento · magento10 Nis 2019

  • CVE-2019-10945
    51Planlayın

    An issue was discovered in Joomla! before 3.9.5.

    KritikCVSS 9,8Kavram kanıtıEPSS %40

    joomla · joomla\!10 Nis 2019

  • CVE-2019-11068
    41Planlayın

    libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon r

    KritikCVSS 9,8İstismar yokEPSS %5

    xmlsoft · libxslt10 Nis 2019

  • CVE-2019-11072
    61Bu hafta

    lighttpd before 1.4.54 has a signed integer overflow, which might allow remote attackers to cause a denial of service (application crash) or

    KritikCVSS 9,8İstismar yokEPSS %73

    lighttpd · lighttpd10 Nis 2019

  • CVE-2019-3914
    37İzleyin

    Remote command injection vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02.01.00.05 allows a remote, authenticated a

    YüksekCVSS 7,2İstismar yokEPSS %29

    verizon · fios quantum gateway g1100 firmware11 Nis 2019

  • CVE-2018-19300
    61Bu hafta

    On D-Link DAP-1530 (A1) before firmware version 1.06b01, DAP-1610 (A1) before firmware version 1.06b01, DWR-111 (A1) before firmware version

    KritikCVSS 9,8İstismar yokEPSS %74

    d-link · dap-1530 firmware11 Nis 2019

  • CVE-2019-9733
    55Planlayın

    An issue was discovered in JFrog Artifactory 6.7.3.

    KritikCVSS 9,8Kavram kanıtıEPSS %53

    jfrog · artifactory11 Nis 2019

  • CVE-2019-11229
    51Planlayın

    models/repo_mirror.go in Gitea before 1.7.6 and 1.8.x before 1.8-RC3 mishandles mirror repo URL settings, leading to remote code execution.

    YüksekCVSS 8,8Kavram kanıtıEPSS %54

    gitea · gitea15 Nis 2019

  • CVE-2019-0232
    62Bu hafta

    When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1 to 9.0.17, 8.5.0 to 8.5.39 and 7.0.0

    YüksekCVSS 8,1SilahlaştırılmışEPSS %99

    apache · tomcat15 Nis 2019

  • CVE-2019-3398
    94Hemen

    Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource.

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %97

    atlassian · confluence server18 Nis 2019

  • CVE-2019-3719
    37İzleyin

    Dell SupportAssist Client versions prior to 3.2.0.90 contain a remote code execution vulnerability.

    YüksekCVSS 8,0Kavram kanıtıEPSS %16

    dell · supportassist18 Nis 2019

  • CVE-2019-11354
    38İzleyin

    The client in Electronic Arts (EA) Origin 10.5.36 on Windows allows template injection in the title parameter of the Origin2 URI handler.

    YüksekCVSS 7,8Kavram kanıtıEPSS %23

    ea · origin19 Nis 2019

  • CVE-2019-11358
    50Planlayın

    jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototyp

    OrtaCVSS 6,1Kavram kanıtıEPSS %86

    jquery · jquery19 Nis 2019

  • CVE-2019-11395
    43Planlayın

    A buffer overflow in MailCarrier 2.51 allows remote attackers to execute arbitrary code via a long string, as demonstrated by SMTP RCPT TO,

    KritikCVSS 9,8Kavram kanıtıEPSS %14

    tabslab · mailcarrier22 Nis 2019

  • CVE-2019-11415
    34İzleyin

    An issue was discovered on Intelbras IWR 3000N 1.5.0 devices.

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    intelbras · iwr 3000n firmware22 Nis 2019

  • CVE-2019-11444
    32İzleyin

    An issue was discovered in Liferay Portal CE 7.1.2 GA3.

    YüksekCVSS 7,2Kavram kanıtıEPSS %12

    liferay · liferay portal22 Nis 2019

  • CVE-2019-11445
    32İzleyin

    OpenKM 6.3.2 through 6.3.7 allows an attacker to upload a malicious JSP file into the /okm:root directories and move that file to the home d

    YüksekCVSS 7,2Kavram kanıtıEPSS %14

    openkm · openkm22 Nis 2019

  • CVE-2019-11447
    51Planlayın

    An issue was discovered in CutePHP CuteNews 2.1.2.

    YüksekCVSS 8,8Kavram kanıtıEPSS %52

    cutephp · cutenews22 Nis 2019

  • CVE-2019-11448
    43Planlayın

    An issue was discovered in Zoho ManageEngine Applications Manager 11.0 through 14.0.

    KritikCVSS 9,8Kavram kanıtıEPSS %12

    zohocorp · manageengine applications manager22 Nis 2019

  • CVE-2019-9955
    30İzleyin

    On Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, USG1900, USG2200-VPN,

    OrtaCVSS 6,1Kavram kanıtıEPSS %21

    zyxel · atp200 firmware22 Nis 2019

  • CVE-2019-11469
    44Planlayın

    Zoho ManageEngine Applications Manager 12 through 14 allows FaultTemplateOptions.jsp resourceid SQL injection.

    KritikCVSS 9,8Kavram kanıtıEPSS %16

    zohocorp · manageengine applications manager23 Nis 2019

  • CVE-2019-7304
    57Planlayın

    Local privilege escalation via snapd socket

    KritikCVSS 9,8Kavram kanıtıEPSS %60

    canonical · snapd23 Nis 2019

  • CVE-2019-2557
    40Planlayın

    Vulnerability in the Oracle Application Testing Suite component of Oracle Enterprise Manager Products Suite (subcomponent: Load Testing for

    OrtaCVSS 6,3SilahlaştırılmışEPSS %5

    oracle · application testing suite23 Nis 2019

  • CVE-2019-2578
    55Planlayın

    Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI).

    YüksekCVSS 8,6Kavram kanıtıEPSS %71

    oracle · webcenter sites23 Nis 2019

  • CVE-2019-2588
    30İzleyin

    Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security).

    OrtaCVSS 4,9Kavram kanıtıEPSS %36

    oracle · business intelligence publisher23 Nis 2019

  • CVE-2019-2616
    86Hemen

    Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security).

    YüksekCVSS 7,2KEVSilahlaştırılmışEPSS %92

    oracle · business intelligence publisher23 Nis 2019

  • CVE-2019-2618
    32İzleyin

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components).

    OrtaCVSS 5,5Kavram kanıtıEPSS %32

    oracle · weblogic server23 Nis 2019

Nisan 2019: sömürülen ve yeni ciddi CVE kayıtları — Noroxi