İçeriğe atla
Noroxi

Yayın tarihine göre

Mayıs 2019: sömürülen ve yeni ciddi CVE kayıtları

110 kayıt · 14 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 2

  • CVE-2019-0227
    58Planlayın

    A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006.

    YüksekCVSS 7,5Kavram kanıtıEPSS %91

    apache · axis1 May 2019

  • CVE-2017-18368
    97Hemen

    The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has a command injection vulnerability in

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %94

    zyxel · p660hn-t1a v2 firmware2 May 2019

  • CVE-2017-18369
    59Planlayın

    The Billion 5200W-T 1.02b.rc5.dt49 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwardin

    KritikCVSS 9,8SilahlaştırılmışEPSS %67

    billion · 5200w-t firmware2 May 2019

  • CVE-2017-18370
    42Planlayın

    The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log

    YüksekCVSS 8,8SilahlaştırılmışEPSS %24

    zyxel · p660hn-t1a v2 firmware2 May 2019

  • CVE-2017-18371
    46Planlayın

    The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has three user accounts with default passwords, including two

    KritikCVSS 9,8SilahlaştırılmışEPSS %22

    zyxel · p660hn-t1a v2 firmware2 May 2019

  • CVE-2017-18372
    42Planlayın

    The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has a command injection vulnerability in the Time Setti

    YüksekCVSS 8,8SilahlaştırılmışEPSS %21

    billion · 5200w-t firmware2 May 2019

  • CVE-2018-12404
    36İzleyin

    A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content.

    OrtaCVSS 5,9İstismar yokEPSS %44

    mozilla · network security services2 May 2019

  • CVE-2019-9017
    36İzleyin

    DWRCC in SolarWinds DameWare Mini Remote Control 10.0 x64 has a Buffer Overflow associated with the size field for the machine name.

    YüksekCVSS 7,5Kavram kanıtıEPSS %19

    solarwinds · dameware mini remote control2 May 2019

  • CVE-2018-20824
    35İzleyin

    The WallboardServlet resource in Jira before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site

    OrtaCVSS 6,1Kavram kanıtıEPSS %37

    atlassian · jira3 May 2019

  • CVE-2019-3799
    52Planlayın

    Directory Traversal with spring-cloud-config-server

    OrtaCVSS 6,5SilahlaştırılmışEPSS %85

    vmware · spring cloud config6 May 2019

  • CVE-2019-5434
    56Planlayın

    An attacker could send a specifically crafted payload to the XML-RPC invocation script and trigger the unserialize() call on the "what" para

    KritikCVSS 9,8Kavram kanıtıEPSS %57

    revive-sas · revive adserver6 May 2019

  • CVE-2018-4061
    41Planlayın

    An exploitable command injection vulnerability exists in the ACEManager iplogging.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.

    YüksekCVSS 8,8İstismar yokEPSS %19

    sierrawireless · airlink es450 firmware6 May 2019

  • CVE-2018-4068
    24İzleyin

    An exploitable information disclosure vulnerability exists in the ACEManager functionality of Sierra Wireless AirLink ES450 FW 4.9.3.

    OrtaCVSS 5,3İstismar yokEPSS %11

    sierrawireless · airlink es450 firmware6 May 2019

  • CVE-2018-4063
    73Bu hafta

    An exploitable remote code execution vulnerability exists in the upload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3.

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %27

    sierrawireless · aleos6 May 2019

  • CVE-2018-4070
    40Planlayın

    An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet_Task.cgi functionality of Sierra Wireless AirLin

    YüksekCVSS 8,8İstismar yokEPSS %17

    sierrawireless · airlink es450 firmware6 May 2019

  • CVE-2018-4071
    40Planlayın

    An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet_Task.cgi functionality of Sierra Wireless AirLin

    YüksekCVSS 8,8İstismar yokEPSS %18

    sierrawireless · airlink es450 firmware6 May 2019

  • CVE-2018-4072
    43Planlayın

    An exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task.cgi functionality of Sierra Wireless AirLink

    YüksekCVSS 8,8İstismar yokEPSS %26

    sierrawireless · airlink es450 firmware6 May 2019

  • CVE-2018-4073
    43Planlayın

    An exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task.cgi functionality of Sierra Wireless AirLink

    YüksekCVSS 8,8İstismar yokEPSS %25

    sierrawireless · airlink es450 firmware6 May 2019

  • CVE-2018-14485
    44Planlayın

    BlogEngine.NET 3.3 allows XXE attacks via the POST body to metaweblog.axd.

    KritikCVSS 9,8Kavram kanıtıEPSS %16

    blogengine · blogengine.net7 May 2019

  • CVE-2019-8387
    56Planlayın

    MASTER IPCAMERA01 3.3.4.2103 devices allow Remote Command Execution, related to the thttpd component.

    KritikCVSS 9,8Kavram kanıtıEPSS %55

    barni · master ip camera01 firmware8 May 2019

  • CVE-2019-11508
    32İzleyin

    In Pulse Secure Pulse Connect Secure (PCS) before 8.1R15.1, 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an authenticate

    YüksekCVSS 7,2İstismar yokEPSS %14

    ivanti · connect secure8 May 2019

  • CVE-2019-11510
    100Hemen

    In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthenticated remote attack

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %99

    ivanti · connect secure8 May 2019

  • CVE-2019-7442
    51Planlayın

    An XML external entity (XXE) vulnerability in the Password Vault Web Access (PVWA) of CyberArk Enterprise Password Vault <=10.7 allows remot

    KritikCVSS 9,8Kavram kanıtıEPSS %40

    cyberark · enterprise password vault8 May 2019

  • CVE-2019-1867
    49Planlayın

    Cisco Elastic Services Controller REST API Authentication Bypass Vulnerability

    KritikCVSS 10,0İstismar yokEPSS %30

    cisco · elastic services controller10 May 2019

  • CVE-2018-12296
    33İzleyin

    Insufficient access control in /api/external/7.0/system.System.get_infos in Seagate NAS OS version 4.3.15.1 allows attackers to obtain infor

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    seagate · nas os13 May 2019

  • CVE-2018-14714
    47Planlayın

    System command injection in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to execute system commands via the "load

    KritikCVSS 9,8Kavram kanıtıEPSS %27

    asus · rt-ac3200 firmware13 May 2019

  • CVE-2018-19986
    51Planlayın

    In the /HNAP1/SetRouterSettings message, the RemotePort parameter is vulnerable, and the vulnerability affects D-Link DIR-818LW Rev.A 2.05.B

    KritikCVSS 9,8İstismar yokEPSS %41

    d-link · dir-818lw firmware13 May 2019

  • CVE-2018-19987
    43Planlayın

    D-Link DIR-822 Rev.B 202KRb06, DIR-822 Rev.C 3.10B06, DIR-860L Rev.B 2.03.B03, DIR-868L Rev.B 2.05B02, DIR-880L Rev.A 1.20B01_01_i3se_BETA,

    KritikCVSS 9,8Kavram kanıtıEPSS %12

    d-link · dir-818lw firmware13 May 2019

  • CVE-2019-9726
    35İzleyin

    Directory Traversal / Arbitrary File Read in eQ-3 AG Homematic CCU3 3.43.15 and earlier allows remote attackers to read arbitrary files of t

    YüksekCVSS 7,5Kavram kanıtıEPSS %16

    eq-3 · ccu3 firmware13 May 2019

  • CVE-2019-11600
    56Planlayın

    A SQL injection vulnerability in the activities API in OpenProject before 8.3.2 allows a remote attacker to execute arbitrary SQL commands v

    YüksekCVSS 8,1Kavram kanıtıEPSS %79

    openproject · openproject13 May 2019

  • CVE-2019-9618
    52Planlayın

    The GraceMedia Media Player plugin 1.0 for WordPress allows Local File Inclusion via the "cfg" parameter.

    KritikCVSS 9,8Kavram kanıtıEPSS %43

    gracemedia media player project · gracemedia media player13 May 2019

  • CVE-2019-3568
    78Bu hafta

    A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %30

    whatsapp · whatsapp14 May 2019

  • CVE-2018-14839
    96Hemen

    LG N1A1 NAS 3718.510 is affected by: Remote Command Execution.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %89

    lg · n1a1 firmware14 May 2019

  • CVE-2019-12099
    40Planlayın

    In PHP-Fusion 9.03.00, edit_profile.php allows remote authenticated users to execute arbitrary code because includes/dynamics/includes/form_

    YüksekCVSS 8,8Kavram kanıtıEPSS %17

    php-fusion · php-fusion14 May 2019

  • CVE-2019-1717
    33İzleyin

    Cisco Video Surveillance Manager Web-Based Management Interface Information Disclosure Vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %10

    cisco · video surveillance manager15 May 2019

  • CVE-2013-7285
    64Bu hafta

    Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been initialized, may allow a remote attacker to run

    KritikCVSS 9,8Kavram kanıtıEPSS %84

    xstream · xstream15 May 2019

  • CVE-2019-1818
    30İzleyin

    Cisco Prime Infrastructure and Evolved Programmable Network Manager Path Traversal Vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %13

    cisco · evolved programmable network manager15 May 2019

  • CVE-2019-1819
    30İzleyin

    Cisco Prime Infrastructure and Evolved Programmable Network Manager Path Traversal Vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %13

    cisco · evolved programmable network manager15 May 2019

  • CVE-2019-1820
    30İzleyin

    Cisco Prime Infrastructure and Evolved Programmable Network Manager Path Traversal Vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %13

    cisco · evolved programmable network manager15 May 2019

  • CVE-2019-1821
    68Bu hafta

    Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerabilities

    KritikCVSS 9,8SilahlaştırılmışEPSS %98

    cisco · evolved programmable network manager15 May 2019

  • CVE-2019-0708
    99Hemen

    A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    microsoft · windows 716 May 2019

  • CVE-2019-0725
    47Planlayın

    A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets, aka 'Windows DHCP Ser

    KritikCVSS 9,8İstismar yokEPSS %28

    microsoft · windows server 200816 May 2019

  • CVE-2019-0758
    30İzleyin

    An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows

    OrtaCVSS 6,5İstismar yokEPSS %12

    microsoft · windows 1016 May 2019

  • CVE-2019-0863
    63Bu hafta

    An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Error Reporting Elevatio

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %5

    microsoft · windows 10 150716 May 2019

  • CVE-2019-0885
    35İzleyin

    A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote Code

    YüksekCVSS 7,8İstismar yokEPSS %14

    microsoft · windows 1016 May 2019

  • CVE-2019-0889
    37İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %20

    microsoft · windows 1016 May 2019

  • CVE-2019-0890
    35İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %13

    microsoft · windows 1016 May 2019

  • CVE-2019-0891
    37İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %20

    microsoft · windows 1016 May 2019

  • CVE-2019-0893
    35İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %13

    microsoft · windows 1016 May 2019

  • CVE-2019-0894
    35İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %13

    microsoft · windows 1016 May 2019

  • CVE-2019-0895
    35İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %13

    microsoft · windows 1016 May 2019

  • CVE-2019-0896
    35İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %13

    microsoft · windows 1016 May 2019

  • CVE-2019-0897
    35İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %13

    microsoft · windows 1016 May 2019

  • CVE-2019-0898
    35İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %13

    microsoft · windows 1016 May 2019

  • CVE-2019-0899
    37İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %20

    microsoft · windows 1016 May 2019

  • CVE-2019-0900
    35İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %13

    microsoft · windows 1016 May 2019

  • CVE-2019-0901
    35İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %13

    microsoft · windows 1016 May 2019

  • CVE-2019-0902
    41Planlayın

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 8,8İstismar yokEPSS %19

    microsoft · windows 1016 May 2019

  • CVE-2019-0903
    72Bu hafta

    A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %21

    microsoft · windows 10 150716 May 2019

  • CVE-2019-0940
    37İzleyin

    A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory Corr

    YüksekCVSS 7,5İstismar yokEPSS %23

    microsoft · internet explorer16 May 2019

  • CVE-2019-0945
    35İzleyin

    A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka

    YüksekCVSS 7,8İstismar yokEPSS %13

    microsoft · office16 May 2019

  • CVE-2019-0946
    35İzleyin

    A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka

    YüksekCVSS 7,8İstismar yokEPSS %13

    microsoft · office16 May 2019

  • CVE-2019-0947
    35İzleyin

    A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka

    YüksekCVSS 7,8İstismar yokEPSS %13

    microsoft · office16 May 2019

  • CVE-2019-0953
    35İzleyin

    A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W

    YüksekCVSS 7,8İstismar yokEPSS %12

    microsoft · office16 May 2019

  • CVE-2019-8925
    20İzleyin

    An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2.

    OrtaCVSS 4,3Kavram kanıtıEPSS %11

    zohocorp · manageengine netflow analyzer16 May 2019

  • CVE-2019-8929
    27İzleyin

    An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2.

    OrtaCVSS 6,1Kavram kanıtıEPSS %11

    zohocorp · manageengine netflow analyzer17 May 2019

  • CVE-2019-8937
    27İzleyin

    HotelDruid 2.3.0 has XSS affecting the nsextt, cambia1, mese_fine, origine, and anno parameters in creaprezzi.php, tabella3.php, personalizz

    OrtaCVSS 6,1Kavram kanıtıEPSS %10

    digitaldruid · hoteldruid17 May 2019

  • CVE-2018-17179
    43Planlayın

    An issue was discovered in OpenEMR before 5.0.1 Patch 7.

    KritikCVSS 9,8SilahlaştırılmışEPSS %12

    open-emr · openemr17 May 2019

  • CVE-2018-19585
    34İzleyin

    GitLab CE/EE versions 8.18 up to 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1 have CRLF Injection in Project Mirrorin

    YüksekCVSS 7,5Kavram kanıtıEPSS %14

    gitlab · gitlab17 May 2019

  • CVE-2019-4279
    63Bu hafta

    IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to execute arbitrary code on the system with a specially-crafted

    KritikCVSS 9,8SilahlaştırılmışEPSS %79

    ibm · websphere application server17 May 2019

  • CVE-2019-12086
    37İzleyin

    A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.

    YüksekCVSS 7,5Kavram kanıtıEPSS %21

    fasterxml · jackson-databind17 May 2019

  • CVE-2019-12185
    40Planlayın

    eLabFTW 1.8.5 is vulnerable to arbitrary file uploads via the /app/controllers/EntityController.php component.

    YüksekCVSS 8,8Kavram kanıtıEPSS %17

    elabftw · elabftw19 May 2019

  • CVE-2019-7761
    38İzleyin

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear

    YüksekCVSS 8,8İstismar yokEPSS %10

    adobe · acrobat dc22 May 2019

  • CVE-2019-12102
    37İzleyin

    Kentico 11 through 12 lets attackers upload and explore files without authentication via the cmsmodules/medialibrary/formcontrols/liveselect

    KritikCVSS 9,1Kavram kanıtıEPSS %2

    kentico · xperience22 May 2019

  • CVE-2019-7820
    38İzleyin

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear

    YüksekCVSS 8,8İstismar yokEPSS %10

    adobe · acrobat dc22 May 2019

  • CVE-2019-11634
    71Bu hafta

    Citrix Workspace App before 1904 for Windows has Incorrect Access Control.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %8

    citrix · receiver22 May 2019

  • CVE-2018-14729
    38İzleyin

    The database backup feature in upload/source/admincp/admincp_db.php in Discuz! 2.5 and 3.4 allows remote attackers to execute arbitrary PHP

    YüksekCVSS 8,8Kavram kanıtıEPSS %10

    comsenz · discuz\!22 May 2019

  • CVE-2019-11231
    60Bu hafta

    An issue was discovered in GetSimple CMS through 3.3.15.

    KritikCVSS 9,8SilahlaştırılmışEPSS %71

    get-simple · getsimple cms22 May 2019

  • CVE-2019-3401
    25İzleyin

    The ManageFilters.jspa resource in Jira before version 7.13.3 and from version 8.0.0 before version 8.1.1 allows remote attackers to enumera

    OrtaCVSS 5,3Kavram kanıtıEPSS %12

    atlassian · jira22 May 2019

  • CVE-2019-3403
    37İzleyin

    The /rest/api/2/user/picker rest resource in Jira before version 7.13.3, from version 8.0.0 before version 8.0.4, and from version 8.1.0 bef

    OrtaCVSS 5,3Kavram kanıtıEPSS %52

    atlassian · jira22 May 2019

  • CVE-2019-7824
    38İzleyin

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear

    YüksekCVSS 8,8İstismar yokEPSS %10

    adobe · acrobat dc22 May 2019

  • CVE-2019-7827
    39İzleyin

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear

    YüksekCVSS 8,8İstismar yokEPSS %13

    adobe · acrobat dc22 May 2019

  • CVE-2019-7828
    39İzleyin

    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear

    YüksekCVSS 8,8İstismar yokEPSS %13

    adobe · acrobat dc22 May 2019

  • CVE-2019-8442
    48Planlayın

    The CachingResourceDownloadRewriteRule class in Jira before version 7.13.4, and from version 8.0.0 before version 8.0.4, and from version 8.

    YüksekCVSS 7,5Kavram kanıtıEPSS %59

    atlassian · jira22 May 2019

  • CVE-2018-7841
    91Hemen

    A SQL Injection (CWE-89) vulnerability exists in U.motion Builder software version 1.3.4 which could cause unwanted code execution when an i

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %72

    schneider-electric · u.motion builder22 May 2019

  • CVE-2018-7842
    50Planlayın

    A CWE-290: Authentication Bypass by Spoofing vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Mo

    KritikCVSS 9,8Kavram kanıtıEPSS %35

    schneider-electric · modicon m580 firmware22 May 2019

  • CVE-2018-7846
    48Planlayın

    A CWE-501: Trust Boundary Violation vulnerability on connection to the Controller exists in all versions of the Modicon M580, Modicon M340,

    KritikCVSS 9,8Kavram kanıtıEPSS %29

    schneider-electric · modicon m580 firmware22 May 2019

  • CVE-2019-6814
    50Planlayın

    A CWE-287: Improper Authentication vulnerability exists in the NET55XX Encoder with firmware prior to version 2.1.9.7 which could cause impa

    KritikCVSS 9,8SilahlaştırılmışEPSS %36

    schneider-electric · net5501 firmware22 May 2019

  • CVE-2019-7107
    48Planlayın

    Adobe InDesign versions 14.0.1 and below have an unsafe hyperlink processing vulnerability.

    KritikCVSS 9,8İstismar yokEPSS %28

    adobe · indesign23 May 2019

  • CVE-2019-7125
    39İzleyin

    Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3

    YüksekCVSS 8,8İstismar yokEPSS %13

    adobe · acrobat dc23 May 2019

  • CVE-2019-7109
    31İzleyin

    Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3

    OrtaCVSS 6,5İstismar yokEPSS %15

    adobe · acrobat dc23 May 2019

  • CVE-2019-7110
    31İzleyin

    Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3

    OrtaCVSS 6,5İstismar yokEPSS %15

    adobe · acrobat dc23 May 2019

  • CVE-2019-7111
    52Planlayın

    Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3

    YüksekCVSS 8,8İstismar yokEPSS %55

    adobe · acrobat dc23 May 2019

  • CVE-2019-7127
    31İzleyin

    Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3

    OrtaCVSS 6,5İstismar yokEPSS %15

    adobe · acrobat dc23 May 2019

  • CVE-2019-12314
    64Bu hafta

    Deltek Maconomy 2.2.5 is prone to local file inclusion via absolute path traversal in the WS.macx1.W_MCS/ PATH_INFO, as demonstrated by a cg

    KritikCVSS 9,8Kavram kanıtıEPSS %84

    deltek · maconomy24 May 2019

  • CVE-2019-7816
    59Planlayın

    ColdFusion versions Update 2 and earlier, Update 9 and earlier, and Update 17 and earlier have a file upload restriction bypass vulnerabilit

    KritikCVSS 9,8İstismar yokEPSS %67

    adobe · coldfusion24 May 2019

  • CVE-2019-7089
    43Planlayın

    Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3

    YüksekCVSS 7,5İstismar yokEPSS %44

    adobe · acrobat dc24 May 2019

  • CVE-2019-7091
    47Planlayın

    ColdFusion versions Update 1 and earlier, Update 7 and earlier, and Update 15 and earlier have a deserialization of untrusted data vulnerabi

    KritikCVSS 9,8İstismar yokEPSS %25

    adobe · coldfusion24 May 2019

  • CVE-2019-0221
    42Planlayın

    The SSI printenv command in Apache Tomcat 9.0.0.M1 to 9.0.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 echoes user provided data without escapi

    OrtaCVSS 6,1Kavram kanıtıEPSS %59

    apache · tomcat28 May 2019

  • CVE-2019-5436
    46Planlayın

    A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.

    YüksekCVSS 7,8İstismar yokEPSS %49

    haxx · libcurl28 May 2019