İçeriğe atla
Noroxi

Yayın tarihine göre

Temmuz 2019: sömürülen ve yeni ciddi CVE kayıtları

102 kayıt · 14 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 2

  • CVE-2019-13024
    45Planlayın

    Centreon 18.x before 18.10.6, 19.x before 19.04.3, and Centreon web before 2.8.29 allows the attacker to execute arbitrary system commands b

    YüksekCVSS 8,8Kavram kanıtıEPSS %32

    centreon · centreon1 Tem 2019

  • CVE-2019-7666
    39İzleyin

    Prima Systems FlexAir, Versions 2.3.38 and prior.

    YüksekCVSS 8,8Kavram kanıtıEPSS %14

    primasystems · flexair1 Tem 2019

  • CVE-2019-7669
    44Planlayın

    Prima Systems FlexAir, Versions 2.3.38 and prior.

    YüksekCVSS 8,8İstismar yokEPSS %31

    primasystems · flexair1 Tem 2019

  • CVE-2019-7670
    33İzleyin

    Prima Systems FlexAir, Versions 2.3.38 and prior.

    YüksekCVSS 7,2Kavram kanıtıEPSS %18

    primasystems · flexair1 Tem 2019

  • CVE-2019-7276
    67Bu hafta

    Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console.

    KritikCVSS 9,8SilahlaştırılmışEPSS %93

    optergy · enterprise1 Tem 2019

  • CVE-2019-7272
    24İzleyin

    Optergy Proton/Enterprise devices allow Username Disclosure.

    OrtaCVSS 5,3Kavram kanıtıEPSS %10

    optergy · enterprise1 Tem 2019

  • CVE-2019-7274
    48Planlayın

    Optergy Proton/Enterprise devices allow Authenticated File Upload with Code Execution as root.

    KritikCVSS 9,8Kavram kanıtıEPSS %29

    optergy · enterprise1 Tem 2019

  • CVE-2019-7265
    46Planlayın

    Linear eMerge E3-Series devices allow Remote Code Execution (root access over SSH).

    KritikCVSS 9,8Kavram kanıtıEPSS %23

    nortekcontrol · linear emerge essential firmware2 Tem 2019

  • CVE-2019-7267
    45Planlayın

    Linear eMerge 50P/5000P devices allow Cookie Path Traversal.

    KritikCVSS 9,8İstismar yokEPSS %21

    nortekcontrol · linear emerge 50p firmware2 Tem 2019

  • CVE-2019-7269
    51Planlayın

    Linear eMerge 50P/5000P devices allow Authenticated Command Injection with root Code Execution.

    KritikCVSS 9,8Kavram kanıtıEPSS %40

    nortekcontrol · linear emerge 50p firmware2 Tem 2019

  • CVE-2019-7259
    39İzleyin

    Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure.

    YüksekCVSS 8,8İstismar yokEPSS %13

    nortekcontrol · linear emerge essential firmware2 Tem 2019

  • CVE-2019-7262
    40Planlayın

    Linear eMerge E3-Series devices allow Cross-Site Request Forgery (CSRF).

    YüksekCVSS 8,8Kavram kanıtıEPSS %16

    nortekcontrol · linear emerge essential firmware2 Tem 2019

  • CVE-2019-7254
    55Planlayın

    Linear eMerge E3-Series devices allow File Inclusion.

    YüksekCVSS 7,5Kavram kanıtıEPSS %82

    nortekcontrol · linear emerge essential firmware2 Tem 2019

  • CVE-2019-7255
    41Planlayın

    Linear eMerge E3-Series devices allow XSS.

    OrtaCVSS 6,1Kavram kanıtıEPSS %55

    nortekcontrol · linear emerge essential firmware2 Tem 2019

  • CVE-2019-7256
    98Hemen

    Linear eMerge E3-Series devices allow Command Injections.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %97

    nortekcontrol · linear emerge essential firmware2 Tem 2019

  • CVE-2019-7257
    61Bu hafta

    Linear eMerge E3-Series devices allow Unrestricted File Upload.

    KritikCVSS 10,0Kavram kanıtıEPSS %69

    nortekcontrol · linear emerge essential firmware2 Tem 2019

  • CVE-2019-7258
    41Planlayın

    Linear eMerge E3-Series devices allow Privilege Escalation.

    YüksekCVSS 8,8İstismar yokEPSS %19

    nortekcontrol · linear emerge essential firmware2 Tem 2019

  • CVE-2017-8413
    38İzleyin

    An issue was discovered on D-Link DCS-1100 and DCS-1130 devices.

    YüksekCVSS 8,8İstismar yokEPSS %10

    dlink · dcs-1130 firmware2 Tem 2019

  • CVE-2017-8416
    38İzleyin

    An issue was discovered on D-Link DCS-1100 and DCS-1130 devices.

    YüksekCVSS 8,8İstismar yokEPSS %11

    dlink · dcs-1130 firmware2 Tem 2019

  • CVE-2018-11686
    55Planlayın

    The Publish Service in FlexPaper (later renamed FlowPaper) 2.3.6 allows remote code execution via setup.php and change_config.php.

    KritikCVSS 9,8Kavram kanıtıEPSS %52

    flowpaper · flexpaper3 Tem 2019

  • CVE-2018-15811
    83Hemen

    DNN (aka DotNetNuke) 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters.

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %76

    dnnsoftware · dotnetnuke3 Tem 2019

  • CVE-2018-15812
    44Planlayın

    DNN (aka DotNetNuke) 9.2 through 9.2.1 incorrectly converts encryption key source values, resulting in lower than expected entropy.

    YüksekCVSS 7,5SilahlaştırılmışEPSS %47

    dnnsoftware · dotnetnuke3 Tem 2019

  • CVE-2018-18325
    82Hemen

    DNN (aka DotNetNuke) 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters.

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %74

    dnnsoftware · dotnetnuke3 Tem 2019

  • CVE-2018-18326
    46Planlayın

    DNN (aka DotNetNuke) 9.2 through 9.2.2 incorrectly converts encryption key source values, resulting in lower than expected entropy.

    YüksekCVSS 7,5SilahlaştırılmışEPSS %54

    dnnsoftware · dotnetnuke3 Tem 2019

  • CVE-2017-8229
    61Bu hafta

    Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices allow an unauthenticated attacker to download the administrative credentials.

    KritikCVSS 9,8Kavram kanıtıEPSS %74

    amcrest · ipm-721s firmware3 Tem 2019

  • CVE-2018-14860
    37İzleyin

    Improper sanitization of dynamic user expressions in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticat

    KritikCVSS 9,1İstismar yokEPSS %2

    odoo · odoo3 Tem 2019

  • CVE-2019-9827
    47Planlayın

    Hawt Hawtio through 2.5.0 is vulnerable to SSRF, allowing a remote attacker to trigger an HTTP request from an affected server to an arbitra

    KritikCVSS 9,8İstismar yokEPSS %26

    hawt · hawtio3 Tem 2019

  • CVE-2019-13294
    45Planlayın

    AROX School-ERP Pro has a command execution vulnerability.

    KritikCVSS 9,8Kavram kanıtıEPSS %18

    arox · school-erp4 Tem 2019

  • CVE-2019-13344
    35İzleyin

    An authentication bypass vulnerability in the CRUDLab WP Like Button plugin through 1.6.0 for WordPress allows unauthenticated attackers to

    OrtaCVSS 5,3Kavram kanıtıEPSS %45

    crudlab · wp like button5 Tem 2019

  • CVE-2019-13345
    46Planlayın

    The cachemgr.cgi web module of Squid through 4.7 has XSS via the user_name or auth parameter.

    OrtaCVSS 6,1İstismar yokEPSS %74

    squid-cache · squid5 Tem 2019

  • CVE-2019-13358
    37İzleyin

    lib/DocumentToText.php in OpenCats before 0.9.4-3 has XXE that allows remote users to read files on the underlying operating system.

    YüksekCVSS 7,5Kavram kanıtıEPSS %24

    opencats · opencats5 Tem 2019

  • CVE-2019-13372
    64Bu hafta

    /web/Lib/Action/IndexAction.class.php in D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6 allows remote attackers to execute arb

    KritikCVSS 9,8SilahlaştırılmışEPSS %82

    dlink · central wifimanager6 Tem 2019

  • CVE-2019-13373
    59Planlayın

    An issue was discovered in the D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6.

    KritikCVSS 9,8SilahlaştırılmışEPSS %68

    dlink · central wifimanager6 Tem 2019

  • CVE-2019-13375
    47Planlayın

    A SQL Injection was discovered in D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6 in PayAction.class.php with the index.php/Pay

    KritikCVSS 9,8İstismar yokEPSS %28

    dlink · central wifimanager6 Tem 2019

  • CVE-2019-13396
    40Planlayın

    FlightPath 4.x and 5.0-x allows directory traversal and Local File Inclusion through the form_include parameter in an index.php?q=system-han

    OrtaCVSS 5,3Kavram kanıtıEPSS %62

    getflightpath · flightpath10 Tem 2019

  • CVE-2018-19571
    40Planlayın

    GitLab CE/EE, versions 8.18 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an SSRF vulnerability i

    YüksekCVSS 7,7Kavram kanıtıEPSS %32

    gitlab · gitlab10 Tem 2019

  • CVE-2019-13132
    52Planlayın

    In ZeroMQ libzmq before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.3.2, a remote, unauthenticated client connecting to a libzmq applicati

    KritikCVSS 9,8Kavram kanıtıEPSS %42

    zeromq · libzmq10 Tem 2019

  • CVE-2019-10192
    36İzleyin

    A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x

    YüksekCVSS 7,2İstismar yokEPSS %26

    redislabs · redis11 Tem 2019

  • CVE-2019-10193
    35İzleyin

    A stack-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.

    YüksekCVSS 7,2İstismar yokEPSS %23

    redislabs · redis11 Tem 2019

  • CVE-2019-12525
    46Planlayın

    An issue was discovered in Squid 3.3.9 through 3.5.28 and 4.x through 4.7.

    KritikCVSS 9,8İstismar yokEPSS %24

    squid-cache · squid11 Tem 2019

  • CVE-2019-12527
    50Planlayın

    An issue was discovered in Squid 4.0.23 through 4.7.

    YüksekCVSS 8,8İstismar yokEPSS %49

    squid-cache · squid11 Tem 2019

  • CVE-2019-13597
    43Planlayın

    _s_/sprm/_s_/dyn/Player_setScriptFile in Sahi Pro 8.0.0 allows command execution.

    KritikCVSS 9,8Kavram kanıtıEPSS %14

    sahipro · sahi pro14 Tem 2019

  • CVE-2019-0785
    54Planlayın

    A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP failo

    KritikCVSS 9,8Kavram kanıtıEPSS %49

    microsoft · windows server 201215 Tem 2019

  • CVE-2019-0880
    62Bu hafta

    A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privileg

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %2

    microsoft · windows 10 150715 Tem 2019

  • CVE-2019-0887
    53Planlayın

    A remote code execution vulnerability exists in Remote Desktop Services - formerly known as Terminal Services - when an authenticated attack

    YüksekCVSS 8,0Kavram kanıtıEPSS %70

    microsoft · remote desktop client15 Tem 2019

  • CVE-2019-1068
    82Hemen

    A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Micr

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %57

    microsoft · sql server15 Tem 2019

  • CVE-2019-1072
    43Planlayın

    A remote code execution vulnerability exists when Azure DevOps Server and Team Foundation Server (TFS) improperly handle user input, aka 'Az

    KritikCVSS 9,8İstismar yokEPSS %13

    microsoft · team foundation server15 Tem 2019

  • CVE-2019-1102
    38İzleyin

    A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka

    YüksekCVSS 8,8İstismar yokEPSS %11

    microsoft · windows 1015 Tem 2019

  • CVE-2019-1108
    29İzleyin

    An information disclosure vulnerability exists when the Windows RDP client improperly discloses the contents of its memory, aka 'Remote Desk

    OrtaCVSS 6,5Kavram kanıtıEPSS %10

    microsoft · windows 1015 Tem 2019

  • CVE-2019-1110
    39İzleyin

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka '

    YüksekCVSS 8,8İstismar yokEPSS %13

    microsoft · excel15 Tem 2019

  • CVE-2019-1111
    39İzleyin

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka '

    YüksekCVSS 8,8İstismar yokEPSS %13

    microsoft · excel15 Tem 2019

  • CVE-2019-1117
    42Planlayın

    A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution V

    YüksekCVSS 8,8Kavram kanıtıEPSS %23

    microsoft · windows 1015 Tem 2019

  • CVE-2019-1118
    42Planlayın

    A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution V

    YüksekCVSS 8,8Kavram kanıtıEPSS %23

    microsoft · windows 1015 Tem 2019

  • CVE-2019-1119
    41Planlayın

    A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution V

    YüksekCVSS 8,8Kavram kanıtıEPSS %19

    microsoft · windows 1015 Tem 2019

  • CVE-2019-1120
    40Planlayın

    A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution V

    YüksekCVSS 8,8Kavram kanıtıEPSS %16

    microsoft · windows 1015 Tem 2019

  • CVE-2019-1121
    40Planlayın

    A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution V

    YüksekCVSS 8,8Kavram kanıtıEPSS %16

    microsoft · windows 1015 Tem 2019

  • CVE-2019-1122
    40Planlayın

    A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution V

    YüksekCVSS 8,8Kavram kanıtıEPSS %16

    microsoft · windows 1015 Tem 2019

  • CVE-2019-1123
    40Planlayın

    A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution V

    YüksekCVSS 8,8Kavram kanıtıEPSS %16

    microsoft · windows 1015 Tem 2019

  • CVE-2019-1124
    41Planlayın

    A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution V

    YüksekCVSS 8,8Kavram kanıtıEPSS %18

    microsoft · windows 1015 Tem 2019

  • CVE-2019-1127
    41Planlayın

    A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution V

    YüksekCVSS 8,8Kavram kanıtıEPSS %20

    microsoft · windows 1015 Tem 2019

  • CVE-2019-1128
    40Planlayın

    A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution V

    YüksekCVSS 8,8Kavram kanıtıEPSS %16

    microsoft · windows 1015 Tem 2019

  • CVE-2019-1129
    62Bu hafta

    An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows El

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %1

    microsoft · windows 10 170315 Tem 2019

  • CVE-2019-1130
    62Bu hafta

    An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows El

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %1

    microsoft · windows 10 150715 Tem 2019

  • CVE-2019-1132
    64Bu hafta

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %9

    microsoft · windows 715 Tem 2019

  • CVE-2019-13360
    46Planlayın

    In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, remote attackers can bypass authentication in the login process by leveraging k

    KritikCVSS 9,8Kavram kanıtıEPSS %24

    control-webpanel · webpanel16 Tem 2019

  • CVE-2019-13383
    25İzleyin

    In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.846, the Login process allows attackers to check whether a username is valid by read

    OrtaCVSS 5,3Kavram kanıtıEPSS %14

    control-webpanel · webpanel16 Tem 2019

  • CVE-2019-13605
    40Planlayın

    In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.838 to 0.9.8.846, remote attackers can bypass authentication in the login process by

    YüksekCVSS 8,8Kavram kanıtıEPSS %15

    control-webpanel · webpanel16 Tem 2019

  • CVE-2019-12985
    51Planlayın

    Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 1 of 6).

    KritikCVSS 9,8Kavram kanıtıEPSS %39

    citrix · netscaler sd-wan16 Tem 2019

  • CVE-2019-12986
    51Planlayın

    Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 2 of 6).

    KritikCVSS 9,8Kavram kanıtıEPSS %39

    citrix · netscaler sd-wan16 Tem 2019

  • CVE-2019-12987
    52Planlayın

    Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 3 of 6).

    KritikCVSS 9,8Kavram kanıtıEPSS %42

    citrix · netscaler sd-wan16 Tem 2019

  • CVE-2019-12988
    52Planlayın

    Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 4 of 6).

    KritikCVSS 9,8Kavram kanıtıEPSS %42

    citrix · netscaler sd-wan16 Tem 2019

  • CVE-2019-12989
    97Hemen

    Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow SQL Injection.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %94

    citrix · netscaler sd-wan16 Tem 2019

  • CVE-2019-12990
    51Planlayın

    Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow Directory Traversal.

    KritikCVSS 9,8Kavram kanıtıEPSS %39

    citrix · netscaler sd-wan16 Tem 2019

  • CVE-2019-12991
    87Hemen

    Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 5 of 6).

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %74

    citrix · netscaler sd-wan16 Tem 2019

  • CVE-2019-12992
    50Planlayın

    Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 6 of 6).

    YüksekCVSS 8,8İstismar yokEPSS %48

    citrix · netscaler sd-wan16 Tem 2019

  • CVE-2019-13115
    35İzleyin

    In libssh2 before 1.9.0, kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c has an integer overflow that could lead to an

    YüksekCVSS 8,1Kavram kanıtıEPSS %11

    libssh2 · libssh216 Tem 2019

  • CVE-2019-13359
    38İzleyin

    In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, a cwpsrv-xxx cookie allows a normal user to craft and upload a session file to

    YüksekCVSS 7,5Kavram kanıtıEPSS %25

    control-webpanel · webpanel16 Tem 2019

  • CVE-2019-9848
    48Planlayın

    LibreOffice has a feature where documents can specify that pre-installed scripts can be executed on various document events such as mouse-ov

    KritikCVSS 9,8İstismar yokEPSS %28

    libreoffice · libreoffice17 Tem 2019

  • CVE-2019-13272
    77Bu hafta

    In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to cre

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %52

    linux · linux kernel17 Tem 2019

  • CVE-2019-10352
    29İzleyin

    A path traversal vulnerability in Jenkins 2.185 and earlier, LTS 2.176.1 and earlier in core/src/main/java/hudson/model/FileParameterValue.j

    OrtaCVSS 6,5İstismar yokEPSS %10

    jenkins · jenkins17 Tem 2019

  • CVE-2019-13585
    43Planlayın

    The remote admin webserver on FANUC Robotics Virtual Robot Controller 8.23 has a Buffer Overflow via a forged HTTP request.

    KritikCVSS 9,8İstismar yokEPSS %14

    fanucamerica · robotics virtual robot controller17 Tem 2019

  • CVE-2019-13577
    46Planlayın

    SnmpAdm.exe in MAPLE WBT SNMP Administrator v2.0.195.15 has an Unauthenticated Remote Buffer Overflow via a long string to the CE Remote fea

    KritikCVSS 9,8Kavram kanıtıEPSS %23

    computerlab · maple computer wbt snmp administrator17 Tem 2019

  • CVE-2019-12725
    66Bu hafta

    Zeroshell 3.9.0 is prone to a remote command execution vulnerability.

    KritikCVSS 9,8Kavram kanıtıEPSS %89

    zeroshell · zeroshell19 Tem 2019

  • CVE-2019-12815
    56Planlayın

    An arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows for remote code execution and information disclosure without

    KritikCVSS 9,8Kavram kanıtıEPSS %57

    proftpd · proftpd19 Tem 2019

  • CVE-2019-1579
    76Bu hafta

    Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or

    YüksekCVSS 8,1KEVSilahlaştırılmışEPSS %46

    paloaltonetworks · pan-os19 Tem 2019

  • CVE-2019-14205
    49Planlayın

    A Local File Inclusion vulnerability in the Nevma Adaptive Images plugin before 0.6.67 for WordPress allows remote attackers to retrieve arb

    YüksekCVSS 7,5Kavram kanıtıEPSS %63

    nevma · adaptive images21 Tem 2019

  • CVE-2019-10173
    68Bu hafta

    It was found that xstream API version 1.4.10 before 1.4.11 introduced a regression for a previous deserialization flaw.

    KritikCVSS 9,8İstismar yokEPSS %95

    xstream · xstream23 Tem 2019

  • CVE-2019-14241
    51Planlayın

    HAProxy through 2.0.2 allows attackers to cause a denial of service (ha_panic) via vectors related to htx_manage_client_side_cookies in prot

    YüksekCVSS 7,5İstismar yokEPSS %70

    haproxy · haproxy23 Tem 2019

  • CVE-2019-11703
    42Planlayın

    A flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in parser_get_next_char when processing certain email messages,

    KritikCVSS 9,8Kavram kanıtıEPSS %10

    mozilla · thunderbird23 Tem 2019

  • CVE-2019-11704
    42Planlayın

    A flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in icalmemory_strdup_and_dequote when processing certain email

    KritikCVSS 9,8Kavram kanıtıEPSS %10

    mozilla · thunderbird23 Tem 2019

  • CVE-2019-11707
    76Bu hafta

    A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop.

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %37

    mozilla · firefox23 Tem 2019

  • CVE-2019-11708
    87Hemen

    Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxe

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %55

    mozilla · firefox23 Tem 2019

  • CVE-2019-11730
    32İzleyin

    A vulnerability exists where if a user opens a locally saved HTML file, this file can use file: URIs to access other files in the same direc

    OrtaCVSS 6,5Kavram kanıtıEPSS %20

    mozilla · firefox23 Tem 2019

  • CVE-2019-13990
    44Planlayın

    initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job descript

    KritikCVSS 9,8Kavram kanıtıEPSS %16

    softwareag · quartz26 Tem 2019

  • CVE-2019-10266
    34İzleyin

    An issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50.

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    ahsay · cloud backup suite26 Tem 2019

  • CVE-2019-10267
    58Planlayın

    An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.1.0.50.

    YüksekCVSS 8,8SilahlaştırılmışEPSS %75

    ahsay · cloud backup suite26 Tem 2019

  • CVE-2019-14322
    47Planlayın

    In Pallets Werkzeug before 0.15.5, SharedDataMiddleware mishandles drive names (such as C:) in Windows pathnames.

    YüksekCVSS 7,5Kavram kanıtıEPSS %55

    palletsprojects · werkzeug28 Tem 2019

  • CVE-2019-14378
    40Planlayın

    ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the firs

    YüksekCVSS 8,8Kavram kanıtıEPSS %16

    libslirp project · libslirp29 Tem 2019

  • CVE-2019-14271
    45Planlayın

    In Docker 19.03.x before 19.03.1 linked against the GNU C Library (aka glibc), code injection can occur when the nsswitch facility dynamical

    KritikCVSS 9,8Kavram kanıtıEPSS %18

    docker · docker29 Tem 2019

  • CVE-2019-3948
    38İzleyin

    The Amcrest IP2M-841B V2.520.AC00.18.R, Dahua IPC-XXBXX V2.622.0000000.9.R, Dahua IPC HX5X3X and HX4X3X V2.800.0000008.0.R, Dahua DH-IPC HX8

    YüksekCVSS 7,5Kavram kanıtıEPSS %25

    amcrest · ip2m-841b firmware29 Tem 2019