İçeriğe atla
Noroxi

Yayın tarihine göre

Eylül 2019: sömürülen ve yeni ciddi CVE kayıtları

87 kayıt · 11 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2019-15858
    41Planlayın

    admin/includes/class.import.snippet.php in the "Woody ad snippets" plugin before 2.2.5 for WordPress allows unauthenticated options import,

    YüksekCVSS 8,8Kavram kanıtıEPSS %18

    webcraftic · woody ad snippets3 Eyl 2019

  • CVE-2019-15043
    49Planlayın

    In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use.

    YüksekCVSS 7,5Kavram kanıtıEPSS %63

    grafana · grafana3 Eyl 2019

  • CVE-2019-15889
    27İzleyin

    The download-manager plugin before 2.9.94 for WordPress has XSS via the category shortcode feature, as demonstrated by the orderby or search

    OrtaCVSS 6,1Kavram kanıtıEPSS %11

    w3eden · download manager3 Eyl 2019

  • CVE-2019-5475
    41Planlayın

    The Nexus Yum Repository Plugin in v2 is vulnerable to Remote Code Execution when instances using CommandLineExecutor.java are supplied vuln

    YüksekCVSS 8,8Kavram kanıtıEPSS %18

    sonatype · nexus repository manager3 Eyl 2019

  • CVE-2019-10709
    42Planlayın

    AsusPTPFilter.sys on Asus Precision TouchPad 11.0.0.25 hardware has a Pool Overflow associated with the \\.\AsusTP device, leading to a DoS

    KritikCVSS 9,8Kavram kanıtıEPSS %11

    asus · precision touchpad4 Eyl 2019

  • CVE-2019-15813
    45Planlayın

    Multiple file upload restriction bypass vulnerabilities in Sentrifugo 3.2 could allow authenticated users to execute arbitrary code via a we

    YüksekCVSS 8,8Kavram kanıtıEPSS %33

    sentrifugo · sentrifugo4 Eyl 2019

  • CVE-2019-14470
    49Planlayın

    cosenary Instagram-PHP-API (aka Instagram PHP API V2), as used in the UserPro plugin through 4.9.32 for WordPress, has XSS via the example/s

    OrtaCVSS 6,1Kavram kanıtıEPSS %82

    instagram-php-api project · instagram-php-api4 Eyl 2019

  • CVE-2019-15949
    88Hemen

    Nagios XI before 5.6.6 allows remote command execution as root.

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %77

    nagios · nagios xi5 Eyl 2019

  • CVE-2019-15954
    63Bu hafta

    An issue was discovered in Total.js CMS 12.0.0.

    KritikCVSS 9,9SilahlaştırılmışEPSS %78

    totaljs · total.js cms5 Eyl 2019

  • CVE-2019-15029
    39İzleyin

    FusionPBX 4.4.8 allows an attacker to execute arbitrary system commands by submitting a malicious command to the service_edit.php file (whic

    YüksekCVSS 8,8Kavram kanıtıEPSS %12

    fusionpbx · fusionpbx5 Eyl 2019

  • CVE-2019-15846
    50Planlayın

    Exim before 4.92.2 allows remote attackers to execute arbitrary code as root via a trailing backslash.

    KritikCVSS 9,8Kavram kanıtıEPSS %35

    exim · exim6 Eyl 2019

  • CVE-2019-14813
    42Planlayın

    A flaw was found in ghostscript, versions 9.x before 9.50, in the setsystemparams procedure where it did not properly secure its privileged

    KritikCVSS 9,8İstismar yokEPSS %10

    artifex · ghostscript6 Eyl 2019

  • CVE-2019-10891
    45Planlayın

    An issue was discovered in D-Link DIR-806 devices.

    KritikCVSS 9,8İstismar yokEPSS %19

    dlink · dir-806 firmware6 Eyl 2019

  • CVE-2019-16097
    33İzleyin

    core/api/user.go in Harbor 1.7.0 through 1.8.2 allows non-admin users to create admin accounts via the POST /api/users API, when Harbor is s

    OrtaCVSS 6,5Kavram kanıtıEPSS %22

    linuxfoundation · harbor8 Eyl 2019

  • CVE-2019-16113
    58Planlayın

    Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .jpg file name, and th

    YüksekCVSS 8,8SilahlaştırılmışEPSS %77

    bludit · bludit8 Eyl 2019

  • CVE-2019-16119
    46Planlayın

    SQL injection in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress exists via the admin/controllers/Albumsgalleries

    KritikCVSS 9,8Kavram kanıtıEPSS %24

    10web · photo gallery8 Eyl 2019

  • CVE-2019-16123
    35İzleyin

    In Kartatopia PilusCart 1.4.1, the parameter filename in the file catalog.php is mishandled, leading to ../ Local File Disclosure.

    YüksekCVSS 7,5Kavram kanıtıEPSS %16

    kartatopia · piluscart8 Eyl 2019

  • CVE-2019-16124
    47Planlayın

    In YouPHPTube 7.4, the file install/checkConfiguration.php has no access control, which leads to everyone being able to edit the configurati

    KritikCVSS 9,8İstismar yokEPSS %27

    youphptube · youphptube8 Eyl 2019

  • CVE-2019-10669
    52Planlayın

    An issue was discovered in LibreNMS through 1.47.

    YüksekCVSS 7,2SilahlaştırılmışEPSS %80

    librenms · librenms9 Eyl 2019

  • CVE-2019-15639
    37İzleyin

    main/translate.c in Sangoma Asterisk 13.28.0 and 16.5.0 allows a remote attacker to send a specific RTP packet during a call and cause a cra

    YüksekCVSS 7,5İstismar yokEPSS %21

    digium · asterisk9 Eyl 2019

  • CVE-2019-8449
    46Planlayın

    The /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allows remote attackers to enumerate usernames via an information

    OrtaCVSS 5,3Kavram kanıtıEPSS %84

    atlassian · jira11 Eyl 2019

  • CVE-2019-8451
    54Planlayın

    The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.4.0 allows remote attackers to access the content of internal net

    OrtaCVSS 6,5Kavram kanıtıEPSS %94

    atlassian · jira server11 Eyl 2019

  • CVE-2019-16098
    37İzleyin

    The driver in Micro-Star MSI Afterburner 4.6.2.15658 (aka RTCore64.sys and RTCore32.sys) allows any authenticated user to read and write to

    YüksekCVSS 7,8Kavram kanıtıEPSS %19

    msi · afterburner11 Eyl 2019

  • CVE-2019-0189
    46Planlayın

    The java.io.ObjectInputStream is known to cause Java serialisation issues.

    KritikCVSS 9,8İstismar yokEPSS %23

    apache · ofbiz11 Eyl 2019

  • CVE-2019-0787
    39İzleyin

    A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote De

    YüksekCVSS 8,8İstismar yokEPSS %12

    microsoft · windows 1011 Eyl 2019

  • CVE-2019-0788
    39İzleyin

    A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote De

    YüksekCVSS 8,8İstismar yokEPSS %12

    microsoft · windows 1011 Eyl 2019

  • CVE-2019-1208
    34İzleyin

    A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execut

    YüksekCVSS 7,5İstismar yokEPSS %12

    microsoft · internet explorer11 Eyl 2019

  • CVE-2019-1214
    61Bu hafta

    An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, a

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %1

    microsoft · windows 10 150711 Eyl 2019

  • CVE-2019-1215
    67Bu hafta

    An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of Pr

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %19

    microsoft · windows 10 150711 Eyl 2019

  • CVE-2019-1221
    36İzleyin

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scrip

    YüksekCVSS 7,5Kavram kanıtıEPSS %19

    microsoft · internet explorer11 Eyl 2019

  • CVE-2019-1240
    35İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %11

    microsoft · windows 1011 Eyl 2019

  • CVE-2019-1241
    36İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %17

    microsoft · windows 1011 Eyl 2019

  • CVE-2019-1242
    35İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %11

    microsoft · windows 1011 Eyl 2019

  • CVE-2019-1243
    37İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %18

    microsoft · windows 1011 Eyl 2019

  • CVE-2019-1244
    30İzleyin

    An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Informatio

    OrtaCVSS 6,5Kavram kanıtıEPSS %12

    microsoft · windows 1011 Eyl 2019

  • CVE-2019-1245
    30İzleyin

    An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Informatio

    OrtaCVSS 6,5Kavram kanıtıEPSS %12

    microsoft · windows 1011 Eyl 2019

  • CVE-2019-1246
    35İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %12

    microsoft · office11 Eyl 2019

  • CVE-2019-1247
    35İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %11

    microsoft · windows 1011 Eyl 2019

  • CVE-2019-1248
    35İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %11

    microsoft · windows 1011 Eyl 2019

  • CVE-2019-1249
    35İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %11

    microsoft · windows 1011 Eyl 2019

  • CVE-2019-1250
    37İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %18

    microsoft · windows 1011 Eyl 2019

  • CVE-2019-1252
    44Planlayın

    An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows

    OrtaCVSS 6,5İstismar yokEPSS %60

    microsoft · windows 1011 Eyl 2019

  • CVE-2019-1253
    64Bu hafta

    An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerab

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %11

    microsoft · windows 10 170311 Eyl 2019

  • CVE-2019-1257
    39İzleyin

    A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa

    YüksekCVSS 8,8İstismar yokEPSS %11

    microsoft · sharepoint enterprise server11 Eyl 2019

  • CVE-2019-1280
    37İzleyin

    A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An atta

    YüksekCVSS 7,8İstismar yokEPSS %18

    microsoft · windows 1011 Eyl 2019

  • CVE-2019-1290
    39İzleyin

    A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote De

    YüksekCVSS 8,8İstismar yokEPSS %12

    microsoft · windows 1011 Eyl 2019

  • CVE-2019-1291
    39İzleyin

    A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote De

    YüksekCVSS 8,8İstismar yokEPSS %12

    microsoft · windows 1011 Eyl 2019

  • CVE-2019-1297
    72Bu hafta

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka '

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %21

    microsoft · excel11 Eyl 2019

  • CVE-2019-1306
    44Planlayın

    A remote code execution vulnerability exists when Azure DevOps Server (ADO) and Team Foundation Server (TFS) fail to validate input properly

    KritikCVSS 9,8İstismar yokEPSS %16

    microsoft · team foundation server11 Eyl 2019

  • CVE-2019-16256
    70Bu hafta

    Some Samsung devices include the SIMalliance Toolbox Browser (aka S@T Browser) on the UICC, which might allow remote attackers to retrieve l

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %4

    trustedconnectivityalliance · s\@t browser12 Eyl 2019

  • CVE-2019-10392
    43Planlayın

    Jenkins Git Client Plugin 2.8.4 and earlier and 3.0.0-rc did not properly restrict values passed as URL argument to an invocation of 'git ls

    YüksekCVSS 8,8Kavram kanıtıEPSS %26

    jenkins · git client12 Eyl 2019

  • CVE-2019-12922
    29İzleyin

    A CSRF issue in phpMyAdmin 4.9.0.1 allows deletion of any server in the Setup page.

    OrtaCVSS 6,5Kavram kanıtıEPSS %10

    phpmyadmin · phpmyadmin13 Eyl 2019

  • CVE-2010-5333
    60Bu hafta

    The web server in Integard Pro and Home before 2.0.0.9037 and 2.2.x before 2.2.0.9037 has a buffer overflow via a long password in an admini

    KritikCVSS 9,8SilahlaştırılmışEPSS %16

    integard home project · integard home13 Eyl 2019

  • CVE-2019-11660
    40Planlayın

    Privileges manipulation in Micro Focus Data Protector, versions 10.00, 10.01, 10.02, 10.03, 10.04, 10.10, 10.20, 10.30, 10.40.

    YüksekCVSS 7,8SilahlaştırılmışEPSS %7

    microfocus · data protector13 Eyl 2019

  • CVE-2019-5485
    58Planlayın

    NPM package gitlabhook version 0.0.17 is vulnerable to a Command Injection vulnerability.

    KritikCVSS 10,0Kavram kanıtıEPSS %58

    gitlabhook project · gitlabhook13 Eyl 2019

  • CVE-2019-16313
    44Planlayın

    ifw8 Router ROM v4.31 allows credential disclosure by reading the action/usermanager.htm HTML source code.

    YüksekCVSS 7,5Kavram kanıtıEPSS %46

    ifw8 · fr6 firmware14 Eyl 2019

  • CVE-2019-16314
    51Planlayın

    Indexhibit 2.1.5 allows a product reinstallation, with resultant remote code execution, via /ndxzstudio/install.php?p=2.

    KritikCVSS 9,8İstismar yokEPSS %38

    indexhibit · indexhibit14 Eyl 2019

  • CVE-2019-14540
    42Planlayın

    A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10.

    KritikCVSS 9,8Kavram kanıtıEPSS %10

    fasterxml · jackson-databind15 Eyl 2019

  • CVE-2016-10956
    33İzleyin

    The mail-masta plugin 1.0 for WordPress has local file inclusion in count_of_send.php and csvexport.php.

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    mail-masta project · mail-masta16 Eyl 2019

  • CVE-2019-16057
    95Hemen

    The login_mgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %86

    dlink · dns-320 firmware16 Eyl 2019

  • CVE-2019-0195
    43Planlayın

    Manipulating classpath asset file URLs, an attacker could guess the path to a known file in the classpath and have it downloaded.

    KritikCVSS 9,8Kavram kanıtıEPSS %14

    apache · tapestry16 Eyl 2019

  • CVE-2019-8368
    38İzleyin

    OpenEMR v5.0.1-6 allows XSS.

    OrtaCVSS 6,1İstismar yokEPSS %45

    open-emr · openemr16 Eyl 2019

  • CVE-2019-5482
    44Planlayın

    Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.

    KritikCVSS 9,8İstismar yokEPSS %17

    haxx · curl16 Eyl 2019

  • CVE-2019-15001
    31İzleyin

    The Jira Importers Plugin in Atlassian Jira Server and Data Cente from version with 7.0.10 before 7.6.16, from 7.7.0 before 7.13.8, from 8.0

    YüksekCVSS 7,2İstismar yokEPSS %10

    atlassian · jira server19 Eyl 2019

  • CVE-2015-9406
    60Bu hafta

    Directory traversal vulnerability in the mTheme-Unus theme before 2.3 for WordPress allows an attacker to read arbitrary files via a ..

    YüksekCVSS 7,5SilahlaştırılmışEPSS %55

    mtheme-unus project · mtheme-unus20 Eyl 2019

  • CVE-2019-16692
    42Planlayın

    phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter-result.php table parameter when action=add is used.

    KritikCVSS 9,8Kavram kanıtıEPSS %10

    phpipam · phpipam22 Eyl 2019

  • CVE-2019-16702
    42Planlayın

    Integard Pro 2.2.0.9026 allows remote attackers to execute arbitrary code via a buffer overflow involving a long NoJs parameter to the /Logi

    KritikCVSS 9,8Kavram kanıtıEPSS %10

    integard pro project · integard pro22 Eyl 2019

  • CVE-2019-13063
    38İzleyin

    Within Sahi Pro 8.0.0, an attacker can send a specially crafted URL to include any victim files on the system via the script parameter on th

    YüksekCVSS 7,5Kavram kanıtıEPSS %27

    sahipro · sahi pro23 Eyl 2019

  • CVE-2019-1367
    76Bu hafta

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scrip

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %52

    microsoft · internet explorer23 Eyl 2019

  • CVE-2019-16746
    43Planlayın

    An issue was discovered in net/wireless/nl80211.c in the Linux kernel through 5.2.17.

    KritikCVSS 9,8Kavram kanıtıEPSS %12

    linux · linux kernel24 Eyl 2019

  • CVE-2019-16724
    61Bu hafta

    File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Exception Handler (SEH) bas

    KritikCVSS 9,8SilahlaştırılmışEPSS %72

    upredsun · file sharing wizard24 Eyl 2019

  • CVE-2019-16759
    99Hemen

    vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter in an ajax/render/widget_php routestring re

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    vbulletin · vbulletin24 Eyl 2019

  • CVE-2019-10405
    41Planlayın

    Jenkins 2.196 and earlier, LTS 2.176.3 and earlier printed the value of the "Cookie" HTTP request header on the /whoAmI/ URL, allowing attac

    OrtaCVSS 5,4Kavram kanıtıEPSS %65

    jenkins · jenkins25 Eyl 2019

  • CVE-2019-16701
    41Planlayın

    pfSense through 2.3.4 through 2.4.4-p3 allows Remote Code Injection via a methodCall XML document with a pfsense.exec_php call containing sh

    YüksekCVSS 8,8Kavram kanıtıEPSS %19

    netgate · pfsense25 Eyl 2019

  • CVE-2019-10098
    46Planlayın

    In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with mod_rewrite that were intended to be self-referential might be fooled by en

    OrtaCVSS 6,1Kavram kanıtıEPSS %73

    apache · http server25 Eyl 2019

  • CVE-2019-12650
    44Planlayın

    Cisco IOS XE Software Web UI Command Injection Vulnerabilities

    YüksekCVSS 8,8İstismar yokEPSS %28

    cisco · ios25 Eyl 2019

  • CVE-2015-9436
    21İzleyin

    The dynamic-widgets plugin before 1.5.11 for WordPress has XSS via the wp-admin/admin-ajax.php?action=term_tree prefix or widget_id paramete

    OrtaCVSS 5,4İstismar yokEPSS %1

    vivwebsolutions · dynamic widgets25 Eyl 2019

  • CVE-2019-10082
    41Planlayın

    In Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling could be made to read memory after being freed,

    KritikCVSS 9,1İstismar yokEPSS %16

    apache · http server26 Eyl 2019

  • CVE-2019-10092
    48Planlayın

    In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the mod_proxy error page.

    OrtaCVSS 6,1Kavram kanıtıEPSS %81

    apache · http server26 Eyl 2019

  • CVE-2019-10097
    44Planlayın

    In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol,

    YüksekCVSS 7,2İstismar yokEPSS %52

    apache · http server26 Eyl 2019

  • CVE-2019-16667
    51Planlayın

    diag_command.php in pfSense 2.4.4-p3 allows CSRF via the txtCommand or txtRecallBuffer field, as demonstrated by executing OS commands.

    YüksekCVSS 8,8Kavram kanıtıEPSS %54

    netgate · pfsense26 Eyl 2019

  • CVE-2019-16920
    99Hemen

    Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    dlink · dir-655 firmware27 Eyl 2019

  • CVE-2019-8074
    45Planlayın

    ColdFusion 2018- update 4 and earlier and ColdFusion 2016- update 11 and earlier have a Path Traversal vulnerability.

    KritikCVSS 9,8İstismar yokEPSS %18

    adobe · coldfusion27 Eyl 2019

  • CVE-2019-16928
    81Hemen

    Exim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than CVE-2019-15846.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %41

    exim · exim27 Eyl 2019

  • CVE-2019-16996
    32İzleyin

    In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/product/admin/product_admin.class.php via the admin/?n=product&c=product_

    YüksekCVSS 7,2Kavram kanıtıEPSS %12

    metinfo · metinfo30 Eyl 2019

  • CVE-2019-16997
    43Planlayın

    In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/language/admin/language_general.class.php via the admin/?n=language&c=lan

    YüksekCVSS 7,2Kavram kanıtıEPSS %49

    metinfo · metinfo30 Eyl 2019

  • CVE-2019-16932
    52Planlayın

    A blind SSRF vulnerability exists in the Visualizer plugin before 3.3.1 for WordPress via wp-json/visualizer/v1/upload-data.

    KritikCVSS 10,0Kavram kanıtıEPSS %39

    themeisle · visualizer30 Eyl 2019