İçeriğe atla
Noroxi

Yayın tarihine göre

Ekim 2019: sömürülen ve yeni ciddi CVE kayıtları

99 kayıt · 7 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2019-15039
    43Planlayın

    An issue was discovered in JetBrains TeamCity 2018.2.4.

    KritikCVSS 9,8Kavram kanıtıEPSS %13

    jetbrains · teamcity1 Eki 2019

  • CVE-2019-12630
    59Planlayın

    Cisco Security Manager Java Deserialization Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %65

    cisco · security manager2 Eki 2019

  • CVE-2019-16328
    60Bu hafta

    In RPyC 4.1.x through 4.1.1, a remote attacker can dynamically modify object attributes to construct a remote procedure call that executes c

    YüksekCVSS 7,5SilahlaştırılmışEPSS %13

    rpyc project · rpyc3 Eki 2019

  • CVE-2019-11932
    48Planlayın

    A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in W

    YüksekCVSS 8,8Kavram kanıtıEPSS %44

    whatsapp · whatsapp3 Eki 2019

  • CVE-2019-17132
    43Planlayın

    vBulletin through 5.5.4 mishandles custom avatars.

    KritikCVSS 9,8Kavram kanıtıEPSS %11

    vbulletin · vbulletin4 Eki 2019

  • CVE-2019-16891
    52Planlayın

    Liferay Portal CE 6.2.5 allows remote command execution because of deserialization of a JSON payload.

    KritikCVSS 9,8Kavram kanıtıEPSS %44

    liferay · liferay portal4 Eki 2019

  • CVE-2019-17199
    60Bu hafta

    www/getfile.php in WPO WebPageTest 19.04 on Windows allows Directory Traversal (for reading arbitrary files) because of an unanchored regula

    YüksekCVSS 7,5SilahlaştırılmışEPSS %9

    webpagetest · webpagetest5 Eki 2019

  • CVE-2019-17240
    51Planlayın

    bl-kernel/security.class.php in Bludit 3.9.2 allows attackers to bypass a brute-force protection mechanism by using many different forged X-

    KritikCVSS 9,8Kavram kanıtıEPSS %39

    bludit · bludit6 Eki 2019

  • CVE-2019-17187
    33İzleyin

    /var/WEB-GUI/cgi-bin/downloadfile.cgi on FiberHome HG2201T 1.00.M5007_JS_201804 devices allows pre-authentication Directory Traversal for re

    YüksekCVSS 7,5İstismar yokEPSS %10

    fiberhome · hg2201t firmware8 Eki 2019

  • CVE-2019-10969
    31İzleyin

    Moxa EDR 810, all versions 5.1 and prior, allows an authenticated attacker to abuse the ping feature to execute unauthorized commands on the

    YüksekCVSS 7,2Kavram kanıtıEPSS %10

    moxa · edr-810 firmware8 Eki 2019

  • CVE-2019-13051
    39İzleyin

    Pi-Hole 4.3 allows Command Injection.

    YüksekCVSS 8,8Kavram kanıtıEPSS %12

    pi-hole · pi-hole9 Eki 2019

  • CVE-2019-17382
    52Planlayın

    An issue was discovered in zabbix.php?action=dashboard.view&dashboardid=1 in Zabbix through 4.4.

    KritikCVSS 9,1Kavram kanıtıEPSS %54

    zabbix · zabbix9 Eki 2019

  • CVE-2019-15226
    49Planlayın

    Upon receiving each incoming request header data, Envoy will iterate over existing request headers to verify that the total size of the head

    YüksekCVSS 7,5İstismar yokEPSS %64

    envoyproxy · envoy9 Eki 2019

  • CVE-2019-15859
    48Planlayın

    Password disclosure in the web interface on socomec DIRIS A-40 devices before 48250501 allows a remote attacker to get full access to a devi

    KritikCVSS 9,8Kavram kanıtıEPSS %31

    socomec · diris a-40 firmware9 Eki 2019

  • CVE-2019-17124
    46Planlayın

    Kramer VIAware 2.5.0719.1034 has Incorrect Access Control.

    KritikCVSS 9,8Kavram kanıtıEPSS %22

    kramerav · viaware9 Eki 2019

  • CVE-2019-15715
    37İzleyin

    MantisBT before 1.3.20 and 2.22.1 allows Post Authentication Command Injection, leading to Remote Code Execution.

    YüksekCVSS 7,2Kavram kanıtıEPSS %30

    mantisbt · mantisbt9 Eki 2019

  • CVE-2019-17418
    43Planlayın

    An issue was discovered in MetInfo 7.0.

    YüksekCVSS 7,2Kavram kanıtıEPSS %49

    metinfo · metinfo9 Eki 2019

  • CVE-2019-1060
    39İzleyin

    A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code

    YüksekCVSS 8,8İstismar yokEPSS %13

    microsoft · windows 1010 Eki 2019

  • CVE-2019-1166
    43Planlayın

    A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC (Message

    OrtaCVSS 5,9İstismar yokEPSS %68

    microsoft · windows 1010 Eki 2019

  • CVE-2019-1307
    33İzleyin

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'C

    YüksekCVSS 7,5İstismar yokEPSS %10

    microsoft · chakracore10 Eki 2019

  • CVE-2019-1308
    33İzleyin

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'C

    YüksekCVSS 7,5İstismar yokEPSS %10

    microsoft · chakracore10 Eki 2019

  • CVE-2019-1311
    42Planlayın

    A remote code execution vulnerability exists when the Windows Imaging API improperly handles objects in memory, aka 'Windows Imaging API Rem

    YüksekCVSS 7,8İstismar yokEPSS %36

    microsoft · windows 1010 Eki 2019

  • CVE-2019-1315
    62Bu hafta

    An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Report

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %3

    microsoft · windows 10 160710 Eki 2019

  • CVE-2019-1322
    67Bu hafta

    An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %19

    microsoft · windows 10 180310 Eki 2019

  • CVE-2019-1327
    39İzleyin

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka '

    YüksekCVSS 8,8İstismar yokEPSS %13

    microsoft · excel10 Eki 2019

  • CVE-2019-1331
    41Planlayın

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka '

    YüksekCVSS 8,8İstismar yokEPSS %19

    microsoft · excel10 Eki 2019

  • CVE-2019-1333
    40Planlayın

    A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote De

    YüksekCVSS 8,8İstismar yokEPSS %15

    microsoft · windows 1010 Eki 2019

  • CVE-2019-1343
    29İzleyin

    A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'.

    OrtaCVSS 6,5Kavram kanıtıEPSS %10

    microsoft · windows 1010 Eki 2019

  • CVE-2019-1346
    29İzleyin

    A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'.

    OrtaCVSS 6,5Kavram kanıtıEPSS %10

    microsoft · windows 1010 Eki 2019

  • CVE-2019-1347
    30İzleyin

    A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'.

    OrtaCVSS 6,5Kavram kanıtıEPSS %14

    microsoft · windows 1010 Eki 2019

  • CVE-2019-1358
    54Planlayın

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %75

    microsoft · windows 1010 Eki 2019

  • CVE-2019-1359
    37İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %19

    microsoft · windows 1010 Eki 2019

  • CVE-2019-1372
    46Planlayın

    An remote code execution vulnerability exists when Azure App Service/ Antares on Azure Stack fails to check the length of a buffer prior to

    KritikCVSS 10,0İstismar yokEPSS %18

    microsoft · azure app service on azure stack10 Eki 2019

  • CVE-2015-9480
    34İzleyin

    The RobotCPA plugin 5 for WordPress has directory traversal via the f.php l parameter.

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    robot-cpa · robotcpa10 Eki 2019

  • CVE-2019-17503
    35İzleyin

    An issue was discovered in Kirona Dynamic Resource Scheduling (DRS) 5.5.3.5.

    OrtaCVSS 5,3Kavram kanıtıEPSS %48

    kirona · dynamic resource scheduling11 Eki 2019

  • CVE-2019-2215
    83Hemen

    A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel.

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %72

    google · android11 Eki 2019

  • CVE-2019-17506
    56Planlayın

    There are some web interfaces without authentication requirements on D-Link DIR-868L B1-2.03 and DIR-817LW A1-1.04 routers.

    KritikCVSS 9,8Kavram kanıtıEPSS %56

    dlink · dir-868l b1 firmware11 Eki 2019

  • CVE-2019-17508
    60Bu hafta

    On D-Link DIR-859 A3-1.06 and DIR-850 A1.13 devices, /etc/services/DEVICE.TIME.php allows command injection via the $SERVER variable.

    KritikCVSS 9,8SilahlaştırılmışEPSS %15

    dlink · dir-859 a3 firmware11 Eki 2019

  • CVE-2017-18638
    35İzleyin

    send_email in graphite-web/webapp/graphite/composer/views.py in Graphite through 1.1.5 is vulnerable to SSRF.

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    graphite project · graphite11 Eki 2019

  • CVE-2019-17538
    33İzleyin

    Jiangnan Online Judge (aka jnoj) 0.8.0 has Directory Traversal for file reading via the web/polygon/problem/viewfile?id=1&name=../ substring

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    jnoj · jiangnan online judge13 Eki 2019

  • CVE-2019-16278
    99Hemen

    Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via a c

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    nazgul · nostromo nhttpd14 Eki 2019

  • CVE-2019-16279
    36İzleyin

    A memory error in the function SSL_accept in nostromo nhttpd through 1.9.6 allows an attacker to trigger a denial of service via a crafted H

    YüksekCVSS 7,5Kavram kanıtıEPSS %19

    nazgul · nostromo nhttpd14 Eki 2019

  • CVE-2019-17195
    42Planlayın

    Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash

    KritikCVSS 9,8Kavram kanıtıEPSS %11

    connect2id · nimbus jose\+jwt15 Eki 2019

  • CVE-2019-17602
    63Bu hafta

    An issue was discovered in Zoho ManageEngine OpManager before 12.4 build 124089.

    KritikCVSS 9,8İstismar yokEPSS %81

    zohocorp · manageengine opmanager15 Eki 2019

  • CVE-2019-17626
    42Planlayın

    ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document

    KritikCVSS 9,8İstismar yokEPSS %10

    reportlab · reportlab16 Eki 2019

  • CVE-2019-17662
    68Bu hafta

    ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server.

    KritikCVSS 9,8SilahlaştırılmışEPSS %96

    cybelsoft · thinvnc16 Eki 2019

  • CVE-2019-2890
    39İzleyin

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services).

    YüksekCVSS 7,2Kavram kanıtıEPSS %36

    oracle · weblogic server16 Eki 2019

  • CVE-2019-2904
    43Planlayın

    Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component: ADF Faces).

    KritikCVSS 9,8İstismar yokEPSS %14

    oracle · application testing suite16 Eki 2019

  • CVE-2019-3010
    69Bu hafta

    Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver).

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %13

    oracle · solaris16 Eki 2019

  • CVE-2019-3025
    40Planlayın

    Vulnerability in the Oracle Hospitality RES 3700 component of Oracle Food and Beverage Applications.

    KritikCVSS 9,0Kavram kanıtıEPSS %14

    oracle · hospitality res 370016 Eki 2019

  • CVE-2019-17671
    32İzleyin

    In WordPress before 5.2.4, unauthenticated viewing of certain content is possible because the static query property is mishandled.

    OrtaCVSS 5,3Kavram kanıtıEPSS %36

    wordpress · wordpress17 Eki 2019

  • CVE-2019-14423
    41Planlayın

    A Remote Code Execution (RCE) issue in the addon CUx-Daemon 1.11a of the eQ-3 Homematic CCU-Firmware 2.35.16 until 2.45.6 allows remote auth

    YüksekCVSS 8,8İstismar yokEPSS %19

    eq-3 · cux-daemon17 Eki 2019

  • CVE-2019-15850
    40Planlayın

    eQ-3 HomeMatic CCU3 firmware version 3.41.11 allows Remote Code Execution in the ReGa.runScript method.

    YüksekCVSS 8,8İstismar yokEPSS %15

    eq-3 · homematic ccu3 firmware17 Eki 2019

  • CVE-2019-11253
    38İzleyin

    Kubernetes API Server JSON/YAML parsing vulnerable to resource exhaustion attack

    YüksekCVSS 7,5Kavram kanıtıEPSS %25

    kubernetes · kubernetes17 Eki 2019

  • CVE-2019-14287
    54Planlayın

    In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, a

    YüksekCVSS 8,8Kavram kanıtıEPSS %63

    sudo project · sudo17 Eki 2019

  • CVE-2019-17120
    39İzleyin

    A stored and reflected cross-site scripting (XSS) vulnerability in WiKID 2FA Enterprise Server through 4.2.0-b2047 allow remote attackers to

    OrtaCVSS 6,1İstismar yokEPSS %48

    wikidsystems · 2fa enterprise server17 Eki 2019

  • CVE-2019-8183
    39İzleyin

    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and e

    YüksekCVSS 8,8İstismar yokEPSS %13

    adobe · acrobat dc17 Eki 2019

  • CVE-2019-8195
    46Planlayın

    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and e

    KritikCVSS 9,8Kavram kanıtıEPSS %22

    adobe · acrobat dc17 Eki 2019

  • CVE-2019-8196
    46Planlayın

    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and e

    KritikCVSS 9,8Kavram kanıtıEPSS %22

    adobe · acrobat dc17 Eki 2019

  • CVE-2019-8197
    44Planlayın

    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and e

    KritikCVSS 9,8Kavram kanıtıEPSS %16

    adobe · acrobat dc17 Eki 2019

  • CVE-2019-18217
    36İzleyin

    ProFTPD before 1.3.6b and 1.3.7rc before 1.3.7rc2 allows remote unauthenticated denial-of-service due to incorrect handling of overly long c

    YüksekCVSS 7,5Kavram kanıtıEPSS %20

    proftpd · proftpd21 Eki 2019

  • CVE-2019-9491
    35İzleyin

    Trend Micro Anti-Threat Toolkit (ATTK) versions 1.62.0.1218 and below have a vulnerability that may allow an attacker to place malicious fil

    YüksekCVSS 7,8Kavram kanıtıEPSS %12

    trendmicro · anti-threat toolkit21 Eki 2019

  • CVE-2019-17424
    35İzleyin

    A stack-based buffer overflow in the processPrivilage() function in IOS/process-general.c in nipper-ng 0.11.10 allows remote attackers (serv

    YüksekCVSS 7,8Kavram kanıtıEPSS %13

    nipper-ng project · nipper-ng22 Eki 2019

  • CVE-2015-9499
    44Planlayın

    The Showbiz Pro plugin through 1.7.1 for WordPress has PHP code execution by uploading a .php file within a ZIP archive.

    KritikCVSS 9,8Kavram kanıtıEPSS %16

    themepunch · showbiz pro22 Eki 2019

  • CVE-2019-10475
    41Planlayın

    A reflected cross-site scripting vulnerability in Jenkins build-metrics Plugin allows attackers to inject arbitrary HTML and JavaScript into

    OrtaCVSS 6,1Kavram kanıtıEPSS %57

    jenkins · build-metrics23 Eki 2019

  • CVE-2019-18277
    33İzleyin

    A flaw was found in HAProxy before 2.0.6.

    YüksekCVSS 7,5İstismar yokEPSS %10

    haproxy · haproxy23 Eki 2019

  • CVE-2019-18370
    51Planlayın

    An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable.

    KritikCVSS 9,8Kavram kanıtıEPSS %40

    mi · millet router 3g firmware23 Eki 2019

  • CVE-2019-18371
    47Planlayın

    An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable.

    YüksekCVSS 7,5Kavram kanıtıEPSS %55

    mi · millet router 3g firmware23 Eki 2019

  • CVE-2019-18393
    25İzleyin

    PluginServlet.java in Ignite Realtime Openfire through 4.4.2 does not ensure that retrieved files are located under the Openfire home direct

    OrtaCVSS 5,3Kavram kanıtıEPSS %13

    igniterealtime · openfire24 Eki 2019

  • CVE-2019-18394
    49Planlayın

    A Server Side Request Forgery (SSRF) vulnerability in FaviconServlet.java in Ignite Realtime Openfire through 4.4.2 allows attackers to send

    KritikCVSS 9,8Kavram kanıtıEPSS %32

    igniterealtime · openfire24 Eki 2019

  • CVE-2019-8086
    37İzleyin

    Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a xml external entity injection vulnerability.

    YüksekCVSS 7,5Kavram kanıtıEPSS %22

    adobe · experience manager25 Eki 2019

  • CVE-2019-5127
    53Planlayın

    A command injection have been found in YouPHPTube Encoder.

    KritikCVSS 9,8Kavram kanıtıEPSS %45

    youphptube · youphptube encoder25 Eki 2019

  • CVE-2019-5128
    48Planlayın

    A command injection have been found in YouPHPTube Encoder.

    KritikCVSS 9,8Kavram kanıtıEPSS %30

    youphptube · youphptube encoder25 Eki 2019

  • CVE-2019-5129
    51Planlayın

    A command injection have been found in YouPHPTube Encoder.

    KritikCVSS 9,8Kavram kanıtıEPSS %38

    youphptube · youphptube encoder25 Eki 2019

  • CVE-2019-16662
    68Bu hafta

    An issue was discovered in rConfig 3.9.2.

    KritikCVSS 9,8SilahlaştırılmışEPSS %97

    rconfig · rconfig28 Eki 2019

  • CVE-2019-16663
    60Bu hafta

    An issue was discovered in rConfig 3.9.2.

    YüksekCVSS 8,8Kavram kanıtıEPSS %84

    rconfig · rconfig28 Eki 2019

  • CVE-2019-14927
    42Planlayın

    An issue was discovered on Mitsubishi Electric Europe B.V.

    YüksekCVSS 7,5Kavram kanıtıEPSS %40

    mitsubishielectric · smartrtu firmware28 Eki 2019

  • CVE-2019-14928
    34İzleyin

    An issue was discovered on Mitsubishi Electric Europe B.V.

    OrtaCVSS 5,4İstismar yokEPSS %43

    mitsubishielectric · smartrtu firmware28 Eki 2019

  • CVE-2019-14931
    56Planlayın

    An issue was discovered on Mitsubishi Electric Europe B.V.

    KritikCVSS 9,8Kavram kanıtıEPSS %57

    mitsubishielectric · smartrtu firmware28 Eki 2019

  • CVE-2010-4239
    43Planlayın

    Tiki Wiki CMS Groupware 5.2 has Local File Inclusion

    KritikCVSS 9,8Kavram kanıtıEPSS %13

    tiki · tikiwiki cms\/groupware28 Eki 2019

  • CVE-2019-11043
    99Hemen

    Underflow in PHP-FPM can lead to RCE

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    php · php28 Eki 2019

  • CVE-2019-14450
    42Planlayın

    A directory traversal vulnerability was discovered in RepetierServer.exe in Repetier-Server 0.8 through 0.91 that allows for the creation of

    KritikCVSS 9,8Kavram kanıtıEPSS %10

    repetier-server · repetier-server28 Eki 2019

  • CVE-2019-17181
    60Bu hafta

    A remote SEH buffer overflow has been discovered in IntraSrv 1.0 (2007-06-03).

    KritikCVSS 9,8SilahlaştırılmışEPSS %47

    intrasrv project · intrasrv28 Eki 2019

  • CVE-2019-18187
    68Bu hafta

    Trend Micro OfficeScan versions 11.0 and XG (12.0) could be exploited by an attacker utilizing a directory traversal vulnerability to extrac

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %25

    trendmicro · officescan28 Eki 2019

  • CVE-2019-15678
    43Planlayın

    TightVNC code version 1.3.10 contains heap buffer overflow in rfbServerCutText handler, which can potentially result code execution..

    KritikCVSS 9,8İstismar yokEPSS %12

    tightvnc · tightvnc29 Eki 2019

  • CVE-2019-15679
    43Planlayın

    TightVNC code version 1.3.10 contains heap buffer overflow in InitialiseRFBConnection function, which can potentially result code execution.

    KritikCVSS 9,8İstismar yokEPSS %11

    tightvnc · tightvnc29 Eki 2019

  • CVE-2019-15683
    45Planlayın

    TurboVNC server code contains stack buffer overflow vulnerability in commit prior to cea98166008301e614e0d36776bf9435a536136e.

    KritikCVSS 9,8İstismar yokEPSS %19

    turbovnc · turbovnc29 Eki 2019

  • CVE-2019-3978
    33İzleyin

    RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below allow remote unauthenticated attackers to trigger DNS queries via port 8291.

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    mikrotik · routeros29 Eki 2019

  • CVE-2019-5533
    22İzleyin

    In VMware SD-WAN by VeloCloud versions 3.x prior to 3.3.0, the VeloCloud Orchestrator parameter authorization check mistakenly allows enterp

    OrtaCVSS 4,3İstismar yokEPSS %17

    vmware · sd-wan by velocloud29 Eki 2019

  • CVE-2019-6841
    26İzleyin

    A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 with firmware (version prior to V3.10), Modicon

    OrtaCVSS 4,9İstismar yokEPSS %23

    schneider-electric · modicon m580 firmware29 Eki 2019

  • CVE-2019-6848
    44Planlayın

    A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 CPU (BMEx58*) and Modicon M580 communication mod

    YüksekCVSS 8,6İstismar yokEPSS %32

    schneider-electric · modicon m580 firmware29 Eki 2019

  • CVE-2019-6851
    39İzleyin

    A CWE-538: File and Directory Information Exposure vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum (al

    YüksekCVSS 7,5İstismar yokEPSS %29

    schneider-electric · modicon m580 firmware29 Eki 2019

  • CVE-2019-8287
    45Planlayın

    TightVNC code version 1.3.10 contains global buffer overflow in HandleCoRREBBP macro function, which can potentially result code execution.

    KritikCVSS 9,8İstismar yokEPSS %19

    tightvnc · tightvnc29 Eki 2019

  • CVE-2019-9757
    41Planlayın

    An issue was discovered in LabKey Server 19.1.0.

    YüksekCVSS 7,5Kavram kanıtıEPSS %37

    labkey · labkey server29 Eki 2019

  • CVE-2012-0694
    60Bu hafta

    SugarCRM CE <= 6.3.1 contains scripts that use "unserialize()" with user controlled input which allows remote attackers to execute arbitrary

    KritikCVSS 9,8SilahlaştırılmışEPSS %67

    sugarcrm · sugarcrm29 Eki 2019

  • CVE-2013-1391
    60Bu hafta

    Authentication bypass vulnerability in the the web interface in Hunt CCTV, Capture CCTV, Hachi CCTV, NoVus CCTV, and Well-Vision Inc DVR sys

    YüksekCVSS 7,5SilahlaştırılmışEPSS %76

    hachi · hv-04rd pro firmware30 Eki 2019

  • CVE-2019-18396
    33İzleyin

    An issue was discovered in certain Oi third-party firmware that may be installed on Technicolor TD5130v2 devices.

    YüksekCVSS 7,2Kavram kanıtıEPSS %16

    technicolor · td5130v2 firmware31 Eki 2019

  • CVE-2018-4064
    32İzleyin

    An exploitable unverified password change vulnerability exists in the ACEManager upload.cgi functionality of Sierra Wireless AirLink ES450 F

    YüksekCVSS 7,1İstismar yokEPSS %14

    sierrawireless · airlink es450 firmware31 Eki 2019

  • CVE-2019-5010
    36İzleyin

    An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.6.

    YüksekCVSS 7,5Kavram kanıtıEPSS %20

    python · python31 Eki 2019