February 2019

6 results · Clear filters · Feed

• High 8.8
  CVE-2019-9082 Exploited Public exploit Scanner template EPSS 97%

  ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via public…

  Feb 24, 2019

  KEV Nov 3, 2021
• High 8.1
  CVE-2019-6340 Exploited Public exploit Scanner template EPSS 92%

  Drupal core - Highly critical - Remote Code Execution

  Some field types do not properly sanitize data from non-form sources in Drupal 8.5.x before 8.5.11 and Drupal 8.6.x before 8.6.10. This can lead to arbitrary PHP code execution in some cases. A site is only affected by this if one of the following conditions …

  Drupal Drupal core drupal/core drupal/drupal Web / CMS Packagist
  Feb 21, 2019

  KEV Mar 25, 2022
• High 7.5
  CVE-2019-8394 Exploited Public exploit EPSS 63%

  Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10012 allows remote attackers to upload arbitrary files via …

  Feb 17, 2019

  KEV Nov 3, 2021
• High 7.8
  CVE-2018-20250 Exploited · Ransomware Public exploit EPSS 96%

  In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field …

  Check Point Software Technologies WinRAR Network devices
  Feb 5, 2019

  KEV Feb 15, 2022
• Critical 9.8
  CVE-2018-20753 Exploited · Ransomware EPSS 30%

  Kaseya VSA RMM before R9.3 9.3.0.35, R9.4 before 9.4.0.36, and R9.5 before 9.5.0.5 allows unprivileged remote attackers…

  Feb 5, 2019

  KEV Apr 13, 2022
• Critical 9.8
  CVE-2017-18362 Exploited · Ransomware Scanner template EPSS 87%

  ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that…

  Feb 5, 2019

  KEV May 24, 2022