22 April 2019

8 results · Clear filters · Feed

• Unscored —
  CVE-2019-8452 Public exploit

  A hard-link created from log file archive of Check Point ZoneAlarm up to 15.4.062 or Check Point Endpoint Security clie…

  Check Point ZoneAlarm Check Point ZoneAlarm Check Point Endpoint Security client for Windows Windows Network devices
  Apr 22, 2019
• High 7.5
  CVE-2019-5427 Public exploit

  Billion laughs attack in c3p0

  c3p0 version < 0.9.5.4 may be exploited by a billion laughs attack when loading XML configuration due to missing protections against recursive entity expansion when loading configuration.

  c3p0 com.mchange:c3p0 c3p0 Debian Ubuntu Maven
  Apr 22, 2019
• Unscored —
  CVE-2019-9955 Public exploit Scanner template EPSS 21%

  On Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, …

  Apr 22, 2019
• Unscored —
  CVE-2019-11448 Public exploit EPSS 12%

  An issue was discovered in Zoho ManageEngine Applications Manager 11.0 through 14.0. An unauthenticated user can gain t…

  Apr 22, 2019
• Unscored —
  CVE-2019-11447 Public exploit EPSS 53%

  An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload proc…

  Apr 22, 2019
• Unscored —
  CVE-2019-11446 Public exploit

  An issue was discovered in ATutor through 2.2.4. It allows the user to run commands on the server with the teacher user…

  Apr 22, 2019
• Unscored —
  CVE-2019-11445 Public exploit EPSS 14%

  OpenKM 6.3.2 through 6.3.7 allows an attacker to upload a malicious JSP file into the /okm:root directories and move th…

  Apr 22, 2019
• Unscored —
  CVE-2019-11444 Public exploit EPSS 13%

  An issue was discovered in Liferay Portal CE 7.1.2 GA3. An attacker can use Liferay's Groovy script console to execute …

  Apr 22, 2019