Archive

April 2019

Vulnerabilities first published in this month (UTC), newest first.

← March 2019 2019 / April May 2019 →

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

Critical 9.8

CVE-2019-3929 Exploited Public exploit Scanner template EPSS 99%

The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, B…

Crestron Crestron AirMedia, Barco WePresent, Extron ShareLink, Teq AV IT WIPS710, SHARP PN-L703WA, Optoma WPS-Pro, Blackbox HD WPS, InFocus LiteShow3, and InFocus LiteShow4.

Apr 30, 2019
KEV Apr 15, 2022
Critical 9.8

CVE-2018-20434 Public exploit EPSS 71%

LibreNMS arbitrary OS commands execution

LibreNMS 1.46 allows remote attackers to execute arbitrary OS commands by using the $_POST['community'] parameter to html/pages/addhost.inc.php during creation of a new device, and then making a /ajax_output.php?id=capture&format=text&type=snmpwalk&hostname=l…

librenms/librenms Packagist

Apr 24, 2019
Critical 9.8

CVE-2019-7139 Public exploit Scanner template EPSS 22%

Magento 2 Community Edition SQLi Vulnerability

An unauthenticated user can execute SQL statements that allow arbitrary read access to the underlying database, which causes sensitive data leakage. This issue is fixed in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2.

Magento Magento Commerce Magento Open Source Magento Web / CMS Packagist

Apr 10, 2019
Critical 9.0

CVE-2019-4013 Public exploit EPSS 13%

IBM BigFix Platform 9.5 could allow any authenticated user to upload any file to any location on the server with root p…

IBM BigFix Platform

Apr 10, 2019