May 2019

7 results · Clear filters · Feed

• Critical 9.8
  CVE-2019-9670 Exploited Public exploit Scanner template EPSS 100%

  mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML External Entity injection (X…

  May 29, 2019

  KEV Jan 10, 2022
• Critical 9.8
  CVE-2018-7841 Exploited Public exploit Scanner template EPSS 72%

  A SQL Injection (CWE-89) vulnerability exists in U.motion Builder software version 1.3.4 which could cause unwanted cod…

  U.motion U.motion Builder software version 1.3.4
  May 22, 2019

  KEV Apr 15, 2022
• Critical 9.0
  CVE-2019-4279 Public exploit EPSS 80%

  IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to execute arbitrary code on the system with…

  IBM WebSphere Application Server
  May 17, 2019
• Critical 9.8
  CVE-2019-0708 Exploited · Ransomware Public exploit EPSS 100%

  A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an una…

  Microsoft Windows Windows Server Windows
  May 16, 2019

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2013-7285 Public exploit Scanner template EPSS 84%

  Command Injection in Xstream

  Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been initialized, may allow a remote attacker to run arbitrary shell commands by manipulating the processed input stream when unmarshaling XML or any supported format. e.g.…

  com.thoughtworks.xstream:xstream libxstream-java libxstream-java Debian Ubuntu Maven
  May 15, 2019
• Critical 9.9
  CVE-2019-11510 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthen…

  May 8, 2019

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2017-18368 Exploited Public exploit EPSS 95%

  The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has a command injec…

  May 2, 2019

  KEV Aug 7, 2023