Skip to content
OpenAdvisories

Archive

May 2019

Vulnerabilities first published in this month (UTC), newest first.

9 results · Clear filters · Feed

  • Critical 9.8
    CVE-2019-9874 Exploited Scanner template EPSS 84%

    Deserialization of Untrusted Data in the Sitecore.Security.AntiCSRF (aka anti CSRF) module in Sitecore CMS 7.0 to 7.2 a…

    KEV Mar 26, 2025
  • Critical 9.8
    CVE-2019-9670 Exploited Public exploit Scanner template EPSS 100%

    mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML External Entity injection (X…

    KEV Jan 10, 2022
  • Critical 9.8
    CVE-2018-7841 Exploited Public exploit Scanner template EPSS 72%

    A SQL Injection (CWE-89) vulnerability exists in U.motion Builder software version 1.3.4 which could cause unwanted cod…

    KEV Apr 15, 2022
  • Critical 9.8
    CVE-2019-11634 Exploited · Ransomware

    Citrix Workspace App before 1904 for Windows has Incorrect Access Control.

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2019-0708 Exploited · Ransomware Public exploit EPSS 100%

    A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an una…

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2018-14839 Exploited EPSS 89%

    LG N1A1 NAS 3718.510 is affected by: Remote Command Execution. The impact is: execute arbitrary code (remote). The atta…

    KEV Mar 25, 2022
  • Critical 9.8
    CVE-2019-3568 Exploited EPSS 30%

    A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RT…

    KEV Apr 19, 2022
  • Critical 9.9
    CVE-2019-11510 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthen…

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2017-18368 Exploited Public exploit EPSS 95%

    The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has a command injec…

    KEV Aug 7, 2023