September 2019

9 results · Clear filters · Feed

• High 7.5
  CVE-2019-1367 Exploited · Ransomware Public exploit EPSS 52%

  A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…

  Microsoft Internet Explorer 11 Internet Explorer 9 Internet Explorer 10 Windows
  Sep 23, 2019

  KEV Nov 3, 2021
• High 7.5
  CVE-2019-0207 Public exploit

  Path traversal attack on Windows platforms

  Tapestry processes assets `/assets/ctx` using classes chain `StaticFilesFilter -> AssetDispatcher -> ContextResource`, which doesn't filter the character `\`, so attacker can perform a path traversal attack to read any files on Windows platform.

  Apache Apache Tapestry org.apache.tapestry:tapestry-core Maven
  Sep 16, 2019
• High 8.8
  CVE-2019-10392 Public exploit EPSS 23%

  Improper Neutralization of Special Elements used in an OS Command in Jenkins Git Client Plugin

  Jenkins Git Client Plugin 2.8.4 and earlier and 3.0.0-rc did not properly restrict values passed as URL argument to an invocation of 'git ls-remote', resulting in OS command injection.

  Jenkins Project Jenkins Git client Plugin org.jenkins-ci.plugins:git-client Web / CMS Maven
  Sep 12, 2019
• High 7.8
  CVE-2019-1253 Exploited · Ransomware Public exploit EPSS 12%

  An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To …

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Sep 11, 2019

  KEV Mar 15, 2022
• High 7.8
  CVE-2019-1215 Exploited · Ransomware Public exploit EPSS 19%

  An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Wi…

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Sep 11, 2019

  KEV Nov 3, 2021
• High 7.5
  CVE-2019-12401 Public exploit

  Apache Solr vulnerable to XML Bomb

  Solr versions 1.3.0 to 1.4.1, 3.1.0 to 3.6.2 and 4.0.0 to 4.10.4 are vulnerable to an XML resource consumption attack (a.k.a. Lol Bomb) via it’s update handler.?By leveraging XML DOCTYPE and ENTITY type elements, the attacker can create a pattern that will ex…

  Apache Solr org.apache.solr:solr-core Maven
  Sep 10, 2019
• High 8.8
  CVE-2019-15949 Exploited Public exploit EPSS 77%

  Nagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to the server as the nagios…

  Sep 5, 2019

  KEV Nov 3, 2021
• High 8.8
  CVE-2019-5475 Public exploit EPSS 18%

  OS Command Injection in Nexus Yum Repository Plugin

  The Nexus Yum Repository Plugin in v2 is vulnerable to Remote Code Execution when instances using CommandLineExecutor.java are supplied vulnerable data, such as the Yum Configuration Capability.

  org.sonatype.nexus.plugins:nexus-yum-repository-plugin Maven
  Sep 3, 2019
• High 7.3
  CVE-2019-14811 Public exploit

  A flaw was found in, ghostscript versions prior to 9.50, in the .pdf_hook_DSC_Creator procedure where it did not proper…

  Artifex Software Ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  Sep 3, 2019