Archive

5 December 2019

Vulnerabilities first published on this day (UTC), newest first.

← November 2019 2019 / December /5 January 2020 →

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

High 8.8

CVE-2012-1592 Public exploit EPSS 29%

Unrestricted Upload of File with Dangerous Type in Apache Struts2

A local code execution issue exists in Apache Struts2 when processing malformed XSLT files, which could let a malicious user upload and execute arbitrary files.

libstruts1.2-java libstruts1.2-java org.apache.struts:struts2-core Maven

Dec 5, 2019
High 7.2

CVE-2019-19609 Public exploit EPSS 54%

Command Injection in strapi

The Strapi framework before 3.0.0-beta.17.8 is vulnerable to Remote Code Execution in the Install and Uninstall Plugin components of the Admin panel, because it does not sanitize the plugin name, and attackers can inject arbitrary shell commands to be execute…

strapi npm

Dec 5, 2019
Critical 9.8

CVE-2019-7195 Exploited · Ransomware Public exploit Scanner template EPSS 89%

This external control of file name or path vulnerability allows remote attackers to access or modify system files. To f…

Dec 5, 2019
KEV Jun 8, 2022
Critical 9.8

CVE-2019-7194 Exploited · Ransomware Public exploit Scanner template EPSS 83%

This external control of file name or path vulnerability allows remote attackers to access or modify system files. To f…

Dec 5, 2019
KEV Jun 8, 2022
Critical 9.8

CVE-2019-7192 Exploited · Ransomware Public exploit Scanner template EPSS 88%

This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix th…

Dec 5, 2019
KEV Jun 8, 2022