Week 15, 2019
8–14 April 2019
Newly exploited 0
Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.
No newly exploited vulnerabilities were reported this week.
Critical new vulnerabilities
Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.
- Critical 9.8 EPSS 22%
-
Critical 9.0
CVE-2019-4013 IBM BigFix Platform 9.5 could allow any authenticated user to upload any file to any location on the server with root privileges. This results in code executio…EPSS 13%
-
Critical 9.8
CVE-2019-10880 Within multiple XEROX products a vulnerability allows remote command execution on the Linux system, as the "nobody" user through a crafted "HTTP" request (OS C…EPSS 8.5%
Xerox · ColorQube 8700/8900 · WorkCentre 5945/5955 · Phaser 6700
- Critical 9.8 EPSS 5.2%
-
Critical 9.8
CVE-2019-0008 QFX5000 Series, EX4300, EX4600: A stack buffer overflow vulnerability in Packet Forwarding Engine manager (FXPC) processEPSS 4.5%
- Critical 9.1 EPSS 2.9%
-
Critical 9.4
CVE-2019-4210 IBM QRadar SIEM 7.3.2 could allow a user to bypass authentication exposing certain functionality which could lead to information disclosure or modification of …EPSS 2.2%
- Critical 9.8 EPSS 1.8%
- Critical 9.8 EPSS 1.7%
- Critical 9.8 EPSS 1.6%
- Critical 9.8 EPSS 1.4%
Not critical, but likely targeted
New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.
-
High 7.5
CVE-2019-0752 A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory …EPSS 82%
-
Unscored
CVE-2018-19300 On D-Link DAP-1530 (A1) before firmware version 1.06b01, DAP-1610 (A1) before firmware version 1.06b01, DWR-111 (A1) before firmware version 1.02v02, DWR-116 (…EPSS 74%
-
Unscored
CVE-2019-11072 lighttpd before 1.4.54 has a signed integer overflow, which might allow remote attackers to cause a denial of service (application crash) or possibly have unsp…EPSS 74%
- High 7.5 EPSS 73%
-
High 7.8
CVE-2019-0211 In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including…EPSS 65%
-
Unscored
CVE-2019-0698 A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Clie…EPSS 57%
- High 8.1 EPSS 55%
-
Unscored
CVE-2019-0726 A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Clie…EPSS 54%
Advisories
- SUSE / openSUSE Security Updates 42
- Debian Security (DSA / DLA) 11
- Ubuntu Security Notices (USN) 9
- CISA ICS & IT advisories 82 critical
- Oracle Linux Security Advisories (ELSA) 7
- BSI CERT-Bund (WID) 2
- Siemens ProductCERT 2
- Amazon Linux Security Center (ALAS) 1
- ICSA-19-099-05 ICSA-19-099-05 Siemens RUGGEDCOM ROX II 3 CVEs
- ICSA-19-099-02 ICSA-19-099-02 Siemens Spectrum Power 4.7 1 CVEs