Week 20, 2019
13–19 May 2019
Newly exploited 0
Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.
No newly exploited vulnerabilities were reported this week.
Critical new vulnerabilities
Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.
-
Critical 9.8
CVE-2019-0708 A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the ta…EPSS 100%
-
Critical 9.8
CVE-2018-14839 LG N1A1 NAS 3718.510 is affected by: Remote Command Execution. The impact is: execute arbitrary code (remote). The attack vector is: HTTP POST with parameters.EPSS 89%
- Critical 9.8 EPSS 84%
-
Critical 9.0
CVE-2019-4279 IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to execute arbitrary code on the system with a specially-crafted sequence of seriali…EPSS 80%
-
Critical 9.8
CVE-2019-3568 A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target phone number…EPSS 30%
Facebook · WhatsApp for Android · WhatsApp Business for Android · WhatsApp for iOS
- Critical 9.8 EPSS 6%
-
Critical 10.0
CVE-2018-4029 An exploitable code execution vulnerability exists in the HTTP request-parsing function of the NT9665X Chipset firmware running on the Anker Roav A1 Dashcam, v…EPSS 2.9%
- Critical 9.8 EPSS 2.8%
-
Critical 10.0
CVE-2018-4023 An exploitable code execution vulnerability exists in the XML_UploadFile Wi-Fi command of the NT9665X Chipset firmware, running on the Anker Roav A1 Dashcam, v…EPSS 2.8%
-
Critical 10.0
CVE-2018-4018 An exploitable firmware update vulnerability exists in the NT9665X Chipset firmware, running on Anker Roav A1 Dashcam version RoavA1SWV1.9. The HTTP server all…EPSS 2.3%
- Critical 9.8 EPSS 1.9%
- Critical 9.9 EPSS 1.5%
Not critical, but likely targeted
New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.
-
High 8.8
CVE-2019-1821 Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution VulnerabilitiesEPSS 98%
-
Unscored
CVE-2019-11600 A SQL injection vulnerability in the activities API in OpenProject before 8.3.2 allows a remote attacker to execute arbitrary SQL commands via the id parameter…EPSS 80%
-
Unscored
CVE-2019-9618 The GraceMedia Media Player plugin 1.0 for WordPress allows Local File Inclusion via the "cfg" parameter.EPSS 44%
-
Unscored
CVE-2018-19986 In the /HNAP1/SetRouterSettings message, the RemotePort parameter is vulnerable, and the vulnerability affects D-Link DIR-818LW Rev.A 2.05.B03 and DIR-822 B1 2…EPSS 42%
-
Unscored
CVE-2019-0725 A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets, aka 'Windows DHCP Server Remote Code Exe…EPSS 28%
Microsoft · Windows Server, version 1903 (Server Core installation) · Windows Server
-
Unscored
CVE-2018-14714 System command injection in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to execute system commands via the "load_script" URL parame…EPSS 27%
-
Unscored
CVE-2019-0940 A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory Corruption Vulnerabilit…EPSS 23%
Microsoft · Microsoft Edge · Internet Explorer 11 · Internet Explorer 10
- High 7.5 EPSS 22%
Advisories
- SUSE / openSUSE Security Updates 393 critical
- Debian Security (DSA / DLA) 181 critical
- Ubuntu Security Notices (USN) 18
- Oracle Linux Security Advisories (ELSA) 14
- CISA ICS & IT advisories 115 critical
- Amazon Linux Security Center (ALAS) 4
- BSI CERT-Bund (WID) 4
- Schneider Electric CPCERT 11 critical
- Rocky Linux Security Advisories 1
- ICSA-25-114-01 Schneider Electric Modicon Controllers (Update A) 22 CVEs
- SEVD-2019-134-11 Multiple Vulnerabilities in Modicon Controller Products 22 CVEs
- ICSA-19-134-07 ICSA-19-134-07 Siemens SCALANCE W1750D 5 CVEs
- ICSA-19-134-08 ICSA-19-134-08 Siemens SIMATIC PCS7, WinCC, TIA Portal (Update D) 3 CVEs
- ICSA-19-134-04 Siemens LOGO! 8 BM (Update A) 3 CVEs
- openSUSE-SU-2019:1399-1 Security update for jakarta-commons-fileupload 1 CVEs
- SUSE-SU-2019:1232-1 Security update for libxslt 1 CVEs
- DSA-4445-1 drupal7 - security update 1 CVEs
- ICSA-19-134-02 ICSA-19-134-02 Siemens SIMATIC WinCC and SIMATIC PCS 7 1 CVEs
- SUSE-SU-2019:1221-1 Security update for libxslt 1 CVEs