Week 26, 2019
24–30 June 2019
Newly exploited 0
Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.
No newly exploited vulnerabilities were reported this week.
Critical new vulnerabilities
Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.
-
Critical 9.8
CVE-2019-1620 Cisco Data Center Network Manager Arbitrary File Upload and Remote Code Execution VulnerabilityEPSS 84%
- Critical 9.8 EPSS 83%
- Critical 9.8 EPSS 2.7%
Not critical, but likely targeted
New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.
- Medium 5.3 EPSS 79%
- Medium 6.5 EPSS 61%
-
Unscored
CVE-2019-7232 The ABB IDAL HTTP server is vulnerable to a buffer overflow when a long Host header is sent in a web request. The Host header value overflows a buffer and over…EPSS 52%
- Medium 5.4 EPSS 52%
- Medium 5.9 EPSS 45%
-
Unscored
CVE-2019-12583 Missing Access Control in the "Free Time" component of several Zyxel UAG, USG, and ZyWall devices allows a remote attacker to generate guest accounts by direct…EPSS 44%
-
Unscored
CVE-2019-13086 core/MY_Security.php in CSZ CMS 1.2.2 before 2019-06-20 has member/login/check SQL injection by sending a crafted HTTP User-Agent header and omitting the csrf_…EPSS 32%
- High 7.5 EPSS 30%
Advisories
- SUSE / openSUSE Security Updates 385 critical
- Ubuntu Security Notices (USN) 153 critical
- Debian Security (DSA / DLA) 144 critical
- CISA ICS & IT advisories 62 critical
- BSI CERT-Bund (WID) 3
- Amazon Linux Security Center (ALAS) 2
- Oracle Linux Security Advisories (ELSA) 21 critical
- openSUSE-SU-2019:1664-1 Security update for MozillaThunderbird 22 CVEs
- ICSA-19-178-05 Advantech WebAccess/SCADA 6 CVEs
- openSUSE-SU-2019:1606-1 Security update for MozillaThunderbird 6 CVEs
- DLA-1834-1 python2.7 - security update 6 CVEs
- openSUSE-SU-2019:1624-1 Security update for aubio 3 CVEs
- openSUSE-SU-2019:1618-1 Security update for aubio 3 CVEs
- USN-4038-2 bzip2 vulnerabilities 2 CVEs
- USN-4038-1 bzip2 vulnerabilities 2 CVEs
- ELSA-2019-1603 Critical: firefox security update (Oracle Linux 7) 2 CVEs
- DLA-1836-1 thunderbird - security update 2 CVEs