Week 37, 2019

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 10.0
  CVE-2019-5485 Command Injection in gitlabhook
  EPSS 59%
• Critical 9.8
  CVE-2019-14540 Polymorphic Typing issue in FasterXML jackson-databind
  EPSS 11%
• Critical 9.8
  CVE-2019-16335 Polymorphic Typing issue in FasterXML jackson-databind
  EPSS 5%
• Critical 9.8
  CVE-2019-16256 Some Samsung devices include the SIMalliance Toolbox Browser (aka S@T Browser) on the UICC, which might allow remote attackers to retrieve location and IMEI in…
  EPSS 4.9%
• Critical 9.8
  CVE-2019-16303 JHipster Kotlin using insecure source of randomness `RandomStringUtils` before v1.2.0
  EPSS 3.7%
• Critical 9.8
  CVE-2019-12405 Improper Authentication in Apache Traffic Control

  Apache · Traffic Control

  EPSS 3.5%
• Critical 9.8
  CVE-2019-16138 Use after free in image
  EPSS 2.5%
• Critical 9.8
  CVE-2019-16227 py-lmdb Invalid write operation
  EPSS 2%
• Critical 9.8
  CVE-2019-16139 Out of bounds access in compact_arena
  EPSS 1.9%
• Critical 9.8
  CVE-2019-16224 py-lmdb Invalid write operation
  EPSS 1.8%
• Critical 9.8
  CVE-2019-16225 py-lmdb Invalid write operation
  EPSS 1.8%
• Critical 9.8
  CVE-2019-16142 Improper Input Validation in renderdoc
  EPSS 1.8%
• Critical 9.8
  CVE-2019-16140 Use-after-free in chttp
  EPSS 1.6%
• Critical 9.1
  CVE-2019-10668 Missing Authentication for Critical Function in LibreNMS
  EPSS 1.6%
• Critical 9.8
  CVE-2019-10665 LibreNMS Information Disclosure
  EPSS 1.5%

All 17 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• Unscored
  CVE-2019-8451 The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.4.0 allows remote attackers to access the content of internal network resources via …

  Atlassian · Jira

  EPSS 94%
• Unscored
  CVE-2019-8449 The /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allows remote attackers to enumerate usernames via an information disclosure vulnera…

  Atlassian · Jira

  EPSS 86%
• Unscored
  CVE-2019-10669 An issue was discovered in LibreNMS through 1.47. There is a command injection vulnerability in html/includes/graphs/device/collectd.inc.php where user supplie…
  EPSS 81%
• Unscored
  CVE-2019-1252 An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Dis…

  Microsoft · Windows 10 Version 1903 for x64-based Systems · Windows Server, version 1903 (Server Core installation) · Windows 10 Version 1903 for ARM64-based Systems

  EPSS 60%
• Unscored
  CVE-2019-16313 ifw8 Router ROM v4.31 allows credential disclosure by reading the action/usermanager.htm HTML source code.
  EPSS 46%
• Unscored
  CVE-2019-16314 Indexhibit 2.1.5 allows a product reinstallation, with resultant remote code execution, via /ndxzstudio/install.php?p=2.
  EPSS 39%
• Unscored
  CVE-2019-16124 In YouPHPTube 7.4, the file install/checkConfiguration.php has no access control, which leads to everyone being able to edit the configuration file, and insert…
  EPSS 28%
• Unscored
  CVE-2019-0189 The java.io.ObjectInputStream is known to cause Java serialisation issues. This issue here is exposed by the "webtools/control/httpService" URL, and uses Java …

  Apache · OFBiz

  EPSS 24%