Week 38, 2019
16–22 September 2019
Newly exploited 0
Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.
No newly exploited vulnerabilities were reported this week.
Critical new vulnerabilities
Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.
-
Critical 9.8
CVE-2019-16057 The login_mgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection.EPSS 86%
- Critical 9.8 EPSS 18%
- Critical 9.8 EPSS 14%
- Critical 9.8 EPSS 8.8%
- Critical 9.8 EPSS 7.5%
-
Critical 9.9
CVE-2019-11211 TIBCO Enterprise Runtime for R Server Running On Linux With Containerized TERR Service Vulnerable To Remote Code ExecutionEPSS 3.7%
TIBCO Software · TIBCO Spotfire Analytics Platform for AWS Marketplace · TIBCO Enterprise Runtime for R - Server Edition
-
Critical 10.0
CVE-2019-11210 TIBCO Enterprise Runtime for R Server Exposes Remote Code ExecutionEPSS 3.7%
TIBCO Software · TIBCO Spotfire Analytics Platform for AWS Marketplace · TIBCO Enterprise Runtime for R - Server Edition
-
Critical 9.8
CVE-2019-5067 An uninitialized memory access vulnerability exists in the way Aspose.PDF 19.2 for C++ handles invalid parent object pointers. A specially crafted PDF can caus…EPSS 3.4%
-
Critical 9.8
CVE-2019-5066 An exploitable use-after-free vulnerability exists in the way LZW-compressed streams are processed in Aspose.PDF 19.2 for C++. A specially crafted PDF can caus…EPSS 2.4%
Not critical, but likely targeted
New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.
-
Unscored
CVE-2015-9406 Directory traversal vulnerability in the mTheme-Unus theme before 2.3 for WordPress allows an attacker to read arbitrary files via a .. (dot dot) in the files …EPSS 59%
- Unscored EPSS 46%
-
Unscored
CVE-2019-15001 The Jira Importers Plugin in Atlassian Jira Server and Data Cente from version with 7.0.10 before 7.6.16, from 7.7.0 before 7.13.8, from 8.0.0 before 8.1.3, fr…EPSS 11%
-
Unscored
CVE-2016-10972 The newspaper theme before 6.7.2 for WordPress has a lack of options access control via td_ajax_update_panel.EPSS 11%
-
Unscored
CVE-2016-10956 The mail-masta plugin 1.0 for WordPress has local file inclusion in count_of_send.php and csvexport.php.EPSS 11%
-
Unscored
CVE-2019-16692 phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter-result.php table parameter when action=add is used.EPSS 10%
-
Unscored
CVE-2019-16199 eQ-3 Homematic CCU2 before 2.47.18 and CCU3 before 3.47.18 allow Remote Code Execution by unauthenticated attackers with access to the web interface via an HTT…EPSS 8.7%
-
Unscored
CVE-2016-10960 The wsecure plugin before 2.4 for WordPress has remote code execution via shell metacharacters in the wsecure-config.php publish parameter.EPSS 8.7%
Advisories
- SUSE / openSUSE Security Updates 406 critical
- Debian Security (DSA / DLA) 14
- Oracle Linux Security Advisories (ELSA) 11
- Ubuntu Security Notices (USN) 9
- CISA ICS & IT advisories 31 critical
- BSI CERT-Bund (WID) 2
- Rocky Linux Security Advisories 1
- AlmaLinux Security Advisories 1
- CERT@VDE 1
- SICK PSIRT 1
- SUSE-SU-2019:2267-1 Security update for ardana-ansible, ardana-barbican, ardana-cinder, ardana-cluster, ardana-cobbler, ardana-db, ardana-designate, ardana-extensions-nsx, ardana-glance, ardana-heat, ardana-horizon, ardana-input-model, ardana-installer-ui, ardana-ironic, ardana-keystone, ardana-logging, ardana-magnum, ardana-monasca, ardana-mq, ardana-neutron, ardana-nova, ardana-octavia, ardana-opsconsole, ardana-opsconsole-ui, ardana-osconfig, ardana-service, ardana-ses, ardana-swift, ardana-tempest, crowbar-core 9 CVEs
- ICSA-19-260-01 Advantech WebAccess 4 CVEs
- SUSE-SU-2019:2399-1 Security update for python-urllib3 3 CVEs
- SUSE-SU-2019:2253-2 Security update for python-SQLAlchemy 2 CVEs
- openSUSE-SU-2019:2149-1 Security update for curl 2 CVEs
- SUSE-SU-2019:2381-1 Security update for curl 2 CVEs
- SUSE-SU-2019:14172-1 Security update for curl 1 CVEs