Week 40, 2019
30 September – 6 October 2019
Newly exploited 0
Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.
No newly exploited vulnerabilities were reported this week.
Critical new vulnerabilities
Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.
- Critical 9.8 EPSS 45%
- Critical 9.8 EPSS 5.7%
-
Critical 9.8
CVE-2018-14881 The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_RESTART).EPSS 4.8%
- Critical 9.8 EPSS 4.7%
- Critical 9.8 EPSS 4.6%
-
Critical 9.8
CVE-2018-16451 The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:print_trans() for \MAILSLOT\BROWSE and \PIPE\LANMAN.EPSS 4%
-
Critical 9.8
CVE-2018-16230 The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_attr_print() (MP_REACH_NLRI).EPSS 3.7%
- Critical 9.8 EPSS 3.7%
-
Critical 9.8
CVE-2018-16228 The HNCP parser in tcpdump before 4.9.3 has a buffer over-read in print-hncp.c:print_prefix().EPSS 3.5%
-
Critical 9.8
CVE-2019-13658 CA Network Flow Analysis 9.x and 10.0.x have a default credential vulnerability that can allow a remote attacker to execute arbitrary commands and compromise s…EPSS 3.4%
CA Technologies, A Broadcom Company · CA Network Flow Analysis
- Critical 9.8 EPSS 3.4%
-
Critical 9.8
CVE-2019-17206 Uncontrolled deserialization of a pickled object in rediswrapper allows attackers to execute arbitrary scriptsEPSS 3.2%
- Critical 9.9 EPSS 2.8%
-
Critical 9.9
CVE-2019-13343 Butor Portal before 1.0.27 is affected by a Path Traversal vulnerability leading to a pre-authentication arbitrary file download. Effectively, a remote anonymo…EPSS 2.2%
- Critical 9.8
Not critical, but likely targeted
New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.
- Medium 6.5 EPSS 66%
-
Unscored
CVE-2019-16997 In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/language/admin/language_general.class.php via the admin/?n=language&c=language_general&a=doE…EPSS 48%
- High 8.8 EPSS 45%
-
Low 3.7
CVE-2019-17240 bl-kernel/security.class.php in Bludit 3.9.2 allows attackers to bypass a brute-force protection mechanism by using many different forged X-Forwarded-For or Cl…EPSS 41%
-
Unscored
CVE-2019-16932 A blind SSRF vulnerability exists in the Visualizer plugin before 3.3.1 for WordPress via wp-json/visualizer/v1/upload-data.EPSS 39%
-
Unscored
CVE-2019-15039 An issue was discovered in JetBrains TeamCity 2018.2.4. It had a possible remote code execution issue. This was fixed in TeamCity 2019.1.EPSS 13%
- High 8.5 EPSS 13%
-
Unscored
CVE-2019-16996 In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/product/admin/product_admin.class.php via the admin/?n=product&c=product_admin&a=dopara&app_…EPSS 12%
Advisories
- SUSE / openSUSE Security Updates 503 critical
- Debian Security (DSA / DLA) 152 critical
- Ubuntu Security Notices (USN) 82 critical
- BSI CERT-Bund (WID) 7
- Oracle Linux Security Advisories (ELSA) 5
- Amazon Linux Security Center (ALAS) 5
- CISA ICS & IT advisories 42 critical
- Rocky Linux Security Advisories 1
- AlmaLinux Security Advisories 1
- ICSA-19-274-01 Interpeak IPnet TCP/IP Stack (Update E) 11 CVEs
- ICSMA-19-274-01 Interpeak IPnet TCP/IP Stack (Update D) 11 CVEs
- DSA-4542-1 jackson-databind - security update 6 CVEs
- DLA-1943-1 jackson-databind - security update 4 CVEs
- USN-4146-2 clamav vulnerabilities 2 CVEs
- USN-4146-1 clamav vulnerabilities 2 CVEs
- openSUSE-SU-2019:2259-1 Security update for python-numpy 1 CVEs
- openSUSE-SU-2019:2227-1 Security update for python-numpy 1 CVEs
- openSUSE-SU-2019:2225-1 Security update for python-numpy 1 CVEs