Week 41, 2019
7–13 October 2019
Newly exploited 0
Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.
No newly exploited vulnerabilities were reported this week.
Critical new vulnerabilities
Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.
- Critical 9.8 EPSS 5.7%
- Critical 9.8 EPSS 5.4%
- Critical 9.8 EPSS 2.8%
- Critical 9.8 EPSS 2.4%
- Critical 9.1 EPSS 2.3%
-
Critical 9.9
CVE-2019-17536 Gila CMS through 1.11.4 allows Unrestricted Upload of a File with a Dangerous Type via the moveAction function in core/controllers/fm.php. The attacker needs t…EPSS 2.3%
-
Critical 9.3
CVE-2019-17535 Gila CMS through 1.11.4 allows blog-list.php XSS, in both the gila-blog and gila-mag themes, via the search parameter, a related issue to CVE-2019-9647.EPSS 2%
- Critical 9.1 EPSS 1.5%
- Critical 9.8 EPSS 1.2%
Not critical, but likely targeted
New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.
-
Unscored
CVE-2019-1358 A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Ex…EPSS 76%
Microsoft · Windows 10 Version 1903 for x64-based Systems · Windows Server, version 1903 (Server Core installation) · Windows 10 Version 1903 for ARM64-based Systems
-
High 7.8
CVE-2019-2215 A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerab…EPSS 72%
-
Unscored
CVE-2019-1166 A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC (Message Integrity Check) p…EPSS 68%
Microsoft · Windows 10 Version 1903 for x64-based Systems · Windows Server, version 1903 (Server Core installation) · Windows 10 Version 1903 for ARM64-based Systems
-
Unscored
CVE-2019-15226 Upon receiving each incoming request header data, Envoy will iterate over existing request headers to verify that the total size of the headers stays below a m…EPSS 65%
-
Unscored
CVE-2019-17506 There are some web interfaces without authentication requirements on D-Link DIR-868L B1-2.03 and DIR-817LW A1-1.04 routers. An attacker can get the router's us…EPSS 56%
-
Unscored
CVE-2019-17382 An issue was discovered in zabbix.php?action=dashboard.view&dashboardid=1 in Zabbix through 4.4. An attacker can bypass the login page and access the dashboard…EPSS 53%
-
Unscored
CVE-2019-17418 An issue was discovered in MetInfo 7.0. There is SQL injection via the admin/?n=language&c=language_general&a=doSearchParameter appno parameter, a different is…EPSS 48%
-
Unscored
CVE-2019-17503 An issue was discovered in Kirona Dynamic Resource Scheduling (DRS) 5.5.3.5. An unauthenticated user can access /osm/REGISTER.cmd (aka /osm_tiles/REGISTER.cmd)…EPSS 48%
Advisories
- SUSE / openSUSE Security Updates 322 critical
- Debian Security (DSA / DLA) 113 critical
- Amazon Linux Security Center (ALAS) 7
- Ubuntu Security Notices (USN) 6
- CISA ICS & IT advisories 61 critical
- BSI CERT-Bund (WID) 4
- Siemens ProductCERT 2
- CERT@VDE 1
- Oracle Linux Security Advisories (ELSA) 1
- DLA-1955-1 tcpdump - security update 24 CVEs
- DLA-1953-1 clamav - security update 2 CVEs
- SUSE-SU-2019:1368-2 Recommended update for sles12sp3-docker-image, sles12sp4-image, system-user-root 1 CVEs
- SUSE-SU-2019:1212-2 Security update for jakarta-commons-fileupload 1 CVEs
- DLA-1956-1 ruby-openid - security update 1 CVEs
- ICSA-19-281-01 SMA Solar Technology AG Sunny WebBox 1 CVEs