Week 42, 2019

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2019-16278 Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via a crafted HTTP request.
  EPSS 99%
• Critical 9.8
  CVE-2019-2904 Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 11.1.1.9.0,…

  Oracle · Enterprise Repository · Rapid Planning

  EPSS 14%
• Critical 9.8
  CVE-2019-17195 Improper Check for Unusual or Exceptional Conditions in Connect2id Nimbus JOSE+JWT
  EPSS 11%
• Critical 9.8
  CVE-2019-17626 XML Injection in ReportLab
  EPSS 9.5%
• Critical 9.8
  CVE-2019-13116 Mulesoft Mule Unsafe Deserialization
  EPSS 5.1%
• Critical 9.0
  CVE-2019-17625 Rambox RCE Vulnerability
  EPSS 3%
• Critical 9.8
  CVE-2019-15260 Cisco Aironet Access Points Unauthorized Access Vulnerability

  Cisco · Cisco Aironet Access Point Software

  EPSS 3%
• Critical 9.9
  CVE-2019-10760 Sandbox Breakout / Arbitrary Code Execution in safer-eval

  snyk · safer-eval

  EPSS 2.9%
• Critical 9.8
  CVE-2019-17545 GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogr_expat.cpp when the 10MB threshold is exceeded.
  EPSS 2.6%
• Critical 9.8
  CVE-2019-16700 slub_events for Typo3 Arbitrary File Upload
  EPSS 2.5%
• Critical 9.8
  CVE-2019-13657 CA Performance Management 3.5.x, 3.6.x before 3.6.9, and 3.7.x before 3.7.4 have a default credential vulnerability that can allow a remote attacker to execute…

  CA Technologies, A Broadcom Company · CA Performance Management

  EPSS 2.5%
• Critical 9.8
  CVE-2019-16699 sr_freecap for Typo3 RCE Vulnerability
  EPSS 2.4%
• Critical 9.9
  CVE-2019-10458 Incorrect Authorization in Puppet Enterprise Pipeline Jenkins Plugin

  Jenkins Project · Jenkins Puppet Enterprise Pipeline

  EPSS 1.9%
• Critical 9.9
  CVE-2019-10759 Sandbox Breakout / Arbitrary Code Execution in safer-eval

  snyk · safer-eval

  EPSS 1.8%
• Critical 10.0
  CVE-2019-15066 A remote command execution vulnerability was discovered in HiNet GPON firmware < I040GWR190731 port 6998

  HiNET · GPON

  EPSS 1.6%

All 19 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• Unscored
  CVE-2019-17662 ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exists even when authentication is turned …
  EPSS 97%
• Unscored
  CVE-2019-17602 An issue was discovered in Zoho ManageEngine OpManager before 12.4 build 124089. The OPMDeviceDetailsServlet servlet is prone to SQL injection. Depending on th…
  EPSS 81%
• Unscored
  CVE-2019-14287 In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorr…
  EPSS 64%
• Unscored
  CVE-2019-17120 A stored and reflected cross-site scripting (XSS) vulnerability in WiKID 2FA Enterprise Server through 4.2.0-b2047 allow remote attackers to inject arbitrary w…
  EPSS 49%
• Unscored
  CVE-2019-2890 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 10.3.6.0.0,…

  Oracle · WebLogic Server

  EPSS 37%
• Unscored
  CVE-2019-17671 In WordPress before 5.2.4, unauthenticated viewing of certain content is possible because the static query property is mishandled.
  EPSS 37%
• High 7.5
  CVE-2019-11253 Kubernetes API Server JSON/YAML parsing vulnerable to resource exhaustion attack

  Kubernetes · Kubernetes

  EPSS 26%
• Unscored
  CVE-2019-8195 Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.00…

  Adobe · Adobe Acrobat and Reader

  EPSS 23%