Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistMitreCVELIST:CVE-2019-19920
HistoryDec 22, 2019 - 5:07 p.m.

CVE-2019-19920

2019-12-2217:07:31
mitre
www.cve.org
11
sa-exim
arbitrary code execution
cve-2019-19920
greylisting.pm

AI Score

7.6

Confidence

High

EPSS

0.002

Percentile

53.5%

JSON

sa-exim 4.2.1 allows attackers to execute arbitrary code if they can write a .cf file or a rule. This occurs because Greylisting.pm relies on eval (rather than direct parsing and/or use of the taint feature). This issue is similar to CVE-2018-11805.

Related

nvd 4
openvas 18
nessus 26
debian 4
cve 4
debiancve 4
ubuntucve 4
prion 4
ubuntu 3
veracode 3
osv 8
redhatcve 3
cvelist 3
alpinelinux 3
amazon 1
mageia 1
freebsd 1
suse 1
almalinux 1
oraclelinux 1
redhat 1
rosalinux 1
nvd
nvd
CVE-2019-19920
2019-12-22 18:15:10
CVE-2018-11805
2019-12-12 23:15:11
CVE-2020-1931
2020-01-30 18:15:11
openvas
openvas
Debian: Security Advisory (DLA-2062-1)
2020-01-10 00:00:00
Ubuntu: Security Advisory (USN-4520-1)
2020-09-19 00:00:00
Huawei EulerOS: Security Advisory for spamassassin (EulerOS-SA-2021-1706)
2021-03-24 00:00:00
nessus
nessus
Debian DLA-2062-1 : sa-exim security update
2020-01-10 00:00:00
Ubuntu 16.04 LTS : Exim SpamAssassin vulnerability (USN-4520-1)
2020-09-18 00:00:00
EulerOS 2.0 SP5 : spamassassin (EulerOS-SA-2021-1706)
2021-03-24 00:00:00
debian
debian
[SECURITY] [DLA 2062-1] sa-exim security update
2020-01-09 17:00:46
[SECURITY] [DSA 4584-1] spamassassin security update
2019-12-14 15:20:46
[SECURITY] [DLA 2037-1] spamassassin security update
2019-12-16 13:12:53
cve
cve
CVE-2019-19920
2019-12-22 18:15:10
CVE-2018-11805
2019-12-12 23:15:11
CVE-2020-1931
2020-01-30 18:15:11
debiancve
debiancve
CVE-2019-19920
2019-12-22 18:15:10
CVE-2018-11805
2019-12-12 23:15:11
CVE-2020-1930
2020-01-30 18:15:11
ubuntucve
ubuntucve
CVE-2019-19920
2019-12-22 00:00:00
CVE-2018-11805
2019-12-12 00:00:00
CVE-2020-1931
2020-01-30 00:00:00
prion
prion
Design/Logic Flaw
2019-12-22 18:15:00
Design/Logic Flaw
2019-12-12 23:15:00
Command injection
2020-01-30 18:15:00
ubuntu
ubuntu
Exim SpamAssassin vulnerability
2020-09-18 00:00:00
SpamAssassin vulnerabilities
2020-01-13 00:00:00
SpamAssassin vulnerabilities
2020-01-15 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-09-21 06:21:37
Arbitrary Code Execution
2020-11-05 03:19:23
Arbitrary Command Execution
2020-08-11 03:23:26
osv
osv
sa-exim - security update
2020-01-09 00:00:00
sa-exim vulnerability
2020-09-18 21:07:05
CVE-2018-11805
2019-12-12 23:15:11
redhatcve
redhatcve
CVE-2018-11805
2019-12-18 20:56:08
CVE-2020-1931
2020-02-14 09:14:24
CVE-2020-1930
2020-02-14 09:14:23
cvelist
cvelist
CVE-2018-11805
2019-12-12 22:11:05
CVE-2020-1931
2020-01-30 17:38:42
CVE-2020-1930
2020-01-30 17:42:38
alpinelinux
alpinelinux
CVE-2018-11805
2019-12-12 23:15:11
CVE-2020-1930
2020-01-30 18:15:11
CVE-2020-1931
2020-01-30 18:15:11
amazon
amazon
Medium: spamassassin
2020-02-04 22:46:00
mageia
mageia
Updated spamassassin packages fix security vulnerabilities
2019-12-24 15:24:34
freebsd
freebsd
spamassassin -- multiple vulnerabilities
2019-12-11 00:00:00
suse
suse
Security update for spamassassin (important)
2020-04-04 00:00:00
almalinux
almalinux
Moderate: spamassassin security update
2020-11-03 12:21:29
oraclelinux
oraclelinux
spamassassin security update
2020-11-10 00:00:00
redhat
redhat
(RHSA-2020:4625) Moderate: spamassassin security update
2020-11-03 12:21:29
rosalinux
rosalinux
Advisory ROSA-SA-2021-1973
2021-07-02 18:08:24

AI Score

7.6

Confidence

High

EPSS

0.002

Percentile

53.5%

JSON
Related for CVELIST:CVE-2019-19920
nvd4openvas18nessus26debian4cve4debiancve4ubuntucve4prion4ubuntu3veracode3osv8redhatcve3cvelist3alpinelinux3amazon1mageia1freebsd1suse1almalinux1oraclelinux1redhat1rosalinux1