Microsoft Windows Multiple Vulnerabilities (KB4523205)

This host is missing a critical security update according to Microsoft KB4523205 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Microsoft Windows Multiple Vulnerabilities (KB4525237)

This host is missing a critical security update according to Microsoft KB4525237 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

CVE-2019-16113

creationtimestamp| type| source ---|---|--- 2019-11-12 21:52:58+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/bludituploadimagesexec.rb 2019-11-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47699 2020-06-04 18:18:28+00:00|...

Microsoft Patches RCE Bug Actively Under Attack

A critical bug in a Microsoft scripting engine, under active attack, has been patched as part of Microsoft’s Patch Tuesday security roundup. The vulnerability exists in Internet Explorer and allows an attacker to execute rogue code if a victim is coaxed into visiting a malicious web page, or, if...

CVE-2019-1429

creationtimestamp| type| source ---|---|--- 2019-11-12 20:21:26+00:00| exploited| https://t.me/ctinow/17594 2019-11-13 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=434 2019-11-13 20:30:12+00:00| exploited| https://t.me/CyberGovIL/624 2019-11-22 00:00:00+00:00| exploited...

Windows Certificate Dialog Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could then install programs; view, change or delete...

Fedora 31 : chromium (2019-688d52f9ff)

Update chromium to 78.0.3904.87. Fixes CVE-2019-13720 and CVE-2019-13721 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

CVE-2019-8195

creationtimestamp| type| source ---|---|--- 2019-11-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47609 2025-08-31 03:01:29+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d 2025-08-31 03:13:06+00:00| seen| MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57...

CVE-2019-8196

creationtimestamp| type| source ---|---|--- 2019-11-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47610 2025-08-31 03:01:28+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d 2025-08-31 03:13:05+00:00| seen| MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57...

CVE-2017-13156

creationtimestamp| type| source ---|---|--- 2019-11-07 02:36:10+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/android/local/janus.rb 2019-11-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47601 2021-08-17 13:01:03+00:00| seen|...

CVE-2019-8820

creationtimestamp| type| source ---|---|--- 2019-11-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47590 2024-01-31 08:01:46+00:00| seen| https://t.me/ctinow/176529 2024-01-31 09:41:54+00:00| seen| https://t.me/ctinow/176590 2024-01-31 10:11:33+00:00| seen|...

Fedora Update for php FEDORA-2019-7bb07c3b02

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : chromium (openSUSE-2019-2421)

This update for chromium fixes the following issues : Chromium was updated to 78.0.3904.87 boo1155643 : - CVE-2019-13721: Use-after-free in PDFium - CVE-2019-13720: Use-after-free in audio C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

CVE-2019-16662

creationtimestamp| type| source ---|---|--- 2019-11-03 12:10:08+00:00| published-proof-of-concept| https://t.me/antichat/6953 2019-11-03 13:03:58+00:00| seen| https://t.me/canyoupwnme/6111 2019-11-03 15:07:22+00:00| seen| https://t.me/DC8044Info/458 2019-11-06 19:54:12+00:00| seen|...

Google Discloses Chrome Flaw Exploited in the Wild

UPDATE Google is warning users of a high-severity vulnerability in its Chrome browser that is currently being exploited by attackers to hijack computers. The flaw CVE-2019-13720, discovered by security researchers Anton Ivanov and Alexey Kulaev at Kaspersky, exists in Google Chrome’s audio...

Google Chrome < 78.0.3904.87 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 78.0.3904.87. It is, therefore, affected by multiple vulnerabilities as referenced in the 201910stable-channel-update-for-desktop31 advisory. - Use after free in PDFium in Google Chrome prior to 78.0.3904.87 allowed a...

CVE-2019-8765

creationtimestamp| type| source ---|---|--- 2019-10-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47565 2024-01-31 11:36:30+00:00| seen| https://t.me/ctinow/176668...

Ubuntu: Security Advisory (USN-4166-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-18187

Trend Micro OfficeScan versions 11.0 and XG 12.0 could be exploited by an attacker utilizing a directory traversal vulnerability to extract files from an arbitrary zip file to a specific folder on the OfficeScan server, which could potentially lead to remote code execution RCE. The remote process...

vBulletin 'widget_php' Command Execution

The version of vBulletin running on the remote host is affected by an input-validation flaw in the 'widgetConfig' parameter to the script 'ajax/render/widgetphp' that allows command execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...