CVE-2019-2725

creationtimestamp| type| source ---|---|--- 2019-04-29 05:38:37+00:00| seen| MISP/5cc68db3-cf08-48fa-b369-07fdc0a8ab16 2019-05-02 10:14:25+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/ajankohtaista/oracle-weblogic-palvelinohjelmiston-kriittista-haavoittuvuutta-hyvaksikaytetaan 2019-05-0...

CVE-2019-3844

creationtimestamp| type| source ---|---|--- 2019-04-26 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46760...

CVE-2019-5816

Process lifetime issue in Chrome in Google Chrome on Android prior to 74.0.3729.108 allowed a remote attacker to potentially persist an exploited process via a crafted HTML page...

CVE-2019-11537

creationtimestamp| type| source ---|---|--- 2019-04-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46753 2021-05-02 06:40:48+00:00| published-proof-of-concept| https://t.me/pwnwikizhchannel/311...

CVE-2019-2721

creationtimestamp| type| source ---|---|--- 2019-04-24 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46747...

Billion laughs attack in c3p0

c3p0 version 0.9.5.4 may be exploited by a billion laughs attack when loading XML configuration due to missing protections against recursive entity expansion when loading configuration...

CVE-2019-3842

creationtimestamp| type| source ---|---|--- 2019-04-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46743...

CVE-2019-8565

creationtimestamp| type| source ---|---|--- 2019-04-22 16:59:51+00:00| published-proof-of-concept| https://t.me/antichat/4586 2019-05-20 18:21:12+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/feedbackassistantroot.rb 2019-05-23 00:00:00+00:00|...

Design/Logic Flaw

DISPUTED An issue was discovered in OWASP ModSecurity Core Rule Set CRS through 3.1.0. /rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf allows remote attackers to cause a denial of service ReDOS by entering a specially crafted string with $a at the beginning and nested repetition operators. NOTE: t...

CVE-2019-2698

creationtimestamp| type| source ---|---|--- 2019-04-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46723...

Electrum Bitcoin wallets under siege

By Adam Thomas and Jérôme Segura, with additional contributions from Vasilios Hioueras and S!Ri Since at least late December 2018, many users of the popular Electrum Bitcoin wallet have fallen victim to a series of phishing attacks, which we estimate netted crooks well over 771 Bitcoins—an amount...

CVE-2019-0730

creationtimestamp| type| source ---|---|--- 2019-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46713...

CVE-2019-0732

creationtimestamp| type| source ---|---|--- 2019-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46716...

CVE-2019-0836

creationtimestamp| type| source ---|---|--- 2019-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46718 2024-03-15 08:58:02+00:00| seen| https://t.me/ptsoft/243 2024-05-03 09:04:40+00:00| published-proof-of-concept| https://t.me/ptsoft/270 2024-10-15 18:31:53+00:00|...

CVE-2019-0796

creationtimestamp| type| source ---|---|--- 2019-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46715...

CVE-2019-0735

creationtimestamp| type| source ---|---|--- 2019-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46712...

CVE-2019-0805

creationtimestamp| type| source ---|---|--- 2019-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46717...

Design/Logic Flaw

IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal can be exploited by app developers to download arbitrary files from the host OS and potentially carry out SSRF attacks. IBM X-Force ID: 159124...

CVE-2019-4203

IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal can be exploited by app developers to download arbitrary files from the host OS and potentially carry out SSRF attacks. IBM X-Force ID: 159124...

CVE-2019-4203

IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal can be exploited by app developers to download arbitrary files from the host OS and potentially carry out SSRF attacks. IBM X-Force ID: 159124...