6932 matches found
CVE-2019-11447
creationtimestamp| type| source ---|---|--- 2019-04-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46698 2020-09-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48800 2024-11-14 06:07:03+00:00| seen| MISP/e0a2986c-7c54-4933-95c6-841854d50e7f...
CVE-2019-3396
creationtimestamp| type| source ---|---|--- 2019-04-13 13:20:12+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/ajankohtaista/atlassian-confluence-ohjelmiston-haavoittuvuutta-hyvaksikaytetaan-tietomurroissa 2019-04-19 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46731...
Wordpress Yellow Pencil Plugin Flaws Actively Exploited
The maker of a WordPress plugin, Yellow Pencil Visual Theme Customizer, is asking all users to immediately update after it was discovered to have software vulnerabilities that are being actively exploited. The attacker exploiting these flaws has been behind several other recent plugin attacks the...
CVE-2019-11196
An authentication bypass vulnerability in all versions of ValuePLUS Integrated University Management System IUMS allows unauthenticated, remote attackers to gain administrator privileges via the Teachers Web Panel TWP User ID or Password field. If exploited, the attackers could perform any action...
CVE-2019-9670
creationtimestamp| type| source ---|---|--- 2019-04-10 17:38:37+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/zimbraxxerce.rb 2019-04-12 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46693 2020-07-16 18:25:54+00:00| seen|...
Microsoft Windows Multiple Vulnerabilities (KB4493472)
This host is missing a critical security update according to Microsoft KB4493472 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...
MS XML Remote Code Execution Vulnerability
A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input. An attacker who successfully exploited the vulnerability could run malicious code remotely to take control of the user’s system. To exploit the vulnerability, an attacker could hos...
CVE-2019-0803
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka ‘Win32k Elevation of Privilege Vulnerability’. This CVE ID is unique from CVE-2019-0685, CVE-2019-0859. Recent assessments: gwillcox-r7 at October 20, 2020 7:06pm UT...
CVE-2019-0703
An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka ‘Windows SMB Information Disclosure Vulnerability’. This CVE ID is unique from CVE-2019-0704, CVE-2019-0821. Recent assessments: gwillcox-r7 at November 22, 2020 2:42am UTC reported...
CVE-2019-0797
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka ‘Win32k Elevation of Privilege Vulnerability’. This CVE ID is unique from CVE-2019-0808. Recent assessments: gwillcox-r7 at November 22, 2020 2:41am UTC reported:...
Slackware 14.0 / 14.1 / 14.2 / current : httpd (SSA:2019-096-01)
New httpd packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2019-096-01. The text itself is copyright C Slackware Linu...
CVE-2019-8558
creationtimestamp| type| source ---|---|--- 2019-04-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46650...
CVE-2019-8518
creationtimestamp| type| source ---|---|--- 2019-04-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46649...
CVE-2019-9792
creationtimestamp| type| source ---|---|--- 2019-03-31 06:29:47+00:00| seen| https://t.me/informationsecuritychannel/26012 2019-05-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46939...
Cybercriminals Have a Heyday with WinRAR Bug in Fresh Campaigns
A recently discovered vulnerability in the WinRAR file archival utility has been exploited in a slew of new campaigns, including one with a never-before-seen payload. The flurry of activity shows no sign of waning as cybercriminals continue to find success exploiting the bug. The campaigns take...
CVE-2019-9813
creationtimestamp| type| source ---|---|--- 2019-03-26 12:39:33+00:00| published-proof-of-concept| https://t.me/br0wsec/83 2019-03-26 12:41:31+00:00| published-proof-of-concept| https://t.me/antichat/4165 2019-04-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46646 2019-04-19...
CVE-2019-9791
creationtimestamp| type| source ---|---|--- 2019-03-26 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46613 2019-03-31 06:29:47+00:00| seen| https://t.me/informationsecuritychannel/26012...
Security Bulletin: Apache Axis as used in IBM QRadar SIEM is vulnerable to a possible man in the middle attack. (CVE-2012-5784)
Summary IBM QRadar / QRM / QVM / QRIF / QNI includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. Vulnerability Details CVEID: CVE-2012-5784 Description: Apache Axis 1.4, as used in multiple products, could allow a remote attacker to...