CVE-2019-1367

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka ‘Scripting Engine Memory Corruption Vulnerability’. This CVE ID is unique from CVE-2019-1221. Recent assessments: gwillcox-r7 at November 22, 2020 2:47am UTC...

DELUCKS SEO <= 2.1.7 - Unauthenticated Options Update

This vulnerability was seen actively exploited in the wild on and around September 22nd 2019...

D-Link DNS-320 Remote Command Injection Vulnerability

The D-Link DNS-320 NAS-device is prone to a remote command injection vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

CVE-2019-11667

Unauthorized access to contact information in Micro Focus Service Manager, versions 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow unauthorized access to private data...

Design/Logic Flaw

Unauthorized access to contact information in Micro Focus Service Manager, versions 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow unauthorized access to private data...

CVE-2019-16173

creationtimestamp| type| source ---|---|--- 2019-09-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47386...

CVE-2019-16172

creationtimestamp| type| source ---|---|--- 2019-09-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47386...

CVE-2019-1244

creationtimestamp| type| source ---|---|--- 2019-09-12 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47382...

CVE-2019-1245

creationtimestamp| type| source ---|---|--- 2019-09-12 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47381...

Microsoft Excel 2010 Service Pack 2 Multiple Vulnerabilities (KB4475574)

This host is missing an important security update according to Microsoft KB4475574 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Office Multiple Vulnerabilities (Sep 2019) - Mac OS X

This host is missing a critical security update for Microsoft Office 2019 on Mac OS X according to Microsoft security update September 2019 SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Microsoft Windows Multiple Vulnerabilities (KB4515384)

This host is missing a critical security update according to Microsoft KB4515384 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Latest Microsoft Updates Patch 4 Critical Flaws In Windows RDP Client

Get your update caps on. Microsoft today released its monthly Patch Tuesday update for September 2019, patching a total of 79 security vulnerabilities in its software, of which 17 are rated critical, 61 as important, and one moderate in severity. Two of the security vulnerabilities patched by the...

September Patch Tuesday – 79 Vulns, 17 Critical, Remote Desktop Client, SharePoint, Exploited PrivEsc

This month’s Microsoft Patch Tuesday addresses 79 vulnerabilities with 17 of them labeled as Critical. Of the 17 Critical vulns, 8 are for scripting engines and browsers, 4 are for the Remote Desktop Client, and 3 are for SharePoint. In addition, Microsoft has again patched a critical vulnerabili...

Mail.ru: OOB XXE

Limited XXE on XML request processing led to blind SSRF possibility OOB XXE on one of Ext. B Mail.ru domains, which could be exploited as blind SSRF...

CVE-2019-12588

creationtimestamp| type| source ---|---|--- 2019-09-07 19:19:32+00:00| published-proof-of-concept| https://t.me/techb0ltGenona/947 2019-09-08 19:25:29+00:00| published-proof-of-concept| Telegram/0GL2HLFlH7purPAly9fE9htFJHCPdZf69GXFtJF8IKHA 2021-12-07 03:44:42+00:00| exploited|...

CVE-2019-12587

creationtimestamp| type| source ---|---|--- 2019-09-07 19:19:32+00:00| published-proof-of-concept| https://t.me/techb0ltGenona/947 2019-09-08 19:25:29+00:00| published-proof-of-concept| Telegram/0GL2HLFlH7purPAly9fE9htFJHCPdZf69GXFtJF8IKHA 2021-12-07 03:44:42+00:00| exploited|...

CVE-2019-12586

creationtimestamp| type| source ---|---|--- 2019-09-07 19:19:32+00:00| published-proof-of-concept| https://t.me/techb0ltGenona/947 2019-09-08 19:25:29+00:00| published-proof-of-concept| Telegram/0GL2HLFlH7purPAly9fE9htFJHCPdZf69GXFtJF8IKHA 2021-12-07 03:44:42+00:00| exploited|...

CVE-2017-1000119

creationtimestamp| type| source ---|---|--- 2019-09-06 15:22:57+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/octoberuploadbypassexec.rb 2019-09-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47376 2026-09-08 06:50:05+00:00|...

CVE-2011-2921

creationtimestamp| type| source ---|---|--- 2019-09-02 17:41:31+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/ktsusssuidprivesc.rb 2019-09-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47344 2021-09-21 04:41:50+00:00| seen...