7100 matches found
Fedora 30 : gjs / mozjs60 (2019-c2ff49ef73)
Fix CVE-2019-11707 Fix CVE-2019-11708 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable...
CVE-2019-0959
creationtimestamp| type| source ---|---|--- 2019-06-24 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47028 2025-05-23 05:00:00+00:00| seen| https://projectzero.google/2025/05/the-windows-registry-adventure-7-attack-surface.html 2025-05-23 07:05:54+00:00| seen|...
Fedora Update for firefox FEDORA-2019-1ae01e6688
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Mozilla Fixes Second Actively-Exploited Firefox Flaw
UPDATE Mozilla has fixed a high-severity vulnerability in its Firefox browser being actively exploited in the wild. The vulnerability CVE-2019-11708 is separate from a critical flaw under active attack that was patched earlier this week CVE-2019-11707. However, both vulnerabilities were discovere...
Debian: Security Advisory (DLA-1829-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DSA-4466-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Warns of New Actively-Exploited WebLogic Flaw
Oracle said that a critical remote code execution flaw in its WebLogic Server is being actively exploited in the wild. The remote code execution flaw CVE-2019-2729 impacts a number of versions of Oracle’s WebLogic Server, used for building and deploying enterprise applications. The vulnerability...
CVE-2018-18472
Western Digital WD My Book Live and WD My Book Live Duo all versions have a root Remote Command Execution bug via shell metacharacters in the /api/1.0/rest/languageconfiguration language parameter. It can be triggered by anyone who knows the IP address of the affected device, as exploited in the...
Command injection
Cerio DT-300N 1.1.6 through 1.1.12 devices allow OS command injection because of improper input validation of the web-interface PING feature's use of Save.cgi to execute a ping command, as exploited in the wild in October 2018...
Fortinet FortiOS 5.4.6 <= 5.4.12 / 5.6.3 < 5.6.8 / 6.0.x < 6.0.5 SSL VPN Directory Traversal (FG-IR-18-384)
The remote host is running a version of FortiOS 5.4.6 prior or equal to 5.4.12, 5.6.3 prior to 5.6.8 or 6.0.x prior to 6.0.5. It is, therefore, affected by a directory traversal vulnerability in the SSL VPN web portal, due to an improper limitation of a pathname to a restricted Directory. An...
CVE-2017-18378
creationtimestamp| type| source ---|---|--- 2019-06-12 00:30:25+00:00| seen| https://t.me/cibsecurity/4847 2024-12-21 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-12-21 2024-12-23 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities -...
Debian DSA-4456-1 : exim4 - security update
The Qualys Research Labs reported a flaw in Exim, a mail transport agent. Improper validation of the recipient address in the delivermessage function may result in the execution of arbitrary commands. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
Ubuntu: Security Advisory (USN-4010-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-13379
creationtimestamp| type| source ---|---|--- 2019-06-05 00:26:15+00:00| seen| https://t.me/cibsecurity/4686 2019-08-14 01:53:52+00:00| exploited| https://t.me/Pen7esting/339 2019-08-27 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=414 2019-08-27 07:07:15+00:00| seen|...
CVE-2019-4279
creationtimestamp| type| source ---|---|--- 2019-06-04 17:26:24+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ibm/ibmwasdmgrjavadeserializationrce.rb 2019-06-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46969 2024-01-06...
CVE-2018-5405
creationtimestamp| type| source ---|---|--- 2019-06-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46956...
CVE-2018-5406
creationtimestamp| type| source ---|---|--- 2019-06-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46956...
CVE-2018-5404
creationtimestamp| type| source ---|---|--- 2019-06-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46956...