CVE-2019-2698

creationtimestamp| type| source ---|---|--- 2019-04-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46723...

Electrum Bitcoin wallets under siege

By Adam Thomas and Jérôme Segura, with additional contributions from Vasilios Hioueras and S!Ri Since at least late December 2018, many users of the popular Electrum Bitcoin wallet have fallen victim to a series of phishing attacks, which we estimate netted crooks well over 771 Bitcoins—an amount...

CVE-2019-0732

creationtimestamp| type| source ---|---|--- 2019-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46716...

CVE-2019-0730

creationtimestamp| type| source ---|---|--- 2019-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46713...

CVE-2019-0796

creationtimestamp| type| source ---|---|--- 2019-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46715...

CVE-2019-0836

creationtimestamp| type| source ---|---|--- 2019-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46718 2024-03-15 08:58:02+00:00| seen| https://t.me/ptsoft/243 2024-05-03 09:04:40+00:00| published-proof-of-concept| https://t.me/ptsoft/270 2024-10-15 18:31:53+00:00|...

CVE-2019-0735

creationtimestamp| type| source ---|---|--- 2019-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46712...

CVE-2019-0805

creationtimestamp| type| source ---|---|--- 2019-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46717...

Design/Logic Flaw

IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal can be exploited by app developers to download arbitrary files from the host OS and potentially carry out SSRF attacks. IBM X-Force ID: 159124...

CVE-2019-4203

IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal can be exploited by app developers to download arbitrary files from the host OS and potentially carry out SSRF attacks. IBM X-Force ID: 159124...

CVE-2019-4203

IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal can be exploited by app developers to download arbitrary files from the host OS and potentially carry out SSRF attacks. IBM X-Force ID: 159124...

CVE-2019-11447

creationtimestamp| type| source ---|---|--- 2019-04-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46698 2020-09-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48800 2024-11-14 06:07:03+00:00| seen| MISP/e0a2986c-7c54-4933-95c6-841854d50e7f...

CVE-2019-3396

creationtimestamp| type| source ---|---|--- 2019-04-13 13:20:12+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/ajankohtaista/atlassian-confluence-ohjelmiston-haavoittuvuutta-hyvaksikaytetaan-tietomurroissa 2019-04-19 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46731...

Wordpress Yellow Pencil Plugin Flaws Actively Exploited

The maker of a WordPress plugin, Yellow Pencil Visual Theme Customizer, is asking all users to immediately update after it was discovered to have software vulnerabilities that are being actively exploited. The attacker exploiting these flaws has been behind several other recent plugin attacks the...

CVE-2019-11196

An authentication bypass vulnerability in all versions of ValuePLUS Integrated University Management System IUMS allows unauthenticated, remote attackers to gain administrator privileges via the Teachers Web Panel TWP User ID or Password field. If exploited, the attackers could perform any action...

CVE-2019-9670

creationtimestamp| type| source ---|---|--- 2019-04-10 17:38:37+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/zimbraxxerce.rb 2019-04-12 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46693 2020-07-16 18:25:54+00:00| seen|...

Microsoft Windows Multiple Vulnerabilities (KB4493472)

This host is missing a critical security update according to Microsoft KB4493472 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

MS XML Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input. An attacker who successfully exploited the vulnerability could run malicious code remotely to take control of the user’s system. To exploit the vulnerability, an attacker could hos...

CVE-2019-0703

An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka ‘Windows SMB Information Disclosure Vulnerability’. This CVE ID is unique from CVE-2019-0704, CVE-2019-0821. Recent assessments: gwillcox-r7 at November 22, 2020 2:42am UTC reported...

CVE-2019-0803

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka ‘Win32k Elevation of Privilege Vulnerability’. This CVE ID is unique from CVE-2019-0685, CVE-2019-0859. Recent assessments: gwillcox-r7 at October 20, 2020 7:06pm UT...