Exploited vulnerabilities (CISA KEV)

CVE-2019-3010 High · 8.8 KEV Urgent · 75 Public exploit Oct 16, 2019

Oracle Solaris Privilege Escalation Vulnerability

Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).

CVE-2019-16278 Critical · 9.8 KEV Urgent · 83 Public exploit CWE-22 Oct 14, 2019

Nostromo nhttpd Directory Traversal Vulnerability

Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via a crafted HTTP request.

CVE-2019-2215 High · 7.8 KEV Urgent · 76 Public exploit CWE-416 Oct 11, 2019

Android Kernel Use-After-Free Vulnerability

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095

CVE-2019-1322 High · 7.8 KEV Urgent · 86 Public exploit Ransomware Oct 10, 2019

Microsoft Windows Privilege Escalation Vulnerability

An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1320, CVE-2019-1340.

CVE-2019-1315 High · 7.8 KEV Urgent · 70 Public exploit Ransomware CWE-59 Oct 10, 2019

Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability

An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1339, CVE-2019-1342.

CVE-2019-16928 Critical · 9.8 KEV High · 63 CWE-787 Sep 27, 2019

Exim Out-of-bounds Write Vulnerability

Exim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than CVE-2019-15846. There is a heap-based buffer overflow in string_vformat in string.c involving a long EHLO command.

CVE-2019-16920 Critical · 9.8 KEV Urgent · 73 Public exploit CWE-78 Sep 27, 2019

D-Link Multiple Routers Command Injection Vulnerability

Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The issue occurs when the attacker sends an arbitrary input to a "PingTest" device common gateway interface that could lead to common injection. An attacker who successfully triggers the command injection could achieve full system compromise. Later, it was independently found that these are also affected: DIR-855L, DAP-1533, DIR-862L, DIR-615, DIR-835, and DIR-825.

CVE-2019-16759 Critical · 9.8 KEV Urgent · 83 Public exploit CWE-94 Sep 24, 2019

vBulletin PHP Module Remote Code Execution Vulnerability

vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter in an ajax/render/widget_php routestring request.

CVE-2019-1367 High · 7.5 KEV Urgent · 72 Public exploit Ransomware CWE-787 Sep 23, 2019

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1221.

CVE-2019-16057 Critical · 9.8 KEV Urgent · 77 Public exploit Ransomware CWE-78 Sep 16, 2019

D-Link DNS-320 Remote Code Execution Vulnerability

The login_mgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection.

CVE-2019-16256 Critical · 9.8 KEV High · 62 Sep 12, 2019

SIMalliance Toolbox Browser Command Injection Vulnerability

Some Samsung devices include the SIMalliance Toolbox Browser (aka S@T Browser) on the UICC, which might allow remote attackers to retrieve location and IMEI information, or retrieve other data or execute certain commands, via SIM Toolkit (STK) instructions in an SMS message, aka Simjacker.

CVE-2019-1297 High · 8.8 KEV High · 56 Sep 11, 2019

Microsoft Excel Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.

CVE-2019-1253 High · 7.8 KEV Urgent · 79 Public exploit Ransomware CWE-59 Sep 11, 2019

Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability

An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1215, CVE-2019-1278, CVE-2019-1303.

CVE-2019-1214 High · 7.8 KEV High · 52 CWE-119 Sep 11, 2019

Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability

An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common Log File System Driver Elevation of Privilege Vulnerability'.

CVE-2019-1215 High · 7.8 KEV Urgent · 80 Public exploit Ransomware CWE-269 Sep 11, 2019

Microsoft Windows Privilege Escalation Vulnerability

An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1253, CVE-2019-1278, CVE-2019-1303.

CVE-2019-15949 High · 8.8 KEV Urgent · 76 Public exploit CWE-78 Sep 5, 2019

Nagios XI Remote Code Execution Vulnerability

Nagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to the server as the nagios user, or access as the admin user via the web interface. The getprofile.sh script, invoked by downloading a system profile (profile.php?cmd=download), is executed as root via a passwordless sudo entry; the script executes check_plugin, which is owned by the nagios user. A user logged into Nagios XI with permissions to modify plugins, or the nagios user on the server, can modify the check_plugin executable and insert malicious commands to execute as root.

CVE-2019-13608 High · 7.5 KEV Urgent · 73 Public exploit Ransomware CWE-611 Aug 29, 2019

Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability

Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 (3.12.4000), and 7.6 LTSR before CU8 (3.0.8000) allows XXE attacks.

CVE-2019-15752 High · 7.8 KEV Urgent · 76 Public exploit CWE-732 Aug 28, 2019

Docker Desktop Community Edition Privilege Escalation Vulnerability

Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\DockerDesktop\version-bin\ as a low-privilege user, and then waiting for an admin or service user to authenticate with Docker, restart Docker, or run 'docker login' to force the command.

CVE-2019-15107 Critical · 9.8 KEV Urgent · 93 Public exploit Ransomware CWE-78 Aug 16, 2019

Webmin Command Injection Vulnerability

An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnerability.

CVE-2019-0344 Critical · 9.8 KEV High · 62 CWE-502 Aug 14, 2019

SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability

Due to unsafe deserialization used in SAP Commerce Cloud (virtualjdbc extension), versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, 1905, it is possible to execute arbitrary code on a target machine with 'Hybris' user rights, resulting in Code Injection.

CVE-2019-11581 Critical · 9.8 KEV Urgent · 73 Public exploit CWE-74 Aug 9, 2019

Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability

There was a server-side template injection vulnerability in Jira Server and Data Center, in the ContactAdministrators and the SendBulkMail actions. An attacker is able to remotely execute code on systems that run a vulnerable version of Jira Server or Data Center. All versions of Jira Server and Data Center from 4.4.0 before 7.6.14, from 7.7.0 before 7.13.5, from 8.0.0 before 8.0.3, from 8.1.0 before 8.1.2, and from 8.2.0 before 8.2.3 are affected by this vulnerability.

CVE-2019-0193 High · 7.2 KEV High · 66 Public exploit CWE-94 Aug 1, 2019

Apache Solr DataImportHandler Code Injection Vulnerability

In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's "dataConfig" parameter. The debug mode of the DIH admin screen uses this to allow convenient debugging / development of a DIH config. Since a DIH config can contain scripts, this parameter is a security risk. Starting with version 8.2.0 of Solr, use of this parameter requires setting the Java System property "enable.dih.dataConfigParam" to true.

CVE-2019-11708 Critical · 10.0 KEV Urgent · 74 Public exploit CWE-20 Jul 23, 2019

Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability

Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process opening web content chosen by a compromised child process. When combined with additional vulnerabilities this could result in executing arbitrary code on the user's computer. This vulnerability affects Firefox ESR < 60.7.2, Firefox < 67.0.4, and Thunderbird < 60.7.2.

CVE-2019-11707 High · 8.8 KEV Urgent · 70 Public exploit CWE-843 Jul 23, 2019

Mozilla Firefox and Thunderbird Type Confusion Vulnerability

A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Firefox ESR < 60.7.1, Firefox < 67.0.3, and Thunderbird < 60.7.2.

CVE-2019-1579 High · 8.1 KEV Urgent · 72 Public exploit Ransomware CWE-134 Jul 19, 2019

Palo Alto Networks PAN-OS Remote Code Execution Vulnerability

Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or GlobalProtect Gateway Interface enabled may allow an unauthenticated remote attacker to execute arbitrary code.