2019-11-11

2019-11-12

2019-11-13

All (53) Critical (12) High (53) Medium (38) Low (2)

CVE-2019-18874 Nov 12, 02:15 HIGH PATCH This Week

psutil (aka python-psutil) through 5.6.5 can have a double free. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Python Information Disclosure Psutil

NVD GitHub

CVSS 3.1

7.5

EPSS

3.5%

CVE-2019-4652 Nov 12, 16:15 HIGH This Week

IBM Spectrum Protect Plus 10.1.0 through 10.1.4 uses insecure file permissions on restored files and directories in Windows which could allow a local user to obtain sensitive information or perform. Rated high severity (CVSS 7.1), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation IBM Microsoft Spectrum Protect Plus

NVD

CVSS 3.1

7.1

EPSS

0.3%

CVE-2019-1416 Nov 12, 19:15 HIGH PATCH This Week

An elevation of privilege vulnerability exists due to a race condition in Windows Subsystem for Linux, aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'. Rated high severity (CVSS 7.0).

Information Disclosure Race Condition Microsoft Windows Server 2016 Windows Server 2019 +1

NVD

CVSS 3.1

7.0

EPSS

0.4%

Prev Page 2 of 2