Services Tools Bundle

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-1559 Feb 27, 23:29 MEDIUM PATCH This Month

If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required.

Information Disclosure Node.js OpenSSL MySQL Debian +90

NVD

CVSS 3.1

5.9

EPSS

17.1%

CVE-2019-3822 Feb 06, 20:29 CRITICAL POC PATCH THREAT Act Now

libcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Buffer Overflow Stack Overflow Debian Oracle Red Hat +20

NVD

CVSS 3.1

9.8

EPSS

12.8%

CVE-2019-1559

EPSS 17% CVSS 5.9

MEDIUM PATCH This Month

Information Disclosure Node.js OpenSSL +92

NVD

CVE-2019-3822

EPSS 13% CVSS 9.8

CRITICAL POC PATCH THREAT Act Now

Buffer Overflow Stack Overflow Debian +22

NVD