CVE-2019-9388
published 2019-09-27CVE-2019-9388: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth service…
PriorityP339high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EPSS
0.80%
53.2th percentile
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-117567437
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Nuclei
Ignite Realtime Openfire <=4.4.2 - Server-Side Request Forgery
nuclei·CVSS 9.8
CVE-2019-18394 [CRITICAL] Ignite Realtime Openfire <=4.4.2 - Server-Side Request Forgery
Ignite Realtime Openfire =4.4.3) to fix this vulnerability.
reference:
- https://swarm.ptsecurity.com/openfire-admin-console/
- https://github.com/igniterealtime/Openfire/pull/1497
- https://github.com/sobinge/nuclei-templates
- https://github.com/ARPSyndicate/kenzer-templates
- https://nvd.nist.gov/vuln/detail/CVE-2019-18394
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cvss-score: 9.8
cve-id: CVE-2019-18394
cwe-id: CWE-918
epss-score: 0.9388
epss-percentile: 0.99872
cpe: cpe:2.3:a:igniterealtime:openfire:*:*:*:*:*:*:*:*
metadata:
max-request: 1
verified: true
vendor: igniterealtime
product: openfire
shodan-query:
- http.title:"openfire admin console"
- http.title:"openfire"
fofa-query:
- title="openfire"
- title="openfire admin console"
google-query:
- intitl
No writeups or analysis indexed.
2019-09-27
Published