SecPod

Learn Search

Search across all Learn content

← Back to Security Research

SCAP Feed Release : 28-Jun-2019

The following SCAP content has been released to SCAP Repo and SecPod Saner Solution. SecPod Saner will automatically pull the relevant content on its next scheduled update.

Jun 27, 2019By Kumarswamy S2 min read

The following SCAP content has been released to SCAP Repo and SecPod Saner Solution. SecPod Saner will automatically pull the relevant content on its next scheduled update.

oval:org.secpod.oval:def:1502554 CVE-2019-11707
CVE-2019-11708
ELSA-2019-1604
ELSA-2019-1604 — Oracle firefox
oval:org.secpod.oval:def:1502555 CVE-2019-11707
CVE-2019-11708
ELSA-2019-1603
ELSA-2019-1603 — Oracle firefox
oval:org.secpod.oval:def:1801469 10314
CVE-2019-10691
[3.8] dovecot: Mishandling invalid UTF-8 characters by JSON encoder leading to possible DoS attack (CVE-2019-10691)
oval:org.secpod.oval:def:1801470 10562
CVE-2019-12735
[3.7] vim: arbitrary command execution in getchar.c (CVE-2019-12735)
oval:org.secpod.oval:def:1801471 10313
CVE-2019-10691
[3.9] dovecot: Mishandling invalid UTF-8 characters by JSON encoder leading to possible DoS attack (CVE-2019-10691)
oval:org.secpod.oval:def:1801472 10387
CVE-2019-11494
CVE-2019-11499
[3.10] dovecot: Multiple vulnerabilities (CVE-2019-11494, CVE-2019-11499)
oval:org.secpod.oval:def:1801474 10361
CVE-2019-7317
[3.10] libpng: use-after-free in png_image_free in png.c (CVE-2019-7317)
oval:org.secpod.oval:def:1801475 10501
CVE-2019-12295
[3.10] wireshark: dissection engine crash (CVE-2019-12295)
oval:org.secpod.oval:def:1801476 10511
CVE-2018-16860
[3.10] heimdal: S4U2Self with unkeyed checksum (CVE-2018-16860)
oval:org.secpod.oval:def:1801477 10568
CVE-2019-12749
[3.10] dbus: DBusServer DBUS_COOKIE_SHA1 authentication bypass (CVE-2019-12749)
oval:org.secpod.oval:def:1801478 10317
CVE-2019-11358
[3.10] drupal7: Cross Site Scripting (CVE-2019-11358)
oval:org.secpod.oval:def:1801479 10312
CVE-2019-10691
[3.10] dovecot: Mishandling invalid UTF-8 characters by JSON encoder leading to possible DoS attack (CVE-2019-10691)
oval:org.secpod.oval:def:1801480 10575
CVE-2019-12450
[3.10] glib: file permission vulnerability (CVE-2019-12450)
oval:org.secpod.oval:def:1801481 10590
CVE-2019-12435
CVE-2019-12436
[3.10] samba: Multiple vulnerabilities (CVE-2019-12435, CVE-2019-12436)
oval:org.secpod.oval:def:1801482 10431
CVE-2018-12558
[3.10] perl-email-address: DOS vulnerability in perl module Email::Address (CVE-2018-12558)
oval:org.secpod.oval:def:1801483 10367
CVE-2018-5743
CVE-2019-6467
[3.10] bind: Multiple vulnerabilities (CVE-2018-5743, CVE-2019-6467)
oval:org.secpod.oval:def:1801484 10409
CVE-2019-11555
[3.10] hostapd: EAP-pwd message reassembly issue with unexpected fragment (CVE-2019-11555)
oval:org.secpod.oval:def:1801485 10277
CVE-2019-11068
[3.10] libxslt: security framework bypass (CVE-2019-11068)
oval:org.secpod.oval:def:1801486 10414
CVE-2019-11555
[3.10] wpa_supplicant: EAP-pwd message reassembly issue with unexpected fragment (CVE-2019-11555)
oval:org.secpod.oval:def:1801487 10558
CVE-2019-12308
[3.10] py-django: AdminURLFieldWidget XSS (CVE-2019-12308)
oval:org.secpod.oval:def:1801488 10561
CVE-2019-12308
[3.7] py-django: AdminURLFieldWidget XSS (CVE-2019-12308)
oval:org.secpod.oval:def:1801489 10559
CVE-2019-12308
[3.9] py-django: AdminURLFieldWidget XSS (CVE-2019-12308)
oval:org.secpod.oval:def:1801490 10560
CVE-2019-12308
[3.8] py-django: AdminURLFieldWidget XSS (CVE-2019-12308)
oval:org.secpod.oval:def:705035 CVE-2017-12805
CVE-2017-12806
CVE-2018-14434
CVE-2018-15607
CVE-2018-16323
CVE-2018-16412
CVE-2018-16413
CVE-2018-16644
CVE-2018-16645
CVE-2018-17965
CVE-2018-17966
CVE-2018-18016
CVE-2018-18023
CVE-2018-18024
CVE-2018-18025
CVE-2018-18544
CVE-2018-20467
CVE-2019-10131
CVE-2019-10649
CVE-2019-10650
CVE-2019-11470
CVE-2019-11472
CVE-2019-11597
CVE-2019-11598
CVE-2019-7175
CVE-2019-7395
CVE-2019-7396
CVE-2019-7397
CVE-2019-7398
CVE-2019-9956
USN-4034-1
USN-4034-1 — imagemagick vulnerabilities
oval:org.secpod.oval:def:705041 CVE-2018-20843
USN-4040-1
USN-4040-1 — expat vulnerability
oval:org.secpod.oval:def:705042 CVE-2016-3189
CVE-2019-12900
USN-4038-1
USN-4038-1 — bzip2 vulnerabilities

Featured Posts

Open Beyond GitLab's Critical RCE: What CVE-2026-97229 Reveals About Exploitation, Patch Gaps, and Security Response
vulnerability researchBeyond GitLab's Critical RCE: What CVE-2026-97229 Reveals About Exploitation, Patch Gaps, and Security Response

CVE Research

Beyond GitLab's Critical RCE: What CVE-2026-97229 Reveals About Exploitation, Patch Gaps, and Security Response

Nov 6, 2026

Open Gorbag Targets Ukrainian Organizations with BeautyStealer and WinRAR Exploitation
malware researchGorbag Targets Ukrainian Organizations with BeautyStealer and WinRAR Exploitation

CVE Research

Gorbag Targets Ukrainian Organizations with BeautyStealer and WinRAR Exploitation

Gorbag uses spearphishing and weaponized WinRAR archives to deploy BeautyStealer against Ukrainian organizations. The malware steals browser credentials, VPN configuration files, and targeted documents before exfiltrating the data and deleting itself.

Nov 5, 2026

Open Synology NAS Under Siege: C3RB3R Ransomware Strikes Unpatched Devices
vulnerability researchSynology NAS Under Siege: C3RB3R Ransomware Strikes Unpatched Devices

CVE Research

Synology NAS Under Siege: C3RB3R Ransomware Strikes Unpatched Devices

Synology has warned customers about an ongoing wave of ransomware attacks targeting network-attached storage (NAS) devices running outdated versions of DiskStation Manager (DSM). The attacks have been associated with C3RB3R ransomware, a threat capable of encrypting stored files and demanding payment for their recovery.

Nov 4, 2026

Open CISA KEV Exploitation in October 2026: Threat Actors, CVEs and Attack Trend
threat intelligenceCISA KEV Exploitation in October 2026: Threat Actors, CVEs and Attack Trend

CVE Research

CISA KEV Exploitation in October 2026: Threat Actors, CVEs and Attack Trend

Nov 4, 2026