Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2019-5544

OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.

CVSS 9.8 · CriticalBuzz score 59.5KEV listed

Buzz score

Why this CVE is surfacing

Buzz score total 59.5

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 23.0 · diversity 11.5 · KEV 25.0 · OTX 0.0 · PoC 0.0
Mention score
23.0
9 evidence mentions in the snapshot
Diversity score
11.5
3 sources across 2 categories
KEV score
25.0
Known exploited vulnerability present
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
9 source links · newest first
  • Surge in ESXiArgs Ransomware Attacks as Questions Linger Over Exploited VulnerabilitySecurityWeek

    Hundreds of new servers were compromised in the past days as part of ESXiArgs ransomware attacks, but it’s still unclear which vulnerability is being exploited.

    newswww.securityweek.comFeb 16, 2023, 9:36 AM
  • 13th February – Threat Intelligence ReportCheck Point Research

    For the latest discoveries in cyber research for the week of 13th February, please download our Threat_Intelligence Bulletin TOP ATTACKS AND BREACHES The California cities of Oakland and Modesto have been targeted by ransomware attacks, disrupting services in the former and the police network in the latter. Also in California, healthcare company ‘Heritage Provider Network’ […]

    vendorresearch.checkpoint.comFeb 13, 2023, 3:27 PM
  • ESXiArgs Ransomware Hits Over 3,800 Servers as Hackers Continue Improving MalwareSecurityWeek

    More than 3,800 servers around the world have been compromised in recent ESXiArgs ransomware attacks, which also include an improved process.

    newswww.securityweek.comFeb 9, 2023, 11:00 AM
  • 6th February – Threat Intelligence ReportCheck Point Research

    For the latest discoveries in cyber research for the week of 6th February, please download our Threat_Intelligence Bulletin TOP ATTACKS AND BREACHE Check Point Research has flagged the Dingo crypto Token, with a market cap of $10,941,525 as a scam. The threat actors behind the token added a backdoor function in its smart contract, to […]

    vendorresearch.checkpoint.comFeb 6, 2023, 4:07 PM
  • Experts detailed a previously undetected VMware ESXi backdoorSecurity Affairs

    A new Python backdoor is targeting VMware ESXi servers, allowing attackers to take over compromised systems. Juniper Networks researchers spotted a previously undocumented Python backdoor targeting VMware ESXi servers. The researchers discovered the backdoor in October 2022, experts pointed out the implant is notable for its simplicity, persistence and capabilities. The experts were not able […]

    newssecurityaffairs.comDec 13, 2022, 2:15 PM
  • New Python-Based Backdoor Targeting VMware ESXi ServersSecurityWeek

    Security researchers with Juniper Networks’ Threat Labs warn of a new Python-based backdoor targeting VMware ESXi virtualization servers.

    newswww.securityweek.comDec 13, 2022, 11:57 AM
  • Ransomware operators exploit VMWare ESXi flaws to encrypt disks of VMsSecurity Affairs

    Ransomware operators are exploiting two VMWare ESXi vulnerabilities, CVE-2019-5544 and CVE-2020-3992, to encrypt virtual hard disks. Security experts are warning of ransomware attacks exploiting two VMWare ESXi vulnerabilities, CVE-2019-5544 and CVE-2020-3992, to encrypt virtual hard disks. According to ZDNet, threat actors are using VMWare ESXi exploits to encrypt the disks of virtual machines deployed in […]

    newssecurityaffairs.comFeb 2, 2021, 10:21 AM
  • VMware addresses ESXi issue disclosed at the Tianfu Cup hacking competitionSecurity Affairs

    VMware has addressed a critical remote code execution vulnerability in ESXi that was disclosed recently at the Tianfu Cup hacking competition. This week VMware has released security updates that fix a critical remote code execution vulnerability in ESXi that was recently disclosed by white hat hackers at the Tianfu Cup hacking competition in China. The Tianfu […]

    newssecurityaffairs.comDec 6, 2019, 1:07 PM
  • VMware Patches ESXi Vulnerability That Earned Hacker $200,000SecurityWeek

    VMware on Thursday informed customers that it has released patches for a critical remote code execution vulnerability in ESXi that was disclosed recently at the Tianfu Cup hacking competition in China.

    newswww.securityweek.comDec 6, 2019, 6:43 AM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence