{"metadata": {"vulnerability": "CVE-2019-15949", "count": 51, "kinds": {"milestone": 4, "sighting": 18, "kev": 11, "other": 18}}, "data": [{"timestamp": "2019-09-05T00:00:00Z", "date_only": false, "value": "2019-09-05T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2019-15949", "field": "cveMetadata.dateReserved"}, {"timestamp": "2019-09-05T16:50:38Z", "date_only": false, "value": "2019-09-05T16:50:38.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2019-15949", "field": "cveMetadata.datePublished"}, {"timestamp": "2019-09-05T17:15:00Z", "date_only": false, "value": "2019-09-05T17:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-8QV6-943V-R8GM", "record": "GHSA-8QV6-943V-R8GM", "field": "database_specific.nvd_published_at"}, {"timestamp": "2019-09-05T17:15:00Z", "date_only": false, "value": "2019-09-05T17:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2019-15949", "record": "GSD-2019-15949", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2019-09-05T17:15:12.327Z", "date_only": false, "value": "2019-09-05T17:15:12.327", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2019-15949", "record": "FKIE_CVE-2019-15949", "field": "published"}, {"timestamp": "2019-09-11T00:00:00Z", "date_only": true, "value": "2019-09-11", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2020-19536", "record": "CNVD-2020-19536", "field": "submitTime"}, {"timestamp": "2020-03-10T00:00:00Z", "date_only": false, "value": "2020-03-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://www.exploit-db.com/exploits/48191", "record": "CVE-2019-15949", "field": "creation_timestamp", "uuid": "970f139d-745c-4e7a-bfd4-4167426b3796", "url": "https://www.exploit-db.com/exploits/48191"}, {"timestamp": "2020-03-26T00:00:00Z", "date_only": true, "value": "2020-03-26", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2020-19536", "record": "CNVD-2020-19536", "field": "openTime"}, {"timestamp": "2021-03-26T23:19:21Z", "date_only": false, "value": "2021-03-26T23:19:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/nagios_xi_scanner.rb", "record": "CVE-2019-15949", "field": "creation_timestamp", "uuid": "8d881dfd-e891-4f74-96ef-f643cb959710", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/nagios_xi_scanner.rb"}, {"timestamp": "2021-04-14T00:06:12Z", "date_only": false, "value": "2021-04-14T00:06:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/nagios_xi_plugins_check_plugin_authenticated_rce.rb", "record": "CVE-2019-15949", "field": "creation_timestamp", "uuid": "ba73a43e-251f-4e4a-aa4a-9de3b2597445", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/nagios_xi_plugins_check_plugin_authenticated_rce.rb"}, {"timestamp": "2021-04-14T17:06:18Z", "date_only": false, "value": "2021-04-14T17:06:18.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2019-15949", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-04-15T21:16:00Z", "date_only": false, "value": "2021-04-15T21:16Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2019-15949", "record": "GSD-2019-15949", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2019-15949", "field": "timestamps.asserted_at", "uuid": "4318a55b-f096-48bb-ac26-374625e11267", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2019-15949", "field": "timestamps.asserted_at", "uuid": "be31e80b-cc55-475f-96f3-9f9285c21b14", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2019-15949", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2019-15949", "record": "GSD-2019-15949", "field": "namespaces.cisa.gov.dateAdded"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2019-15949", "field": "evidence.0.details.added_date", "uuid": "be31e80b-cc55-475f-96f3-9f9285c21b14", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2019-15949", "field": "evidence.0.details.date_added", "uuid": "4318a55b-f096-48bb-ac26-374625e11267", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2019-15949", "field": "timestamps.first_seen_at", "uuid": "4318a55b-f096-48bb-ac26-374625e11267", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2019-15949", "field": "timestamps.first_seen_at", "uuid": "be31e80b-cc55-475f-96f3-9f9285c21b14", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2019-15949", "field": "status.status_updated_at", "uuid": "4318a55b-f096-48bb-ac26-374625e11267", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2019-15949", "field": "status.status_updated_at", "uuid": "be31e80b-cc55-475f-96f3-9f9285c21b14", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2019-15949", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2021-11-08T08:58:19Z", "date_only": false, "value": "2021-11-08T08:58:19.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "record": "CVE-2019-15949", "field": "creation_timestamp", "uuid": "0e452be5-05a9-4a91-94db-bc4938e9bbc8"}, {"timestamp": "2021-11-20T09:53:52Z", "date_only": false, "value": "2021-11-20T09:53:52.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2019-15949", "field": "creation_timestamp", "uuid": "2db274e7-de67-43c0-b0cb-d60d671d0632"}, {"timestamp": "2022-05-03T00:00:00Z", "date_only": true, "value": "2022-05-03", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2019-15949", "field": "evidence.0.details.due_date", "uuid": "4318a55b-f096-48bb-ac26-374625e11267", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-03T00:00:00Z", "date_only": true, "value": "2022-05-03", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2019-15949", "record": "GSD-2019-15949", "field": "namespaces.cisa.gov.dueDate"}, {"timestamp": "2022-05-24T16:55:31Z", "date_only": false, "value": "2022-05-24T16:55:31Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-8QV6-943V-R8GM", "record": "GHSA-8QV6-943V-R8GM", "field": "published"}, {"timestamp": "2023-12-03T19:58:56Z", "date_only": false, "value": "2023-12-03T19:58:56.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1016", "record": "CVE-2019-15949", "field": "creation_timestamp", "uuid": "166c07bd-d480-4dce-ae82-80cb48cceff7", "content": "#ExploitObserverAlert\n\nCVE-2019-15949\n\nDESCRIPTION: Exploit Observer has 15 entries related to CVE-2019-15949. Nagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to the server as the nagios user, or access as the admin user via the web interface. The getprofile.sh script, invoked by downloading a system profile (profile.php?cmd=download), is executed as root via a passwordless sudo entry; the script executes check_plugin, which is owned by the nagios user. A user logged into Nagios XI with permissions to modify plugins, or the nagios user on the server, can modify the check_plugin executable and insert malicious commands to execute as root.\n\nFIRST-EPSS: 0.519440000\nNVD-IS: 5.9\nNVD-ES: 2.8", "url": "https://t.me/arpsyndicate/1016"}, {"timestamp": "2023-12-13T01:23:38.351Z", "date_only": false, "value": "2023-12-13T01:23:38.351617Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2019-15949", "record": "GSD-2019-15949", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-05T01:03:32.416Z", "date_only": false, "value": "2024-08-05T01:03:32.416Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2019-15949", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-24T20:22:25.384Z", "date_only": false, "value": "2024-12-24T20:22:25.384150Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2970966", "record": "CVE-2019-15949", "field": "creation_timestamp", "uuid": "f8a62d65-bcc9-4cef-847d-ea79bc4b14d6", "url": "https://feedsin.space/feed/CISAKevBot/items/2970966"}, {"timestamp": "2025-02-04T20:07:38.786Z", "date_only": false, "value": "2025-02-04T20:07:38.786410Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2019-15949", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-02-04T20:07:38.786Z", "date_only": false, "value": "2025-02-04T20:07:38.786410Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2019-15949", "record": "FKIE_CVE-2019-15949", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-06T03:13:44Z", "date_only": false, "value": "2025-02-06T03:13:44.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2019-15949", "field": "creation_timestamp", "uuid": "0530f8c7-02b4-4b83-99bd-7a18a75ef91e"}, {"timestamp": "2025-02-23T02:09:42Z", "date_only": false, "value": "2025-02-23T02:09:42.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2019-15949", "field": "creation_timestamp", "uuid": "95f57799-e7d0-4a67-b85b-ac67ea20334a"}, {"timestamp": "2025-02-23T04:10:13Z", "date_only": false, "value": "2025-02-23T04:10:13.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2019-15949", "field": "creation_timestamp", "uuid": "fed83c7e-7708-498b-b1ee-a098167d8741"}, {"timestamp": "2025-10-21T23:45:31.401Z", "date_only": false, "value": "2025-10-21T23:45:31.401Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2019-15949", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:45:31.401Z", "date_only": false, "value": "2025-10-21T23:45:31.401Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2019-15949", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:31:43Z", "date_only": false, "value": "2025-10-22T00:31:43Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-8QV6-943V-R8GM", "record": "GHSA-8QV6-943V-R8GM", "field": "modified"}, {"timestamp": "2025-11-26T21:00:05Z", "date_only": false, "value": "2025-11-26T21:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/EQSEx6hVvMlnJ1ky7huxK4eSzyICfuehitJwgPSzGmUZN8M", "record": "CVE-2019-15949", "field": "creation_timestamp", "uuid": "ca2f4268-871c-42f8-94ba-0b5e918e834a"}, {"timestamp": "2026-02-02T12:28:58.586Z", "date_only": false, "value": "2026-02-02T12:28:58.586210Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a3a8ab3f-fa0d-4bfe-8fdd-e74de4ef534f", "record": "CVE-2019-15949", "field": "creation_timestamp", "uuid": "022ac80a-1507-47f2-b761-43376e3cd6b5", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a3a8ab3f-fa0d-4bfe-8fdd-e74de4ef534f"}, {"timestamp": "2026-02-02T12:28:58.586Z", "date_only": false, "value": "2026-02-02T12:28:58.586210Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a3a8ab3f-fa0d-4bfe-8fdd-e74de4ef534f", "record": "CVE-2019-15949", "field": "creation_timestamp", "uuid": "3adce7d6-c08a-4967-aea0-f049544e7185", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a3a8ab3f-fa0d-4bfe-8fdd-e74de4ef534f"}, {"timestamp": "2026-06-17T02:21:24.097Z", "date_only": false, "value": "2026-06-17T02:21:24.097", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2019-15949", "record": "FKIE_CVE-2019-15949", "field": "lastModified"}, {"timestamp": "2026-06-19T12:48:01.652Z", "date_only": false, "value": "2026-06-19T12:48:01.652174Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/44b49bf3-c357-4c5f-b23e-d12a061e3cdb", "record": "CVE-2019-15949", "field": "creation_timestamp", "uuid": "33014853-9d5a-49dc-bfd7-a03c0b122b3c", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/44b49bf3-c357-4c5f-b23e-d12a061e3cdb"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2019-15949", "field": "timestamps.recorded_at", "uuid": "be31e80b-cc55-475f-96f3-9f9285c21b14", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:13:11.476Z", "date_only": false, "value": "2026-06-23T11:13:11.476466Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/be31e80b-cc55-475f-96f3-9f9285c21b14", "record": "CVE-2019-15949", "field": "creation_timestamp", "uuid": "48fb24fd-3546-4320-b389-65c7a4481e7b", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/be31e80b-cc55-475f-96f3-9f9285c21b14"}, {"timestamp": "2026-06-23T14:04:32.718Z", "date_only": false, "value": "2026-06-23T14:04:32.718254Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/be014818-7ec8-4b2e-a362-647bd1e40724", "record": "CVE-2019-15949", "field": "creation_timestamp", "uuid": "abbf24b5-e672-447e-8617-48d1bb4cf984", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/be014818-7ec8-4b2e-a362-647bd1e40724"}, {"timestamp": "2026-09-01T20:02:50.052Z", "date_only": false, "value": "2026-09-01T20:02:50.052118Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/2951", "record": "CVE-2019-15949", "field": "creation_timestamp", "uuid": "bcf0902a-c74a-44ef-a775-1cd869af1090", "url": "https://t.me/hacking_Attack/2951"}, {"timestamp": "2026-09-08T13:00:04.311Z", "date_only": false, "value": "2026-09-08T13:00:04.311762Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/2951", "record": "CVE-2019-15949", "field": "creation_timestamp", "uuid": "22ecebfe-7abc-4dbb-8a3a-03a05e7b1438", "url": "https://t.me/hacking_Attack/2951"}, {"timestamp": "2026-11-04T13:00:01Z", "date_only": false, "value": "2026-11-04T13:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2019-15949", "field": "timestamps.recorded_at", "uuid": "4318a55b-f096-48bb-ac26-374625e11267", "status": {"status_reason": "confirmed", "exploited": true}}]}