CVEs published in November 2015
382 vulnerabilities, 76 critical, 2 exploited.
- cisco web security applianceThe proxy-cache implementation in Cisco AsyncOS 8.0.x before 8.0.7-151, 8.1.x and 8.5.x before 8...7.8 High
- typemoon witch on the holy night, fate\/hollow ataraxia, fate\/stay night +1 more +3 moreTYPE-MOON Fate/stay night, Fate/hollow ataraxia, Witch on the Holy Night, and Fate/stay night +...10.0 High
- cisco mobility services engineCisco Mobility Services Engine (MSE) through 8.0.120.7 uses weak permissions for unspecified...6.9 Medium
- cisco content security management appliance, email security appliance, web security appliance +2 moreCisco AsyncOS before 8.5.7-042, 9.x before 9.1.0-032, 9.1.x before 9.1.1-023, and 9.5.x and 9.6.x...7.8 High
- cisco web security applianceCisco AsyncOS 8.x before 8.0.8-113, 8.1.x and 8.5.x before 8.5.3-051, 8.6.x and 8.7.x before 8.7...7.8 High
- cisco email security applianceCisco AsyncOS before 8.5.7-043, 9.x before 9.1.1-023, and 9.5.x and 9.6.x before 9.6.0-046 on...7.8 High
- mit kerberos 5The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka...8.5 High
libebmlMageia,libmatroskaMageia +1 moreUpdated libebml packages fix security vulnerabilityNo score- xmlsoft libxslt, apple iphone os, mac os x +2 more +4 moreThe xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node...5.0 Medium
- kernel util-linux, opensuse, opensuse project leap +2 moreBuffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to...2.1 Low
- sddm project sddm, fedoraproject fedora +1 moredaemon/Greeter.cpp in sddm before 0.13.0 does not properly disable the KDE crash handler, which...4.6 Medium
- mozilla firefoxThe accessibility-tools feature in Mozilla Firefox before 42.0 on OS X improperly interacts with...7.5 High
- mozilla firefoxMozilla Firefox before 42.0 on Android improperly restricts URL strings in intents, which allows...4.3 Medium
- mozilla firefoxThe Search feature in Mozilla Firefox before 42.0 on Android through 4.4 supports search-engine...5.0 Medium
- mozilla firefoxMozilla Firefox before 42.0 on Android allows user-assisted remote attackers to bypass the Same...4.3 Medium
- mozilla firefoxMozilla Firefox before 42.0 on Android does not ensure that the address bar is restored upon...4.3 Medium
- drupal, jquery update project update, labjs project labjs +2 moreOpen redirect vulnerability in the Overlay module in Drupal 7.x before 7.41, the jQuery Update...6.1 Medium
- vmware spring framework, debian linux +1 moreFiles or Directories Accessible to External Parties in org.springframework:spring-core9.6 Critical
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader...6.8 Medium
- commvault edge serverThe Web Console in Commvault Edge Server 10 R2 allows remote attackers to execute arbitrary OS...10.0 High
- mobatek mobaxtermThe default configuration of the server in MobaXterm before 8.3 has a disabled Access Control...7.5 High
- opentext verticaThe vertica-udx-zygote process in HP Vertica 7.1.1 UDx does not require authentication, which...7.5 High
- cisco socialminerCross-site scripting (XSS) vulnerability in the WeChat page in Cisco Social Miner 10.0(1) allows...4.3 Medium
- cisco unified computing systemThe web interface in Cisco Unified Computing System (UCS) 2.2(5b)A on blade servers allows remote...5.0 Medium
- hp arcsight command center, arcsight connector appliance, arcsight logger +4 more +6 moreHP ArcSight Logger 6.0.0.7307.1, ArcSight Command Center 6.8.0.1896.0, and ArcSight Connector...7.2 High
- hp arcsight loggerHP ArcSight Logger before 6.0 P2 does not limit attempts to authenticate to the SOAP interface,...5.0 Medium
- isucon 5 qualifier eventappeventapp/lib/gcloud.rb in the ISUCON5 qualifier portal (aka eventapp) web application before 2015...6.5 Medium
- ibm infosphere information serverIBM InfoSphere Information Server 11.3 and 11.5 allows remote authenticated DataStage users to...5.5 Medium
- ibm tivoli storage managerThe Reporting and Monitoring component in Tivoli Monitoring in IBM Tivoli Storage Manager 6.3...7.2 High
- hp arcsight smartconnectorsThe CWSAPI SOAP service in HP ArcSight SmartConnectors before 7.1.6 has a hardcoded password,...6.9 Medium
- hp arcsight smartconnectorsHP ArcSight SmartConnectors before 7.1.6 do not verify X.509 certificates from Logger devices,...6.8 Medium
- mozilla firefoxThe CryptoKey interface implementation in Mozilla Firefox before 42.0 and Firefox ESR 38.x before...7.5 High
- mozilla firefoxThe (1) AddWeightedPathSegLists and (2) SVGPathSegListSMILType::Interpolate functions in Mozilla...7.5 High
- mozilla firefoxBuffer overflow in the rx::TextureStorage11 class in ANGLE, as used in Mozilla Firefox before 42...7.5 High
- mozilla firefoxMozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly control the ability of a...5.0 Medium
- mozilla firefoxMozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, when a Java plugin is enabled,...6.8 Medium
- mozilla firefoxThe URL parsing implementation in Mozilla Firefox before 42.0 improperly recognizes escaped...5.0 Medium
- mozilla firefoxBuffer underflow in libjar in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows...7.5 High
- mozilla firefoxMozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperly follow the CORS cross...7.5 High
- mozilla firefoxRace condition in the JPEGEncoder function in Mozilla Firefox before 42.0 and Firefox ESR 38.x...6.8 Medium
- mozilla firefoxMozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allow remote attackers to bypass the...7.5 High
- mozilla firefoxThe Add-on SDK in Mozilla Firefox before 42.0 misinterprets a "script: false" panel setting,...4.3 Medium
- mozilla firefox, network security services +1 moreInteger overflow in the PL_ARENA_ALLOCATE implementation in Netscape Portable Runtime (NSPR) in...7.5 High
- mozilla firefox, network security services, oracle glassfish server +4 more +6 moreHeap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before...9.8 Critical
- mozilla firefox, network security services +1 moreThe sec_asn1d_parse_leaf function in Mozilla Network Security Services (NSS) before 3.19.2.1 and...7.5 High
- mozilla firefoxThe Reader View implementation in Mozilla Firefox before 42.0 has an improper whitelist, which...4.3 Medium
- mozilla firefoxMozilla Firefox before 42.0, when NTLM v1 is enabled for HTTP authentication, allows remote...4.3 Medium
- mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 42.0 allow...7.5 High
- mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 42.0 and...7.5 High
- google androidmediaserver in Android before 5.1.1 LMY48X allows remote attackers to obtain sensitive...5.0 Medium
- Show moreLoading…