CVEs published in November 2015
382 vulnerabilities, 76 critical, 2 exploited.
- cisco connected grid network management systemThe web GUI in Cisco Connected Grid Network Management System (CG-NMS) 3.0(0.35) and 3.0(0.54)...4.0 Medium
- adways party track sdkThe Adways Party Track SDK before 1.6.6 for iOS does not verify X.509 certificates from SSL...5.8 Medium
- linux kernelRace condition in the rds_sendmsg function in net/rds/sendmsg.c in the Linux kernel before 4.3.3...5.8 Medium
- linux kernelThe key_gc_unused_keys function in security/keys/gc.c in the Linux kernel through 4.2.6 allows...2.1 Low
- debian linux, w1.fi wpa supplicant +1 moreThe eap_pwd_perform_confirm_exchange function in eap_peer/eap_pwd.c in wpa_supplicant 2.x before...5.9 Medium
- debian linux, w1.fi wpa supplicant +1 moreThe eap_pwd_process function in eap_peer/eap_pwd.c in wpa_supplicant 2.x before 2.6 does not...5.9 Medium
- debian linux, w1.fi wpa supplicant +1 moreThe eap_pwd_process function in eap_server/eap_server_pwd.c in hostapd 2.x before 2.6 does not...5.9 Medium
- google androidThe WNM Sleep Mode code in wpa_supplicant 2.x before 2.6 does not properly ignore key data in...4.3 Medium
- debian linux, linux kernel, xen +2 more +4 moreThe KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS...4.9 Medium
- echo project echoThe Echo extension for MediWiki does not properly implement the hideuser functionality, which...4.0 Medium
- pagetriage project pagetriageCross-site scripting (XSS) vulnerability in the PageTriage toolbar in the PageTriage extension...4.3 Medium
unzipUbuntuunzip regressionNo score- google picasaInteger overflow in Google Picasa 3.9.140 Build 239 and Build 248 allows remote attackers to...10.0 High
- monster menus project menusThe recycle bin feature in the Monster Menus module 7.x-1.21 before 7.x-1.24 for Drupal does not...5.0 Medium
- w1.fi hostapd, opensuse, w1.fi wpa supplicant +2 moreMultiple integer overflows in the NDEF record parser in hostapd before 2.5 and wpa_supplicant...5.0 Medium
- libreswanThe pluto IKE daemon in libreswan before 3.15 and Openswan before 2.6.45, when built with NSS,...4.3 Medium
unzipDebianunzip - regression updateNo score- bouncycastle bouncy castle crypto package, opensuse leap, opensuse +4 more +6 moreModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk155.0 Medium
- ibm datapower gatewayThe GatewayScript modules on IBM DataPower Gateways with software 7.2.0.x before 7.2.0.1, when...2.6 Low
- ibm qradar security information and event managerThe Flow Collector in IBM Security QRadar QFLOW 7.1.x before 7.1 MR2 Patch 11 IF3 and 7.2.x...3.3 Low
- ibm security guardiumdiag in IBM Security Guardium 8.2 before p6015, 9.0 before p6015, 9.1, 9.5, and 10.0 before p6015...7.2 High
- ibm sterling b2b integrator, sterling integrator +1 moreIBM Sterling Integrator 5.1 before 5010004_8 and Sterling B2B Integrator 5.2 before 5020500_9...5.5 Medium
- ibm websphere commerce enterpriseIBM WebSphere Commerce Enterprise 7.0.0.9 and 8.x before Feature Pack 8 allows remote attackers...5.0 Medium
- ibm powerha system mirrorCSPOC in IBM PowerHA SystemMirror on AIX 6.1 and 7.1 allows remote authenticated users to perform...8.5 High
- ibm maximo asset management, smartcloud control desk, change and configuration management database +8 more +10 moreIBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 FP009, and 7.6.0 before 7...6.5 Medium
- ibm security access manager for webIBM Security Access Manager for Web 7.x before 7.0.0.16 and 8.x before 8.0.1.3 mishandles WebSEAL...7.5 High
- apache ambariApache Ambari before 2.1, as used in IBM Infosphere BigInsights 4.x before 4.1, stores a...2.1 Low
- apache ambariApache Ambari before 2.1, as used in IBM Infosphere BigInsights 4.x before 4.1, includes...4.3 Medium
- ibm websphere application serverCRLF injection vulnerability in IBM WebSphere Application Server (WAS) 6.1 through 6.1.0.47, 7.0...4.3 Medium
- ibm security qradar incident forensicsIBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 places session IDs in https...5.0 Medium
- ibm security qradar incident forensicsCross-site request forgery (CSRF) vulnerability in IBM Security QRadar Vulnerability Manager 7.2...6.8 Medium
- ibm security qradar incident forensicsIBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 does not prevent caching of...2.1 Low
- ibm security qradar incident forensicsMultiple cross-site scripting (XSS) vulnerabilities in IBM Security QRadar Incident Forensics 7.2...4.3 Medium
- ibm security qradar incident forensicsIBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 does not include the HTTPOnly...5.0 Medium
- ibm security qradar incident forensicsIBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 does not set the secure flag...5.0 Medium
- ibm security qradar incident forensicsSQL injection vulnerability in IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5...6.5 Medium
- ibm maximo asset management, smartcloud control desk, change and configuration management database +8 more +10 moreIBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX005, and 7.6.0 before...4.0 Medium
roundcubemailMageiaUpdated roundcubemail packages fix security vulnerabilityNo scoreowncloudMageiaUpdated owncloud packages fix security vulnerabilitiesNo score- huawei hg532e, hg532n, hg532s +2 moreDirectory traversal vulnerability on Huawei HG532e, HG532n, and HG532s devices allows remote...5.0 Medium
- advantech eki-122x series firmware, eki-1321 series firmware, eki-1322 series firmware +2 more +4 moreAdvantech EKI-122x-BE devices with firmware before 1.65, EKI-132x devices with firmware before 1...10.0 High
- login disable project disableThe Login Disable module 6.x-1.x before 6.x-1.1 and 7.x-1.x before 7.x-1.2 for Drupal does not...7.5 High
- field as block project as blockThe Field as Block module 7.x-1.x before 7.x-1.4 for Drupal might allow remote attackers to...5.0 Medium
- squid-cache squid, opensuse +1 moreSquid 3.4.4 through 3.4.11 and 3.5.0.1 through 3.5.1, when Digest authentication is used, allow...4.0 Medium
- f5 big-ip analytics, big-ip edge gateway, big-iq adc +15 more +17 moreThe datastor kernel module in F5 BIG-IP Analytics, APM, ASM, Link Controller, and LTM 11.1.0...9.0 High
- f5 big-ip analytics, big-ip edge gateway, big-ip access policy manager +10 more +12 moreThe vCMP host in F5 BIG-IP Analytics, APM, ASM, GTM, Link Controller, and LTM 11.0.0 before 11.6...6.1 Medium
- redhat openshiftDirectory Traversal in Kubernetes6.4 Medium
- dell sonicwall totalsecure tz 100 firmwareDell SonicWall TotalSecure TZ 100 devices with firmware before 5.9.1.0-22o allow remote attackers...5.0 Medium
- cisco mobility services engineThe default configuration of sshd_config in Cisco Mobility Services Engine (MSE) through 8.0.120...6.5 Medium
- cisco web security applianceThe admin web interface in Cisco AsyncOS 8.x before 8.0.8-113, 8.1.x and 8.5.x before 8.5.3-051,...9.0 High
- Show moreLoading…