CVEs published in November 2015
382 vulnerabilities, 76 critical, 2 exploited.
- exemys telemetry web serverExemys Telemetry Web Server relies on an HTTP Location header to indicate that a client is...7.8 High
- blackberry enterprise serverThe Management Console in BlackBerry Enterprise Server (BES) 12 before 12.2 does not properly...4.3 Medium
- cisco firepower extensible operating systemThe web interface in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000...4.3 Medium
- cisco firepower extensible operating systemCisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows remote...4.0 Medium
- cisco firepower extensible operating systemThe Management I/O (MIO) component in Cisco Firepower Extensible Operating System 1.1(1.160) on...7.2 High
- cisco firepower extensible operating systemThe USB driver in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000...4.9 Medium
- cisco firepower extensible operating systemCisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows remote...5.0 Medium
- tibco loglogic unityThe Web Server component in TIBCO LogLogic Unity before 1.1.1 allows remote authenticated users...4.0 Medium
- adobe coldfusionCross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 18 and 11 before...4.3 Medium
- adobe coldfusionCross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 18 and 11 before...4.3 Medium
- adobe premiere clipThe Adobe Premiere Clip app before 1.2.1 for iOS mishandles unspecified input, which has unknown...10.0 High
- adobe coldfusion, livecycle data services, hp xp7 command view advanced edition +1 more +3 moreAdobe BlazeDS, as used in ColdFusion 10 before Update 18 and 11 before Update 7 and LiveCycle...4.3 Medium
- dlink dir-816l firmwareMultiple cross-site request forgery (CSRF) vulnerabilities in the D-Link DIR-816L Wireless Router...6.8 Medium
- apache cxfImproper Access Control in Apache CXF4.0 Medium
- cisco firepower extensible operating systemCross-site request forgery (CSRF) vulnerability in Cisco Firepower Extensible Operating System 1...6.8 Medium
- cisco firepower extensible operating systemCross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Firepower...4.3 Medium
- oracle weblogic server, storagetek tape analytics sw tool, virtual desktop infrastructure +2 moreThe WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0...9.8 Critical
- emc vplex geosynchronyThe default configuration of EMC VPLEX GeoSynchrony 5.4 SP1 before P3 stores cleartext NAVISPHERE...2.1 Low
- cisco firesight system softwareThe rule-update feature in Cisco FireSIGHT Management Center (MC) 5.2 through 5.4.0.1 does not...6.8 Medium
- cisco prime collaboration assuranceCross-site request forgery (CSRF) vulnerability in Cisco Prime Collaboration Assurance 10.5(1)...6.8 Medium
- xmlsoft libxml2, apple iphone os, mac os x +9 more +11 moreThe xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before...5.8 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +6 more +8 moreThe xmlNextChar function in libxml2 2.9.2 does not properly check the state, which allows context...6.4 Medium
- canonical ubuntu linux, nvidia gpu driver +1 moreMultiple integer overflows in the kernel mode driver for the NVIDIA GPU graphics driver R340...6.6 Medium
- mayo project mayoCross-site scripting (XSS) vulnerability in the MAYO theme 7.x-1.x before 7.x-1.4 and 7.x-2.x...2.6 Low
- uc profile project profileThe UC Profile module 6.x-1.x before 6.x-1.3 for Drupal does not properly check access to...4.3 Medium
- canonical ubuntu linuxThe lxd-unix.socket systemd unit file in the Ubuntu lxd package before 0.20-0ubuntu4.1 uses world...4.6 Medium
- google picasaInteger overflow in Google Picasa before 3.9.140 Build 259 allows remote attackers to execute...10.0 High
- solarwinds dameware mini remote controlStack-based buffer overflow in the URI handler in DWRCC.exe in SolarWinds DameWare Mini Remote...7.5 High
- citrix netscaler service delivery appliance service vm, netscaler application delivery controller firmware, netscaler gateway firmware +2 moreThe administration UI in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler...5.0 Medium
- citrix netscaler service delivery appliance service vm, netscaler application delivery controller firmware, netscaler gateway firmware +2 moreMultiple cross-site scripting (XSS) vulnerabilities in the Nitro API in Citrix NetScaler...4.3 Medium
- citrix netscaler service delivery appliance service vm, netscaler application delivery controller firmware, netscaler gateway firmware +2 moreThe Nitro API in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway...5.0 Medium
- xenThe hypercall_create_continuation function in arch/arm/domain.c in Xen 4.4.x through 4.6.x allows...4.9 Medium
- powerdns authoritativePowerDNS (aka pdns) Authoritative Server 3.4.4 before 3.4.7 allows remote attackers to cause a...5.0 Medium
- ipsilon project ipsilonIpsilon denial of service by deleting a SAML2 Service Provider (SP)5.5 Medium
- ipsilon project ipsilonIpsilon denial of service via a duplicate SP name4.0 Medium
- ffmpegThe init_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.2 does not enforce...7.5 High
- ffmpegThe decode_uncompressed function in libavcodec/faxcompr.c in FFmpeg before 2.8.2 does not...6.8 Medium
- ffmpegThe ff_hevc_parse_sps function in libavcodec/hevc_ps.c in FFmpeg before 2.8.2 does not validate...7.5 High
- ffmpegThe ljpeg_decode_yuv_scan function in libavcodec/mjpegdec.c in FFmpeg before 2.8.2 omits certain...7.5 High
- networkmanager project networkmanagerThe receive_ra function in rdisc/nm-lndp-rdisc.c in the Neighbor Discovery (ND) protocol...3.3 Low
- samsung galaxy s6The media scanning functionality in the face recognition library in android.media.process in...7.5 High
- matomoThe DisplayTopKeywords function in plugins/Referrers/Controller.php in Piwik before 2.15.0 allows...7.5 High
- matomoDirectory traversal vulnerability in core/ViewDataTable/Factory.php in Piwik before 2.15.0 allows...7.5 High
- atutorMultiple eval injection vulnerabilities in mods/_standard/gradebook/edit_marks.php in ATutor 2.2...6.5 Medium
- atutorUnrestricted file upload vulnerability in mods/_core/properties/lib/course.inc.php in ATutor...6.5 Medium
- debian linux, linux kernel, xen +3 more +5 moreThe KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS...4.7 Medium
- strongswan, canonical ubuntu linux +1 moreThe server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4...5.0 Medium
- schneider-electric imt25 magnetic flow dtmBuffer overflow in Schneider Electric IMT25 Magnetic Flow DTM before 1.500.004 for the HART...7.7 High
- pc-egg pwebmanagerPC-EGG pWebManager before 3.3.10, and before 2.2.2 for PHP 4.x, allows remote authenticated users...6.5 Medium
- ibm datapower gatewayIBM DataPower Gateway appliances with firmware 6.x before 6.0.0.17, 6.0.1.x before 6.0.1.17, 7.x...5.0 Medium
- Show moreLoading…