CVEs published in November 2015
382 vulnerabilities, 76 critical, 2 exploited.
- sap plant connectivityThe PCo agent in SAP Plant Connectivity (PCo) allows remote attackers to cause a denial of...7.8 High
- sap manufacturing integration and intelligenceSAP Manufacturing Integration and Intelligence (aka MII, formerly xMII) uses weak encryption ...5.0 Medium
- nvidia gpu driverUnspecified vulnerability in the NVAPI support layer in the NVIDIA GPU graphics driver R340...6.6 Medium
- huawei espace firmwareHuawei eSpace U2980 unified gateway with software before V100R001C10 and U2990 with software...4.0 Medium
- huawei ar firmwareDirectory traversal vulnerability in the SFTP server in Huawei AR 120, 150, 160, 200, 500, 1200,...4.0 Medium
- huawei vp 9660 firmwareThe built-in web server in Huawei VP9660 multi-point control unit with software before...8.5 High
- valvesoftware steam clientValve Steam 2.10.91.91 uses weak permissions (Users: read and write) for the Install folder,...7.2 High
- nvidia gpu driverUnquoted Windows search path vulnerability in the Smart Maximize Helper (nvSmartMaxApp.exe) in...7.2 High
- nvidia gpu drivernvSCPAPISvr.exe in the Stereoscopic 3D Driver Service in the NVIDIA GPU graphics driver R340...7.7 High
- vbulletinThe vB_Api_Hook::decodeArguments method in vBulletin 5 Connect 5.1.2 through 5.1.9 allows remote...7.5 High
- gnome display manager, fedoraproject fedora +1 moreGNOME Display Manager (gdm) before 3.18.2 allows physically proximate attackers to bypass the...7.2 High
- redhat enterprise linuxThe grub2 package before 2.02-0.29 in Red Hat Enterprise Linux (RHEL) 7, when used on UEFI...2.6 Low
- nvidia gpu driverThe host memory mapping path feature in the NVIDIA GPU graphics driver R346 before 346.87 and...10.0 High
- djangoproject djangoDjango settings leak in date template filter5.0 Medium
- cisco firepower extensible operating systemAn unspecified script in the web interface in Cisco Firepower Extensible Operating System 1.1(1...6.5 Medium
- cisco virtual topology systemCisco Virtual Topology System (VTS) 2.0(0) and 2.0(1) allows remote attackers to cause a denial...7.8 High
libcommons-collections3-javaDebianlibcommons-collections3-java - security updateNo score- sensiolabs symfonySymfony Vulnerable to Timing Attack7.5 High
- sensiolabs symfonySymfony Session Fixation Vulnerability6.8 Medium
- apache cordovaApache Cordova-Android before 3.7.0 improperly generates random values for BridgeSecret data,...5.0 Medium
- apache cordovaApache Cordova-Android before 4.1.0, when an application relies on a remote server, improperly...4.3 Medium
- hp operations orchestrationCross-site request forgery (CSRF) vulnerability in HP Operations Orchestration Central 10.x...6.8 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +6 more +8 moreThe xmlParseXMLDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent...5.0 Medium
- apple iphone os, mac os x +1 moreThe fts3_tokenizer function in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4,...7.5 High
- apple iphone os, mac os x +1 moreThe CFNetwork HTTPProtocol component in Apple iOS before 9 and OS X before 10.11 does not...4.3 Medium
- apple iphone osThe kernel in Apple iOS before 8.4.1 does not properly restrict debugging features, which allows...4.3 Medium
- tibbo aggregateag_server_service.exe in the AggreGate Server Service in Tibbo AggreGate before 5.30.06 allows...7.2 High
- tibbo aggregateThe Ice Faces servlet in ag_server_service.exe in the AggreGate Server Service in Tibbo AggreGate...10.0 High
- void project voidCross-site scripting (XSS) vulnerability in index.php in JosephErnest Void before 2015-10-02...4.3 Medium
- arris na model 862 gw mono firmwareCross-site request forgery (CSRF) vulnerability in adv_pwd_cgi in the web management interface on...6.8 Medium
- arris na model 862 gw mono firmwareCross-site scripting (XSS) vulnerability in adv_pwd_cgi in the web management interface on Arris...4.3 Medium
- arris na model 862 gw mono firmwareArris DG860A, TG862A, and TG862G devices with firmware TS0703128_100611 through TS0705125D_031115...9.3 High
- cisco telepresence video communication server softwareCross-site request forgery (CSRF) vulnerability in Cisco TelePresence Video Communication Server ...6.8 Medium
- cisco iosThe debug-logging (aka debug cns) feature in Cisco Networking Services (CNS) for IOS 15.2(2)E3...2.1 Low
- arris na model 862 gw mono firmwareArris DG860A, TG862A, and TG862G devices with firmware TS0703128_100611 through TS0705125D_031115...4.3 Medium
- ntp, netapp clustered data ontap, data ontap +3 more +5 moreBuffer overflow in the password management functionality in NTP 4.2.x before 4.2.8p4, and 4.3.x...8.8 High
- ntp, netapp clustered data ontap, data ontap +3 more +5 moreUse-after-free vulnerability in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows...8.8 High
- ntp, netapp clustered data ontap, data ontap operating in 7-mode +3 more +5 moreAn integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation...7.5 High
- bastian allgeier kirbyUnrestricted file upload vulnerability in the Panel component in Bastian Allgeier Kirby before 2...6.5 Medium
- newphoria corporation applicanCross-site scripting (XSS) vulnerability in the runtime engine in the Newphoria applican...4.3 Medium
- newphoria corporation applicanCross-site scripting (XSS) vulnerability in the runtime engine in the Newphoria applican...4.3 Medium
uglify-jsMageia,nodejs-align-textMageia,nodejs-ansi-regexMageia +23 more +25 moreUpdated uglify-js packages fix security vulnerabilityNo scoredovecotMageiaUpdated dovecot packages fix security vulnerabilityNo score- latex2rtf project latex2rtf, fedoraproject fedora +1 moreFormat string vulnerability in the CmdKeywords function in funct1.c in latex2rtf before 2.3.10...7.8 High
- huawei ne router softwareHuawei NE20E-S, NE40E-M, and NE40E-M2 routers with software before V800R007C10SPC100 and NE40E...5.0 Medium
- huawei espace firmwareAn unspecified module in Huawei eSpace U1910, U1911, U1930, U1960, U1980, and U1981 unified...7.8 High
- huawei espace firmwareThe exception handling mechanism in the CLI Module in Huawei eSpace U1910, U1911, U1930, U1960,...5.0 Medium
- open-xchange ox guardCross-site scripting (XSS) vulnerability in Open-Xchange OX Guard before 2.0.0-rev11 allows...4.3 Medium
- dracut project dracutmodules.d/90crypt/module-setup.sh in the dracut package before 037-17.30.1 in openSUSE 13.2...3.6 Low
- arista eosArista EOS before 4.11.12, 4.12 before 4.12.11, 4.13 before 4.13.14M, 4.14 before 4.14.5FX.5, and...10.0 High
- Show moreLoading…