CVEs published in November 2016
516 vulnerabilities, 55 critical, 9 exploited.
- exponentcms exponent cmsIn /framework/modules/core/controllers/expHTMLEditorController.php of Exponent CMS 2.4.0,...7.5 High
- exponentcms exponent cmsIn /framework/modules/ecommerce/controllers/orderController.php of Exponent CMS 2.4.0, untrusted...7.5 High
- exponentcms exponent cmsExponent CMS 2.4 uses PHP reflection to call a method of a controller class, and then uses the...7.5 High
- sparkjava sparkSpark allows remote attackers to read arbitrary files via a .. (dot dot) in the URI7.5 High
- python pillow, debian linux +1 moreArbitrary code using "crafted image file" approach affecting Pillow7.8 High
- python pillow, debian linux +1 morePillow Integer overflow in Map.c5.5 Medium
- micro focus rumba 9.4, microfocus rumba +1 moreStack buffer overflow in the send.exe and receive.exe components of Micro Focus Rumba 9.4 and...9.8 Critical
- qemu, opensuse leap +1 moreThe rocker_io_writel function in hw/net/rocker/rocker.c in QEMU (aka Quick Emulator) allows local...6.0 Medium
- qemu, debian linux, opensuse leap +2 moreThe rc4030_write function in hw/dma/rc4030.c in QEMU (aka Quick Emulator) allows local guest OS...6.0 Medium
- cisco asr 5000 softwareA vulnerability in the Slowpath of StarOS for Cisco ASR 5500 Series routers with Data Processing...7.5 High
- cisco hosted collaboration mediation fulfillmentA cross-site request forgery (CSRF) vulnerability in the web interface of the Cisco Hosted...6.5 Medium
- cisco identity services engineA vulnerability in the web framework code of Cisco Identity Services Engine (ISE) could allow an...7.3 High
- cisco prime homeA vulnerability in the web-based graphical user interface (GUI) of Cisco Prime Home could allow...9.8 Critical
- cisco prime collaboration provisioningMultiple vulnerabilities in the web framework code of the Cisco Prime Collaboration Provisioning...6.1 Medium
- cisco meeting serverA vulnerability in the Session Description Protocol (SDP) parser of Cisco Meeting Server could...9.8 Critical
- cisco meeting app, meeting server +1 moreA vulnerability in Cisco Meeting Server and Meeting App could allow an unauthenticated, remote...9.8 Critical
- cisco ios xeA vulnerability in the Transaction Language 1 (TL1) code of Cisco ASR 900 Series routers could...9.8 Critical
- cisco ip interoperability and collaboration systemA vulnerability in the command-line interface of the Cisco IP Interoperability and Collaboration...7.8 High
- cisco ip interoperability and collaboration systemA vulnerability in the web framework code of the Cisco IP Interoperability and Collaboration...6.1 Medium
- nvidia gpu driverFor the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver on Linux R304...7.8 High
- nvidia gpu driverFor the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver contains a...7.8 High
- artifex mujsArtifex Software, Inc. MuJS before a0ceaf5050faf419401fe1b83acfa950ec8a8a89 allows context...7.5 High
- exponentcms exponent cmsExponent CMS 2.3.9 suffers from a SQL injection vulnerability in "/framework/modules/help...7.5 High
- exponentcms exponent cmsExponent CMS 2.3.9 suffers from a SQL injection vulnerability in "/expPaginator.php" affecting...7.5 High
- gitlabGitLab versions 8.9.x and above contain a critical security flaw in the "import/export project"...6.5 Medium
- exponentcms exponent cmsThe Pixidou Image Editor in Exponent CMS prior to v2.3.9 patch 2 could be used to perform an fid...9.8 Critical
- exponentcms exponent cmsThe Pixidou Image Editor in Exponent CMS prior to v2.3.9 patch 2 could be used to upload a...7.5 High
- sybase adaptive server enterpriseSAP ASE 16.0 SP02 PL03 and prior versions allow attackers who own SourceDB and TargetDB databases...9.8 Critical
- samsung mobileA vulnerability on Samsung Mobile M(6.0) devices exists because external access to SystemUI...7.5 High
- exponentcms exponent cmsExponent CMS before 2.3.9 is vulnerable to an attacker uploading a malicious script file using...9.8 Critical
- avast business security, email server security, endpoint protection +8 more +10 moreAvast Internet Security v11.x.x, Pro Antivirus v11.x.x, Premier v11.x.x, Free Antivirus v11.x.x,...5.5 Medium
- squareup git-fastcloneGit-fastclone passes user modifiable strings directly to a shell command9.8 Critical
- squareup git-fastclonegit-fastclone permits arbitrary shell command execution from .gitmodules8.8 High
- uclouvain openjpeg, fedoraproject fedora +1 moreDivide-by-zero vulnerability in the opj_tcd_init_tile function in tcd.c in OpenJPEG before 2.1.1...5.5 Medium
- uclouvain openjpeg, fedoraproject fedora +1 moreHeap-based buffer overflow in the color_cmyk_to_rgb in common/color.c in OpenJPEG before 2.1.1...5.5 Medium
- uclouvain openjpegThe sycc422_t_rgb function in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to...5.5 Medium
- uclouvain openjpegThe color_esycc_to_rgb function in bin/common/color.c in OpenJPEG before 2.1.1 allows attackers...5.5 Medium
- clusterlabs pacemaker, redhat enterprise linux server, enterprise linux server eus +2 moreAn authorization flaw was found in Pacemaker before 1.1.16, where it did not properly guard its...8.8 High
- curlcurl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names...5.3 Medium
- wvware libwmfThe wmf_malloc function in api.c in libwmf 0.2.8.4 allows remote attackers to cause a denial of...5.5 Medium
- memcachedAn integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for...8.1 High
- memcachedMultiple integer overflows in process_bin_update function in Memcached, which is responsible for...9.8 Critical
- memcachedAn integer overflow in the process_bin_append_prepend function in Memcached, which is responsible...9.8 Critical
- curlcurl before version 7.51.0 doesn't parse the authority component of the URL correctly when the...5.3 Medium
- curlA flaw was found in curl before version 7.51.0. The way curl handles cookies permits other...3.3 Low
- curl, haxx libcurl +1 moreThe URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`....3.7 Low
- curlThe `curl_getdate` function in curl before version 7.51.0 is vulnerable to an out of bounds read...5.3 Medium
- curlThe 'globbing' feature in curl before version 7.51.0 has a flaw that leads to integer overflow...6.5 Medium
- curlThe function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory...5.3 Medium
- curlThe libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing...5.3 Medium
- Show moreLoading…