CVEs published in November 2017
1,128 vulnerabilities, 173 critical, 2 exploited.
- ibm openpages grc platformIBM OpenPages GRC Platform 7.2 and 7.3 with OpenPages Loss Event Entry (LEE) application could...5.3 Medium
- ibm openpages grc platformIBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site scripting. This...5.4 Medium
- webkitgtk webkitgtk\+The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate...5.3 Medium
- webkitgtk webkitgtk\+The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate...9.8 Critical
- ibm openpages grc platformIBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site scripting. This...5.4 Medium
- radare radare2In radare 2.0.1, a pointer wraparound vulnerability exists in store_versioninfo_gnu_verdef() in...5.5 Medium
- radare radare2In radare 2.0.1, an out-of-bounds read vulnerability exists in string_scan_range() in libr/bin...7.8 High
- radare radare2In radare 2.0.1, a memory corruption vulnerability exists in store_versioninfo_gnu_verdef() and...7.8 High
- ignitum seraSera 1.2 stores the user's login password in plain text in their home directory. This makes...7.8 High
- schedmd slurmInsecure SPANK environment variable handling exists in SchedMD Slurm before 16.05.11, 17.x before...7.8 High
- dockertar-split memory exhaustion6.5 Medium
- pluxmlPluXml version 5.6 is vulnerable to stored cross-site scripting vulnerability, within the article...5.4 Medium
- graphicsmagick, debian linux +1 moreGraphicsMagick 1.3.26 is vulnerable to a memory information disclosure vulnerability found in the...6.5 Medium
- graphicsmagick, debian linux +1 moreGraphicsMagick 1.3.26 is vulnerable to a heap-based buffer overflow vulnerability found in the ...8.8 High
- apache hiveModerate severity vulnerability that affects org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service4.3 Medium
- jenkins sshJenkins SSH Plugin user passwords for encrypted SSH keys stored in plaintext9.8 Critical
- jenkins favoriteJenkins Favorite Plugin vulnerable to Cross-Site Request Forgery8.8 High
- jenkins favorite pluginMissing permission check in Jenkins Favorite Plugin4.3 Medium
- jenkins git clientInsecure temporary file usage in Jenkins Git Client Plugin3.3 Low
- korenix jetnet5018g firmware, jetnet5310g firmware, jetnet5428g-2g-2fx firmware +6 more +8 moreA Use of Hard-coded Credentials issue was discovered in Korenix JetNet JetNet5018G version 1.4,...9.8 Critical
- korenix jetnet5018g firmware, jetnet5310g firmware, jetnet5428g-2g-2fx firmware +6 more +8 moreA Use of Hard-coded Cryptographic Key issue was discovered in Korenix JetNet JetNet5018G version...9.8 Critical
- catalyst-plugin-static-simple project catalyst-plugin-static-simpleThe Catalyst-Plugin-Static-Simple module before 0.34 for Perl allows remote attackers to read...7.5 High
- octobercms octoberOctober CMS CSRF8.8 High
- mongodbMongoDB 3.4.x before 3.4.10, and 3.5.x-development, has a disabled-by-default configuration...9.1 Critical
- emc appsyncEMC AppSync Server prior to 3.5.0.1 contains database accounts with hardcoded passwords that...7.8 High
- dell emc unisphere, emc solutions enabler, vasa +1 more +3 moreEMC Unisphere for VMAX Virtual Appliance (vApp) versions prior to 8.4.0.15, EMC Solutions Enabler...9.8 Critical
- apache openoffice, debian linux +1 moreA vulnerability in Apache OpenOffice Writer DOC file parser before 4.1.4, and specifically in...7.8 High
- apache openoffice, debian linux +1 moreA vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet,...7.8 High