CVEs published in November 2017
1,128 vulnerabilities, 173 critical, 2 exploited.
- ipswitch ws ftpIpswitch WS_FTP Professional before 12.6.0.3 has buffer overflows in the local search field and...7.8 High
- tgsoft vir.it explorerIn Vir.IT eXplorer Anti-Virus before 8.5.42, the driver file (VIAGLT64.SYS) contains an Arbitrary...7.8 High
- linux kerneldrivers/media/usb/dvb-usb-v2/lmedm04.c in the Linux kernel through 4.13.11 allows local users to...6.6 Medium
- linux kernelThe imon_probe function in drivers/media/rc/imon.c in the Linux kernel through 4.13.11 allows...6.6 Medium
- linux kernelThe cx231xx_usb_probe function in drivers/media/usb/cx231xx/cx231xx-cards.c in the Linux kernel...6.6 Medium
- linux kernelThe usb_get_bos_descriptor function in drivers/usb/core/config.c in the Linux kernel before 4.13...6.6 Medium
- linux kernelThe cdc_parse_cdc_header function in drivers/usb/core/message.c in the Linux kernel before 4.13.6...6.8 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe usbhid_parse function in drivers/hid/usbhid/hid-core.c in the Linux kernel before 4.13.8...6.6 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe get_endpoints function in drivers/usb/misc/usbtest.c in the Linux kernel through 4.13.11...6.6 Medium
- linux kerneldrivers/usb/core/config.c in the Linux kernel before 4.13.6 allows local users to cause a denial...6.6 Medium
- linux kernelThe uas driver in the Linux kernel before 4.13.6 allows local users to cause a denial of service ...6.6 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe snd_usb_create_streams function in sound/usb/card.c in the Linux kernel before 4.13.6 allows...6.6 Medium
- linux kernel, canonical ubuntu linux +1 moresound/core/seq_device.c in the Linux kernel before 4.13.4 allows local users to cause a denial of...6.6 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moresound/usb/mixer.c in the Linux kernel before 4.13.8 allows local users to cause a denial of...6.6 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moredrivers/uwb/uwbd.c in the Linux kernel before 4.13.6 allows local users to cause a denial of...7.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe usb_serial_console_disconnect function in drivers/usb/serial/console.c in the Linux kernel...6.6 Medium
- yajl-ruby project yajl-ruby, debian linux +1 moreyajl-ruby gem Denial of Service vulnerability7.5 High
- red hat ansible, redhat enterprise linux server +1 moreAnsible Insertion of Sensitive Information into Log File vulnerability9.8 Critical
- microsoft chakracoreChakraCore vulnerable to privilege escalation9.8 Critical
- tenable securitycenter, security center +1 moreSecurityCenter versions 5.5.0, 5.5.1 and 5.5.2 contain a SQL Injection vulnerability that could...8.8 High
- wordpressWordPress before 4.8.3 is affected by an issue where $wpdb->prepare() can create unexpected and...9.8 Critical
- cisco webex meetings serverA vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to...5.3 Medium
- cisco webex meetings serverA vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to...5.4 Medium
- cisco aironet 3800 firmwareA vulnerability in the handling of 802.11w Protected Management Frames (PAF) by Cisco Aironet...6.1 Medium
- cisco wireless lan controller softwareA vulnerability in the Access Network Query Protocol (ANQP) ingress frame processing...6.1 Medium
- cisco aironet 1800 firmware, aironet 2800 firmware, aironet 3800 firmware +2 moreA vulnerability in the implementation of Protected Extensible Authentication Protocol (PEAP)...7.5 High
- cisco wireless lan controller softwareA vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) Discovery...7.5 High
- cisco aironet ap firmwareA vulnerability in the packet processing code of Cisco IOS Software for Cisco Aironet Access...4.3 Medium
- cisco wireless lan controller softwareA vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco Wireless LAN...6.3 Medium
- cisco firepower extensible operating systemA vulnerability in the Smart Licensing Manager service of the Cisco Firepower 4100 Series Next...8.8 High
- cisco prime collaboration provisioningA vulnerability in the web framework code for the SQL database interface of the Cisco Prime...8.1 High
- cisco wireless lan controller softwareA vulnerability in the implementation of 802.11v Basic Service Set (BSS) Transition Management...7.4 High
- cisco aironet 1562 firmware, aironet 2800 firmware, aironet 3800 firmware +2 moreA vulnerability in Extensible Authentication Protocol (EAP) ingress frame processing for the...6.5 Medium
- cisco aironet 1562 firmware, aironet 2800 firmware, aironet 3800 firmware +2 moreA vulnerability in 802.11 association request frame processing for the Cisco Aironet 1560, 2800,...6.5 Medium
- cisco application policy infrastructure controller enterprise moduleA vulnerability within the firewall configuration of the Cisco Application Policy Infrastructure...8.8 High
- cisco identity services engine, identity services engine express, identity services engine virtual appliance +2 moreA vulnerability in the restricted shell of the Cisco Identity Services Engine (ISE) that is...7.8 High
- cisco firepower 4100 next-generation firewall firmware, firepower 9300 security appliance firmware, unified computing system manager firmware +2 moreA vulnerability in the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series...7.8 High
- open source solution technology corporation openamOpenAM (Open Source Edition) allows an attacker to bypass authentication and access unauthorized...8.1 High
- justsystem rakuraku hagaki, rakuraku hagaki select for ichitaro, justsystems ichitaro 2016 +13 more +15 moreMemory corruption vulnerability in Rakuraku Hagaki (Rakuraku Hagaki 2018, Rakuraku Hagaki 2017,...7.8 High
- flets-w flets easy setup tool, nippon telegraph and telephone west corporation installer of flets easy setup tool +1 moreUntrusted search path vulnerability in Installer of Flets Easy Setup Tool Ver1.2.0 and earlier...7.8 High
- suse susefirewall2The SuSEfirewall2 package before 3.6.312-2.13.1 in SUSE Linux Enterprise (SLE) Desktop 12 SP2,...6.5 Medium
- [unknown] ceph, debian linux +1 moreIn Ceph, a format string flaw was found in the way libradosstriper parses input from user. A user...2.3 Low
- opensslThere is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1...6.5 Medium
- ibm biginsights, infosphere biginsights +1 moreIBM Infosphere BigInsights 4.2.0 and 4.2.5 could allow a remote attacker to hijack the clicking...5.4 Medium
- ibm biginsights, infosphere biginsights +1 moreIBM Infosphere BigInsights 4.2.0 and 4.2.5 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm biginsights, infosphere biginsights +1 moreIBM Infosphere BigInsights 4.2.0 and 4.2.5 is vulnerable to link injection. By persuading a...5.4 Medium
- ibm jazz reporting serviceIBM Jazz Reporting Service (JRS) 6.0.4 could allow an authenticated user to obtain information on...5.0 Medium
- ibm openpages grc platformIBM OpenPages GRC Platform 7.1, 7.2, and 7.3 could allow an unauthenticated user to obtain...5.3 Medium
- ibm openpages grc platformIBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site request forgery which...8.8 High
- ibm openpages grc platformIBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site scripting. This...5.4 Medium
- Show moreLoading…