CVEs published in November 2017
1,128 vulnerabilities, 173 critical, 2 exploited.
- circle media circle, meetcircle circle with disney firmware +1 moreAn exploitable vulnerability exists in the WiFi Channel parsing of Circle with Disney running...7.4 High
- circle media circle, meetcircle circle with disney firmware +1 moreAn exploitable routing vulnerability exists in the Circle with Disney cloud infrastructure. A...9.0 Critical
- circle media circle, meetcircle circle with disney firmware +1 moreA backdoor vulnerability exists in remote control functionality of Circle with Disney running...8.0 High
- circle media circle, meetcircle circle with disney firmware +1 moreAn exploitable information disclosure vulnerability exists in the apid daemon of the Circle with...5.8 Medium
- synology carddav serverAn improper restriction of excessive authentication attempts vulnerability in /principals in...9.8 Critical
- linux kernelThe qmi_wwan_bind function in drivers/net/usb/qmi_wwan.c in the Linux kernel through 4.13.11...6.6 Medium
- linux kernelThe usbnet_generic_cdc_bind function in drivers/net/usb/cdc_ether.c in the Linux kernel through 4...6.6 Medium
- linux kerneldrivers/net/usb/asix_devices.c in the Linux kernel through 4.13.11 allows local users to cause a...6.6 Medium
- linux kerneldrivers/media/usb/dvb-usb/dib0700_devices.c in the Linux kernel through 4.13.11 allows local...6.6 Medium
- linux kernelThe ims_pcu_get_cdc_union_desc function in drivers/input/misc/ims-pcu.c in the Linux kernel...6.6 Medium
- linux kernelThe hdpvr_probe function in drivers/media/usb/hdpvr/hdpvr-core.c in the Linux kernel through 4.13...6.6 Medium
- linux kernelThe parse_hid_report_descriptor function in drivers/input/tablet/gtco.c in the Linux kernel...6.6 Medium
- php, canonical ubuntu linux, debian linux +2 more +4 moreIn PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension...7.5 High
- libpam4j project libpam4j, debian linux, redhat enterprise linux +2 moreImproper Input Validation in libpam4j6.5 Medium
- symantec endpoint protectionPrior to SEP 14 RU1 Symantec Endpoint Protection product can encounter an issue of Tamper...7.1 High
- vde project vdeThe Gentoo net-misc/vde package before version 2.3.2-r4 may allow members of the "qemu" group to...9.8 Critical
- symantec endpoint protectionSymantec Endpoint Protection prior to SEP 12.1 RU6 MP9 could be susceptible to a privilege...7.8 High
- symantec endpoint protectionPrior to SEP 12.1 RU6 MP9 & SEP 14 RU1 Symantec Endpoint Protection Windows endpoint can...5.5 Medium
- perfect-privacy vpn managerIn Vectura Perfect Privacy VPN Manager v1.10.10 and v1.10.11, when resetting the network data via...4.4 Medium
- bluditIn Bludit v1.5.2 and v2.0.1, an XSS vulnerability is located in the new page, new category, and...5.4 Medium
- tinywebgalleryIn TinyWebGallery v2.4, an XSS vulnerability is located in the `mkname`, `mkitem`, and `item`...5.4 Medium
- trihedral vtscadaAn Improper Access Control issue was discovered in Trihedral VTScada 11.3.03 and prior. A local,...7.8 High
- trihedral vtscadaAn Uncontrolled Search Path Element issue was discovered in Trihedral VTScada 11.3.03 and prior....7.8 High
- hitachienergy fox515t firmwareAn Improper Input Validation issue was discovered in ABB FOX515T release 1.0. An improper input...5.5 Medium
- siemens simatic pcs7, simatic wincc +1 moreAn Improper Input Validation issue was discovered in Siemens SIMATIC PCS 7 V8.1 prior to V8.1 SP1...4.9 Medium
- advantech webaccessA Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to V8...6.3 Medium
- advantech webaccessAn Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to V8...7.5 High
- micro focus netiq imanager, netiq imanager +1 moreMultiple Reflected XSS in iManager7.6 High
- hashicorp vagrantIn HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.1, a local attacker or...7.8 High
- ffmpeg, debian linux +1 moreThe read_header function in libavcodec/ffv1dec.c in FFmpeg 2.4 and 3.3.4 and possibly earlier...8.8 High
- websense triton ap emailTRITON AP-EMAIL 8.2 before 8.2 IB does not properly restrict file access in an unspecified...7.5 High
- taxonomy find project findCross-site scripting (XSS) vulnerability in the Taxonomy Find module 6.x-2.x through 6.x-1.2 and...5.4 Medium
- keystonejs keystoneCross-Site Request Forgery (CSRF) in keystone8.8 High
- zurmo crmAn Open URL Redirect issue exists in Zurmo 3.2.1.57987acc3018 via an http: URL in the redirectUrl...4.8 Medium
- grandstream ht802 firmwareCross-Site Request Forgery (CSRF) in /cgi-bin/login on Vonage (Grandstream) HT802 devices allows...8.8 High
- grandstream ht802 firmwareStored Cross-site scripting (XSS) vulnerability in /cgi-bin/config2 on Vonage (Grandstream) HT802...5.4 Medium
- grandstream ht802 firmwareCross-Site Request Forgery (CSRF) in the Basic Settings screen on Vonage (Grandstream) HT802...8.0 High
- hanwhasecurity web viewerWeb Viewer 1.0.0.193 on Samsung SRN-1670D devices suffers from an Unrestricted file upload...8.8 High
- zurmo crmCross-site scripting (XSS) exists in Zurmo 3.2.1.57987acc3018 via a data: URL in the redirectUrl...4.8 Medium
- graphicsmagickThe DrawImage function in magick/render.c in GraphicsMagick 1.3.26 does not properly look for pop...8.8 High
- samba rsync, canonical ubuntu linux, debian linux +2 moreThe receive_xattr function in xattrs.c in rsync 3.1.2 and 3.1.3-development does not check for a...9.8 Critical
- linux kernelThe kvm_vm_ioctl_check_extension function in arch/powerpc/kvm/powerpc.c in the Linux kernel...5.5 Medium
- graphicsmagickThe ReadWPGImage function in coders/wpg.c in GraphicsMagick 1.3.26 does not properly validate...8.8 High
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager 13 before build 13500 allows SQL injection via...9.8 Critical
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager 13 before build 13500 allows Post-authentication SQL...8.8 High
- google chrome, debian linux +1 moreOff-by-one read/write on the heap in Blink in Google Chrome prior to 62.0.3202.62 allowed a...8.8 High
- google chrome, debian linux +1 moreInappropriate implementation in V8 in Google Chrome prior to 62.0.3202.62 allowed a remote...8.8 High
- google chrome, debian linux +1 moreAn integer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to...8.8 High
- google chrome, debian linux +1 moreA use after free in WebAudio in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote...8.8 High
- google chrome, debian linux +1 moreHeap buffer overflow in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to...8.8 High
- Show moreLoading…