CVEs published in November 2017
1,128 vulnerabilities, 173 critical, 2 exploited.
- backintime project backintimebackintime (aka Back in Time) before 1.1.24 did improper escaping/quoting of file paths used as...7.8 High
drupal/config_permsPackagistCustom Permissions is a lightweight module that allows permissions to be created and managed through an administrative form. When this module is in use, any user who is able to perform an action which…No scoredrupal/permissions_by_termPackagistThe Permissions by Term module extends Drupal by adding functionality for restricting access to single nodes via taxonomy terms. The module grants access to nodes that are being blocked by other node…No score- remobjects remoting sdk 9RemObjects Remoting SDK 9 1.0.0.0 for Delphi is vulnerable to a reflected Cross Site Scripting ...6.1 Medium
- itextpdf itextImproper Restriction of XML External Entity Reference in iText8.8 High
- metalgenix genixcmsMetalGenix GeniXCMS vulnerable to SQL Injection9.8 Critical
- hp content manager, micro focus hpe content manager workgroup service +1 moreMFSBGN03791 rev.1 - HPE Content Manager Workgroup Service, Denial of Service (DoS)5.9 Medium
- inpage, inpage reader +1 moreSpecial crafted InPage document leads to arbitrary code execution in InPage reader.7.8 High
- mit kerberos 5plugins/preauth/pkinit/pkinit_crypto_openssl.c in MIT Kerberos 5 (aka krb5) through 1.15.2...9.8 Critical
- sam2p project sam2pIn sam2p 0.49.4, there are integer overflows (with resultant heap-based buffer overflows) in...5.5 Medium
- cactiCacti 1.1.27 allows remote authenticated administrators to read arbitrary files by placing the...4.9 Medium
- cactiCacti 1.1.27 allows remote authenticated administrators to conduct Remote Code Execution attacks...7.2 High
- anti-spam smtp proxy project smtp proxyThe Gentoo mail-filter/assp package 1.9.8.13030 and earlier allows local users to gain privileges...7.8 High
- owlmixin project owlmixinUnsafe deserialization in owlmixin9.8 Critical
- pyanyapi project pyanyapiUnsafe pyyaml load usage in PyAnyAPI9.8 Critical
- mlalchemy project mlalchemyUnsafe deserialization in MLAlchemy9.8 Critical
tomcat7Debiantomcat7 - regression updateNo score- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreA use after free in V8 in Google Chrome prior to 62.0.3202.89 allowed a remote attacker to...8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreA stack buffer overflow in the QUIC networking stack in Google Chrome prior to 62.0.3202.89...9.8 Critical
- linux kernelThe dvb_frontend_free function in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel...6.6 Medium
- ingenious school management system project school management system/view/friend_profile.php in Ingenious School Management System 2.3.0 is vulnerable to Boolean...9.8 Critical
- kabona webdatorcentralA Plaintext Storage of a Password issue was discovered in Kabona AB WebDatorCentral (WDC)...9.8 Critical
- net-ping-external project net-ping-externalThe Net::Ping::External extension through 0.15 for Perl does not properly sanitize arguments (e.g...9.8 Critical
- cactilib/rrd.php in Cacti 1.1.27 allows remote authenticated administrators to execute arbitrary OS...7.2 High
- automattic mongooseAn exploitable memory corruption vulnerability exists in the Websocket protocol implementation of...9.8 Critical
- automattic mongooseAn exploitable memory corruption vulnerability exists in the Websocket protocol implementation of...8.1 High
- circle media circle, meetcircle circle with disney firmware +1 moreAn exploitable vulnerability exists in the notifications functionality of Circle with Disney...9.9 Critical
- circle media circle, meetcircle circle with disney firmware +1 moreAn exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with...9.9 Critical
- circle media circle, meetcircle circle with disney firmware +1 moreAn exploitable vulnerability exists in the WiFi configuration functionality of Circle with Disney...9.0 Critical
- circle media circle, meetcircle circle with disney firmware +1 moreAn exploitable authentication bypass vulnerability exists in the API daemon of Circle with Disney...9.0 Critical
- circle media circle, meetcircle circle with disney firmware +1 moreAn exploitable vulnerability exists in the filtering functionality of Circle with Disney. SSL...8.1 High
- circle media circle, meetcircle circle with disney firmware +1 moreAn exploitable vulnerability exists in the remote control functionality of Circle with Disney...7.4 High
- circle media circle, meetcircle circle with disney firmware +1 moreAn exploitable vulnerability exists in the remote control functionality of Circle with Disney...9.0 Critical
- automattic mongooseAn infinite loop programming error exists in the DNS server functionality of Cesanta Mongoose 6.8...7.5 High
- circle media circle, meetcircle circle with disney firmware +1 moreAn exploitable vulnerability exists in the signature verification of the firmware update...9.9 Critical
- automattic mongooseAn exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing...8.2 High
- automattic mongooseAn exploitable stack buffer overflow vulnerability exists in the MQTT packet parsing...9.8 Critical
- automattic mongooseAn exploitable NULL pointer dereference vulnerability exists in the MQTT packet parsing...7.5 High
- automattic mongooseAn exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing...9.8 Critical
- automattic mongooseAn exploitable use-after-free vulnerability exists in the HTTP server implementation of Cesanta...9.8 Critical
- circle media circle, meetcircle circle with disney firmware +1 moreAn exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with...9.9 Critical
- circle media circle, meetcircle circle with disney firmware +1 moreAn exploitable Denial of Service vulnerability exists in the API daemon of Circle with Disney...7.5 High
- circle media circle, meetcircle circle with disney firmware +1 moreAn exploitable vulnerability exists in the user photo update functionality of Circle with Disney...7.5 High
- circle media circle, meetcircle circle with disney firmware +1 moreAn exploitable vulnerability exists in the database update functionality of Circle with Disney...9.0 Critical
- circle media circle, meetcircle circle with disney firmware +1 moreAn exploitable vulnerability exists in the servers update functionality of Circle with Disney...9.0 Critical
- circle media circle, meetcircle circle with disney firmware +1 moreAn exploitable vulnerability exists in the torlist update functionality of Circle with Disney...9.6 Critical
- circle media circle, meetcircle circle with disney firmware +1 moreAn exploitable vulnerability exists in the /api/CONFIG/backup functionality of Circle with Disney...9.9 Critical
- circle media circle, meetcircle circle with disney firmware +1 moreAn exploitable vulnerability exists in the firmware update functionality of Circle with Disney....9.6 Critical
- circle media circle, meetcircle circle with disney firmware +1 moreAn exploitable vulnerability exists in the generation of authentication token functionality of...8.1 High
- circle media circle, meetcircle circle with disney firmware +1 moreAn exploitable vulnerability exists in the WiFi management of Circle with Disney. A crafted...6.5 Medium
- Show moreLoading…