CVEs published in November 2017
1,128 vulnerabilities, 173 critical, 2 exploited.
- varnish-cache varnish, varnish cache project cache, debian linux +2 morevbf_stp_error in bin/varnishd/cache/cache_fetch.c in Varnish HTTP Cache 4.1.x before 4.1.9 and 5...9.1 Critical
- mozilla firefoxIf a document's Referrer Policy attribute is set to "no-referrer" sometimes two network requests...5.3 Medium
- mozilla firefoxJavaScript can be injected into an exported bookmarks file by placing JavaScript code into user...6.1 Medium
- mozilla firefoxControl characters prepended before "javascript:" URLs pasted in the addressbar can cause the...6.1 Medium
- mozilla firefoxPunycode format text will be displayed for entire qualified international domain names in some...5.3 Medium
- mozilla firefoxSVG loaded through "<img>" tags can use "<meta>" tags within the SVG data to set cookies for that...5.3 Medium
- mozilla firefoxMixed content blocking of insecure (HTTP) sub-resources in a secure (HTTPS) document was not...7.3 High
- mozilla firefoxA "data:" URL loaded in a new tab did not inherit the Content Security Policy (CSP) of the...6.1 Medium
- mozilla firefoxSome Arabic and Indic vowel marker characters can be combined with Latin characters in a domain...5.3 Medium
- mozilla firefoxThe combined, single character, version of the letter 'i' with any of the potential accents in...5.3 Medium
- mozilla firefoxA vulnerability where the security wrapper does not deny access to some exposed properties using...5.3 Medium
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe Resource Timing API incorrectly revealed navigations in cross-origin iframes. This is a same...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreA use-after-free vulnerability can occur when flushing and resizing layout because the ...9.8 Critical
- mozilla firefoxMemory safety bugs were reported in Firefox 56. Some of these bugs showed evidence of memory...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreMemory safety bugs were reported in Firefox 56 and Firefox ESR 52.4. Some of these bugs showed...9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreThe sctp_do_peeloff function in net/sctp/socket.c in the Linux kernel before 4.14 does not check...7.8 High
- linux kernel, canonical ubuntu linux, redhat enterprise linux +2 moreThe tower_probe function in drivers/usb/misc/legousbtower.c in the Linux kernel before 4.8.1...6.3 Medium
- oracle tuxedoVulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Security)...7.0 High
- oracle tuxedoVulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core)....9.9 Critical
- oracle tuxedoVulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core)....10.0 Critical
- oracle tuxedoVulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core)....7.5 High
- oracle tuxedoVulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core)....5.3 Medium
- ca identity governanceA stored cross-site scripting vulnerability in CA Identity Governance 12.6 allows remote...5.4 Medium
- blackberry qnx software development platform, qnx software development platform (qnx sdp) +1 moreIn BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, a loss of...2.6 Low
- blackberry qnx software development platform (sdp), qnx software development platform +1 moreIn BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, an...3.8 Low
- blackberry qnx software development platform, qnx software development platform (qnx sdp) +1 moreIncomplete vulnerability mitigations1.9 Low
- blackberry qnx software development platform (sdp), qnx software development platform +1 moreIn BlackBerry QNX Software Development Platform (SDP) 6.6.0, an information disclosure...3.8 Low
- blackberry qnx software development platform, qnx software development platform (qnx sdp) +1 moreIn BlackBerry QNX Software Development Platform (SDP) 6.6.0, an elevation of privilege...9.6 Critical
- collectdThe csnmp_read_table function in snmp.c in the SNMP plugin in collectd before 5.6.3 is...9.8 Critical
- apache couchdbCouchDB administrative users can configure the database server via HTTP(S). Some of the...7.2 High
- apache couchdbDue to differences in the Erlang-based JSON parser and JavaScript-based JSON parser, it is...9.8 Critical
- snapcreek duplicatorinstaller.php in the Snap Creek Duplicator (WordPress Site Migration & Backup) plugin before 1.2...6.1 Medium
- kodak insiteMultiple cross-site scripting (XSS) vulnerabilities in Kodak InSite 6.5 to 8.0 allow remote...6.1 Medium
- google android, linux kernel +1 moreAn elevation of privilege vulnerability exists in the NVIDIA GPU driver ...7.8 High
- google android, pixel +1 moreAn information disclosure vulnerability exists in the Thermal Driver, where a missing bounds...7.5 High
- google android, pixel +1 moreAn elevation of Privilege vulnerability exists in the Thermal Driver, where a missing bounds...9.8 Critical
- apache cxfImproper Input Validation in Apache CXF5.5 Medium
- openstack novaOpenStack Nova Filter Scheduler Bypass6.5 Medium
- octopus deployCross-site scripting (XSS) vulnerability in the All Variables tab in Octopus Deploy 3.4.0-3.13.6 ...5.4 Medium
- ibm storwize v7000 (2076), flashsystem v9000 firmware, san volume controller firmware +2 more +4 moreA vulnerability in the Service Assistant GUI in IBM Storwize V7000 (2076) 8.1 could allow a...9.8 Critical
- ibm security access manager, security access manager 9.0 firmware +1 moreIBM Security Access Manager Appliance 9.0.3 is vulnerable to a XML External Entity Injection (XXE...8.1 High
- ibm security access manager, security access manager 9.0 firmware +1 moreIBM Security Access Manager Appliance 9.0.3 could allow a remote authenticated attacker to...8.8 High
- ibm bigfix family, bigfix platform +1 moreIBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) could allow a remote attacker to obtain...5.9 Medium
- hclsoftware bigfix platformIBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) does not require that users should have...9.8 Critical
- symantec endpoint encryptionPrior to SEE v11.1.3MP1, Symantec Endpoint Encryption can be susceptible to a null pointer de...6.8 Medium
- symantec endpoint encryptionPrior to SEE v11.1.3MP1, Symantec Endpoint Encryption can be susceptible to a denial of service ...4.5 Medium
- tcpdumptcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_print in print-aoe.c and...5.5 Medium
- getkirby panelKirby XSS Vulnerability5.4 Medium
- ulterius serverThe Process function in RemoteTaskServer/WebServer/HttpServer.cs in Ulterius before 1.9.5.0...7.5 High
- radare radare2In radare2 2.0.1, libr/bin/dwarf.c allows remote attackers to cause a denial of service (invalid...5.5 Medium
- Show moreLoading…