CVEs published in November 2017
1,128 vulnerabilities, 173 critical, 2 exploited.
- pnp4nagiosPNP4Nagios through 0.6.26 has /usr/bin/npcd and npcd.cfg owned by an unprivileged account but...7.8 High
- shibboleth opensaml, debian linux +1 moreThe DynamicMetadataProvider class in saml/saml2/metadata/impl/DynamicMetadataProvider.cpp in...8.1 High
- shibboleth service provider, debian linux +1 moreshibsp/metadata/DynamicMetadataProvider.cpp in the Dynamic MetadataProvider plugin in Shibboleth...8.1 High
- procmailHeap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22...9.8 Critical
- fasterxml jackson-databind, debian linux, netapp oncommand balance +21 more +23 morejackson-databind vulnerable to deserialization flaw leading to unauthenticated remote code execution9.8 Critical
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.5 High
- nlnetlabs ldnsA double-free vulnerability in str2host.c in ldns 1.7.0 have unspecified impact and attack vectors.9.8 Critical
- nlnetlabs ldnsA double-free vulnerability in parse.c in ldns 1.7.0 have unspecified impact and attack vectors.9.8 Critical
- google androidUse-after-free vulnerability in the snd_pcm_info function in the ALSA subsystem in the Linux...7.8 High
- tibco jasperreports server, jaspersoft, jaspersoft reporting and analytics +4 more +6 moreTIBCO JasperReports Server credentials disclosure9.3 Critical
- tibco jasperreports library, jasperreports server, jaspersoft +8 more +10 moreTIBCO JasperReports persistent cross site scripting5.4 Medium
- apport project apport, canonical ubuntu linux +1 moreApport 2.13 through 2.20.7 does not properly handle crashes originating from a PID namespace...7.8 High
- apport project apport, canonical ubuntu linux +1 moreApport before 2.13 does not properly handle crashes originating from a PID namespace allowing...7.8 High
- apport project apport, canonical ubuntu linux +1 moreApport through 2.20.7 does not properly handle core dumps from setuid binaries allowing local...7.8 High
- orange livebox 1.1 firmwareLivebox 1.1 allows remote authenticated users to upload arbitrary configuration files, download...8.8 High
- cyberduckCyberduck before 4.4.4 on Windows does not properly validate X.509 certificate chains, which...5.9 Medium
- apache karafImproper Input Validation in Apache Karaf5.5 Medium
- zetacomponents mailZeta Components Mail Arbitrary code execution via a crafted email address8.1 High
- scala-lang scalaHigh severity vulnerability that affects org.scala-lang:scala-compiler7.8 High
- psftp psftpdThe PSFTPd 10.0.4 Build 729 server stores its configuration inside PSFTPd.dat. This file is a...5.3 Medium
- psftp psftpdA use-after-free issue could be triggered remotely in the SFTP component of PSFTPd 10.0.4 Build...5.9 Medium
- psftp psftpdThe PSFTPd 10.0.4 Build 729 server does not properly escape data before writing it into a Comma...5.3 Medium
- psftp psftpdThe PSFTPd 10.0.4 Build 729 server does not prevent FTP bounce scans by default. These can be...4.3 Medium
- ikarussecurity anti.virusIn IKARUS anti.virus 2.16.7, the ntguard.sys driver contains an Arbitrary Write vulnerability...7.8 High
- cactiCacti before 1.0.0 allows remote authenticated users to conduct PHP object injection attacks and...8.8 High
- apache camelCamel-castor component in Apache Camel is vulnerable to Java object de-serialisation9.8 Critical
- apache camelApache Camel camel-hessian component vulnerable to Java object deserialization9.8 Critical
- gemirro project gemirroGemirro Stored XSS in Gemspec "homepage" value6.1 Medium
- d-link dcs-936lD-Link DCS-936L devices with firmware before 1.05.07 have an inadequate CSRF protection mechanism...8.8 High
- gnu binutilsThe pe_bfd_read_buildid function in peicode.h in the Binary File Descriptor (BFD) library (aka...7.8 High
- gnu binutilscoffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU...7.8 High
- gnu binutilsThe print_gnu_property_note function in readelf.c in GNU Binutils 2.29.1 does not have integer...7.8 High
- gnu binutilsThe _bfd_elf_parse_gnu_properties function in elf-properties.c in the Binary File Descriptor (BFD...7.8 High
- gnu binutilsThe display_debug_frames function in dwarf.c in GNU Binutils 2.29.1 allows remote attackers to...7.8 High
- gnu binutilsThe aout_get_external_symbols function in aoutx.h in the Binary File Descriptor (BFD) library ...7.8 High
- gnu binutilsThe coff_slurp_line_table function in coffcode.h in the Binary File Descriptor (BFD) library (aka...7.8 High
- siemens sm-2556 firmwareAn issue was discovered on Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants...9.8 Critical
- siemens sm-2556 firmwareAn issue was discovered on Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants...6.1 Medium
- siemens sm-2556 firmwareAn issue was discovered on Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants...5.3 Medium
- microsoft asp.net coreCross-origin Resource Sharing bypass in ASP.NET Core7.5 High
- b3log symphonyb3log Symphony (aka Sym) 2.2.0 has XSS in processor/AdminProcessor.java in the admin console, as...5.4 Medium
- microsoft excel, office +1 moreMicrosoft Excel 2016 Click-to-Run (C2R) allows an attacker to run arbitrary code in the context...7.8 High
- microsoft asp.net, aspnetcore +1 moreDenial of service in ASP.NET Core7.5 High
- microsoft officeMicrosoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013...7.8 High
- microsoft windows 10, windows 7, windows 8.1 +5 more +7 moreWindows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1,...4.7 Medium
- microsoft asp.net coreOpen redirect in ASP.NET Core8.8 High
- microsoft excel, excel viewer, office +1 more +3 moreMicrosoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013...7.8 High
- microsoft excel, excel viewer, office +1 more +3 moreMicrosoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013...5.5 Medium
- microsoft project server, sharepoint enterprise server, microsoft corporation server +2 moreMicrosoft Project Server and Microsoft SharePoint Enterprise Server 2016 allow an attacker to use...8.8 High
- microsoft chakracore, edge +1 moreMicrosoft Edge in Microsoft Windows 10 1703, 1709, Windows Server, version 1709, and ChakraCore...3.1 Low
- Show moreLoading…