CVEs published in November 2017
1,128 vulnerabilities, 173 critical, 2 exploited.
- freebsdIn FreeBSD before 11.1-STABLE, 11.1-RELEASE-p4, 11.0-RELEASE-p15, 10.4-STABLE, 10.4-RELEASE-p3,...3.3 Low
- freebsdIn FreeBSD 10.x before 10.4-STABLE, 10.4-RELEASE-p3, and 10.3-RELEASE-p24 named paths are...7.8 High
- freebsdIn FreeBSD before 11.1-STABLE, 11.1-RELEASE-p4, 11.0-RELEASE-p15, 10.4-STABLE, 10.4-RELEASE-p3,...3.3 Low
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /MyPage...9.8 Critical
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the ...9.8 Critical
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /MyPage...9.8 Critical
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager 13 allows SQL injection via the /manageConfMons.do...9.8 Critical
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the ...9.8 Critical
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the ...9.8 Critical
- hashicorp vagrantIf HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.3 is installed but...7.8 High
- sandisk secureaccessSanDisk Secure Access 3.01 vault decrypts and copies encrypted files to a temporary folder, where...4.3 Medium
- otrs, debian linux +1 moreIn the Agent Frontend in Open Ticket Request System (OTRS) 3.3.x through 3.3.18, with a crafted...8.8 High
- intel unite, intel corporation unite app +1 moreEscalation of privilege vulnerability in admin portal for Intel Unite App versions 3.1.32.12, 3.1...9.1 Critical
phpMageiaUpdated php packages fix security vulnerabilitiesNo score- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAn issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability...9.8 Critical
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAn issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability...9.8 Critical
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAn issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability...9.8 Critical
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAn issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability...9.8 Critical
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAn issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability...9.8 Critical
- cisco umbrella insights virtual appliance, umbrella virtual appliance +1 moreA vulnerability in Cisco Umbrella Insights Virtual Appliances 2.1.0 and earlier could allow an...8.2 High
- cisco emergency responder, finesse, hosted collaboration solution +8 more +10 moreA vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice...9.8 Critical
- cisco registered envelope serviceMultiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud...6.1 Medium
- cisco registered envelope service, email encryption +1 moreMultiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud...6.1 Medium
- cisco registered envelope serviceMultiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud...6.1 Medium
- cisco registered envelope serviceMultiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud...6.1 Medium
- cisco rf gateway 1 firmwareA vulnerability in the TCP state machine of Cisco RF Gateway 1 devices could allow an...7.5 High
- cisco identity services engine softwareA vulnerability in the Guest Portal login page of Cisco Identity Services Engine (ISE) could...7.5 High
- cisco hyperflex hx data platformA vulnerability in system logging when replication is being configured with the Cisco HyperFlex...6.0 Medium
- cisco findit network discovery utilityA vulnerability in the Cisco FindIT Network Discovery Utility could allow an authenticated, local...7.8 High
- cisco packet tracerAn untrusted search path (aka DLL Preload) vulnerability in the Cisco Network Academy Packet...6.7 Medium
- cisco advanced malware protection for endpointsAn untrusted search path (aka DLL Preloading) vulnerability in the Cisco Immunet antimalware...6.7 Medium
- cisco meeting serverA vulnerability in the H.264 decoder function of Cisco Meeting Server could allow an...5.8 Medium
- cisco email security appliance, email security appliance firmware +1 moreA vulnerability in the Cisco Email Security Appliance (ESA) could allow an unauthenticated,...5.3 Medium
- cisco conference directorA vulnerability in the upgrade process of Cisco Spark Board could allow an authenticated, local...4.4 Medium
- cisco ip phone 8800 series firmwareA vulnerability in the debug interface of Cisco IP Phone 8800 series could allow an authenticated...6.7 Medium
- cisco iosA vulnerability in the IOS daemon (IOSd) web-based management interface of Cisco IOS and IOS XE...6.1 Medium
- cisco asyncos, web security appliance +1 moreA vulnerability in the Advanced Malware Protection (AMP) file filtering feature of Cisco AsyncOS...5.3 Medium
- cisco unified communications manager, unified communications domain manager +1 moreA vulnerability in the Cisco Unified Communications Manager SQL database interface could allow an...4.3 Medium
- cisco secure firewall management centerA vulnerability in the SNORT detection engine of Cisco Firepower System Software could allow an...5.8 Medium
- cisco firepower extensible operating systemA vulnerability exists in the process of creating default IP blocks during device initialization...5.3 Medium
- cisco registered envelope service, email encryption +1 moreMultiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud...6.1 Medium
- cisco registered envelope service, email encryption +1 moreMultiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud...6.1 Medium
- cisco registered envelope service, email encryption +1 moreMultiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud...6.1 Medium
- libbpg project libbpgThe restore_tqb_pixels function in hevc_filter.c in libavcodec, as used in libbpg 0.9.7 and other...8.8 High
- libbpg project libbpgThe image_alloc function in bpgenc.c in libbpg 0.9.7 has an integer overflow, with a resultant...8.8 High
- libbpg project libbpgA NULL Pointer Dereference exists in VideoLAN x265, as used in libbpg 0.9.7 and other products,...7.8 High
- yoast wordpress seoCross-site scripting (XSS) vulnerability in admin/google_search_console/class-gsc-table.php in...4.8 Medium
- lansweeperLanSweeper 6.0.100.75 has XSS via the description parameter to /Calendar/CalendarActions.aspx.6.1 Medium
- trusted boot project bootCertain function pointers in Trusted Boot (tboot) through 1.9.6 are not validated and can cause...7.8 High
- commscope arris tg1682g firmwareArris TG1682G devices with Comcast TG1682_2.0s7_PRODse 10.0.59.SIP.PC20.CT software allow...6.1 Medium
- Show moreLoading…