CVEs published in November 2017
1,128 vulnerabilities, 173 critical, 2 exploited.
- creolabs gravityCreolabs Gravity Version: 1.0 Heap Overflow Potential Code Execution. By creating a large loop...9.8 Critical
- creolabs gravityCreolabs Gravity Version: 1.0 Use-After-Free Possible code execution. An example of a Heap-Use...9.8 Critical
- nv-websocket-client project nv-websocket-clientnv-websocket-client allows attackers to spoof SSL/TLS servers via an arbitrary valid certificate5.9 Medium
- swagger swagger-codegen, swagger-parser +1 moreDeserialization of Untrusted Data in swagger-parser8.8 High
- tcmu-runner project tcmu-runnerThe tcmu-runner daemon in tcmu-runner version 1.0.5 to 1.2.0 is vulnerable to a local denial of...5.5 Medium
- tcmu-runner project tcmu-runnertcmu-runner version 1.0.5 to 1.2.0 is vulnerable to a dbus triggered NULL pointer dereference in...7.5 High
- octobercms octoberOctober CMS build 412 is vulnerable to file path modification in asset move functionality...9.8 Critical
- octobercms octoberOctober CMS build 412 is vulnerable to PHP code execution in the asset manager functionality...9.8 Critical
- octobercms octoberOctober CMS build 412 is vulnerable to PHP object injection in asset move functionality resulting...7.5 High
- octobercms octoberOctober CMS File Upload Vulnerability9.8 Critical
- octobercms octoberOctober CMS XSS6.1 Medium
- pidusage project pidusagePIDUsage Enables OS Command Injection9.8 Critical
- wbce cmsWBCE v1.1.11 is vulnerable to reflected XSS via the "begriff" POST parameter in /admin/admintools...4.8 Medium
- altran picotcppicoTCP (versions 1.7.0 - 1.5.0) is vulnerable to stack buffer overflow resulting in code...9.8 Critical
- swftoolsIn SWFTools, an address access exception was found in pdf2swf. FoFiTrueType::writeTTF()7.8 High
- swftoolsIn SWFTools, a stack overflow was found in pdf2swf.5.5 Medium
- swftoolsIn SWFTools, a memcpy buffer overflow was found in gif2swf.5.5 Medium
- swftoolsIn SWFTools, a memory leak was found in wav2swf.5.5 Medium
- swftoolsIn SWFTools, a memcpy buffer overflow was found in swfc.5.5 Medium
- swftoolsIn SWFTools, an address access exception was found in swfdump swf_GetBits().5.5 Medium
- qemu, canonical ubuntu linux, debian linux +2 morehw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration,...10.0 Critical
- netapp altavault ost plug-inAltaVault OST Plug-in versions prior to 1.2.2 may allow attackers to obtain sensitive information...5.5 Medium
- optipng project optipng, debian linux +1 moreInteger overflow bug in function minitiff_read_info() of optipng 0.7.6 allows an attacker to...7.8 High
- embedplus youtubeCSRF in YouTube (WordPress plugin) could allow unauthenticated attacker to change any setting...6.5 Medium
- windows-cpu project windows-cpuCommand Execution in windows-cpu9.8 Critical
- hfiref0x lightftpLightFTP version 1.1 is vulnerable to a buffer overflow in the "writelogentry" function resulting...9.8 Critical
- python, debian linux +1 moreCPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the...9.8 Critical
- google androidAn elevation of privilege vulnerability in the MediaTek soc driver. Product: Android. Versions:...7.8 High
- google androidAn elevation of privilege vulnerability in the MediaTek ioctl (flashlight). Product: Android....7.8 High
- google androidAn elevation of privilege vulnerability in the Upstream kernel video driver. Product: Android....7.8 High
- google androidAn elevation of privilege vulnerability in the Upstream kernel kernel. Product: Android. Versions...7.8 High
- google androidAn elevation of privilege vulnerability in the Android system (inputdispatcher). Product: Android...5.3 Medium
- google androidAnother vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1...7.5 High
- google androidAnother vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1...7.5 High
- google androidAnother vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1...7.5 High
- google androidAn information disclosure vulnerability in the Android media framework (n/a). Product: Android....9.1 Critical
- google androidAn information disclosure vulnerability in the Android media framework (n/a). Product: Android....9.1 Critical
- google androidA denial of service vulnerability in the Android media framework (libhevc). Product: Android....7.5 High
- google androidAn information disclosure vulnerability in the Android media framework (libhevc). Product:...5.3 Medium
- google androidAn information disclosure vulnerability in the Android media framework (libstagefright). Product:...5.3 Medium
- google androidAn information disclosure vulnerability in the Android media framework (libavc). Product: Android...5.3 Medium
- google androidAn information disclosure vulnerability in the Android media framework (libeffects). Product:...5.3 Medium
- google androidAn elevation of privilege vulnerability in the Android media framework (mediaanalytics). Product:...9.8 Critical
- google androidA denial of service vulnerability in the Android framework (syncstorageengine). Product: Android....7.5 High
- google androidAn elevation of privilege vulnerability in the MediaTek ccci. Product: Android. Versions: Android...7.8 High
- google androidAn elevation of privilege vulnerability in the Android system (bluetooth). Product: Android....7.8 High
- google androidA remote code execution vulnerability in the Android system (libutils). Product: Android....7.8 High
- google androidAn information disclosure vulnerability in the Android media framework (libstagefright). Product:...7.5 High
- google androidAn information disclosure vulnerability in the Android media framework (libeffects). Product:...7.5 High
- google androidAn elevation of privilege vulnerability in the Android media framework (libstagefright). Product:...7.8 High
- Show moreLoading…