CVEs published in November 2017
1,128 vulnerabilities, 173 critical, 2 exploited.
- quickerbb project quickerbbQuickerBB version <= 0.7.2 is vulnerable to arbitrary file writes which can lead to remote code...9.8 Critical
- zeit next.jsNext.js Directory Traversal Vulnerability7.5 High
- icontime rtc-1000 firmwareA stored cross-site scripting vulnerability in the Icon Time Systems RTC-1000 v2.5.7458 and...5.4 Medium
- cygnux syspassCygnux sysPass version 2.1.7 and older is vulnerable to a Local File Inclusion in the...9.8 Critical
- joolJool 3.5.0-3.5.1 is vulnerable to a kernel crashing packet resulting in a DOS.7.5 High
- teluu pjsipAn issue was discovered in Teluu pjproject (pjlib and pjlib-util) in PJSIP before 2.7.1. The...7.5 High
- alchemist-elixir alchemist-serveralchemist.vim vulnerable to remote code execution9.8 Critical
- lynx project lynxLynx before 2.8.9dev.16 is vulnerable to a use after free in the HTML parser resulting in memory...5.3 Medium
- htslibsamtools htslib library version 1.4.0 and earlier is vulnerable to buffer overflow in the CRAM...9.8 Critical
- cern rootROOT version 6.9.03 and below is vulnerable to an authenticated shell metacharacter injection in...8.8 High
- vmware fusion, workstation +1 moreVMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a guest RPC NULL...6.5 Medium
- vmware horizon view client for windows, horizon view, workstation +2 moreVMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1)...7.8 High
- vmware horizon view client for windows, horizon view, workstation +2 moreVMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1)...7.8 High
- vmware horizon view client for windows, horizon view, workstation +2 moreVMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1)...7.8 High
- vmware fusion, workstation +1 moreVMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a heap buffer...8.8 High
- vmware nsx edgeVMware NSX Edge (6.2.x before 6.2.9 and 6.3.x before 6.3.5) contains a moderate Cross-Site...6.1 Medium
- vmware vsphere web client, vcenter server +1 moreThe flash-based vSphere Web Client (6.0 prior to 6.0 U3c and 5.5 prior to 5.5 U3f) i.e. not the...7.5 High
- vmware vcenter serverVMware vCenter Server (6.5 prior to 6.5 U1 and 6.0 prior to 6.0 U3c) does not correctly handle...7.5 High
- sharp rx-clv1-p firmware, rx-clv2-b firmware, rx-clv3-n firmware +2 more +4 moreSession management issue in RX-V200 firmware versions prior to 09.87.17.09, RX-V100 firmware...4.6 Medium
- tablepressTablePress prior to version 1.8.1 allows an attacker to conduct XML External Entity (XXE) attacks...4.3 Medium
- book walker co.,ltd. walker for mac, walker for windows, bookwalker book walker +2 moreBOOK WALKER for Windows Ver.1.2.9 and earlier, BOOK WALKER for Mac Ver.1.2.5 and earlier allow an...5.5 Medium
- book walker co.,ltd. walker for windows, bookwalker book walker +1 moreUntrusted search path vulnerability in BOOK WALKER for Windows Ver.1.2.9 and earlier allows an...7.8 High
- cs-cart, cs-cart multivendor, frogman office inc. cs-cart japanese edition +1 more +3 moreCross-site scripting vulnerability in CS-Cart Japanese Edition v4.3.10 and earlier (excluding v2...5.4 Medium
- [unknown] ansible, redhat openstack +1 moreAnsible Arbitrary Code Execution8.0 High
- teluu pjsip, debian linux +1 moreAn issue was discovered in Teluu pjproject (pjlib and pjlib-util) in PJSIP before 2.7.1. Parsing...9.8 Critical
- updraftplus** DISPUTED ** The UpdraftPlus plugin through 1.13.12 for WordPress allows remote PHP code...8.1 High
- updraftplus** DISPUTED ** The UpdraftPlus plugin through 1.13.12 for WordPress has SSRF in the...8.1 High
- upx** DISPUTED ** p_mach.cpp in UPX 3.94 allows remote attackers to cause a denial of service ...7.8 High
- swftoolsIn SWFTools 0.9.2, the wav_convert2mono function in lib/wav.c does not properly restrict a...5.5 Medium
- fullworksplugins stop user enumerationStop User Enumeration 1.3.8 allows user enumeration via the REST API5.3 Medium
- relevanssiReflected XSS in Relevanssi Premium version 1.14.8 when using relevanssi_didyoumean() could allow...6.1 Medium
- modx revolutionA stored web content injection vulnerability (WCI, a.k.a XSS) is present in MODX Revolution CMS...5.4 Medium
- tine20 tine 2.0Tine 2.0 version 2017.02.4 is vulnerable to XSS in the Addressbook resulting code execution and...5.4 Medium
- expressionengineEllisLab ExpressionEngine 3.4.2 is vulnerable to cross-site scripting resulting in PHP code...5.4 Medium
- s9y serendipitySerendipity 2.0.3 is vulnerable to a SQL injection in the blog component resulting in information...7.5 High
- codiadCodiad(full version) is vulnerable to write anything to configure file in the installation...7.5 High
- redis-storeredis-store deserializes untrusted data9.8 Critical
- codeigniterCodeIgniter HTTP Header Injection7.5 High
- pysaml2 project pysaml2Pysaml2 improperly initializes encryption vector5.3 Medium
- scilico i\, librarianI, Librarian version <=4.6 & 4.7 is vulnerable to Server-Side Request Forgery in the...9.8 Critical
- scilico i\, librarianI, Librarian version <=4.6 & 4.7 is vulnerable to Reflected Cross-Site Scripting in the temp.php...6.1 Medium
- scilico i\, librarianI, Librarian version <=4.6 & 4.7 is vulnerable to OS Command Injection in batchimport.php...9.8 Critical
- scilico i\, librarianI, Librarian version <=4.6 & 4.7 is vulnerable to Directory Enumeration in the jqueryFileTree.php...5.3 Medium
- open-emr openemrThe application OpenEMR version 5.0.0, 5.0.1-dev and prior is affected by vertical privilege...8.1 High
- open-emr openemrThe application OpenEMR is affected by multiple reflected & stored Cross-Site Scripting (XSS)...5.4 Medium
- invoiceplaneInvoicePlane version 1.4.10 is vulnerable to a Stored Cross Site Scripting resulting in allowing...5.4 Medium
- invoiceplaneInvoicePlane version 1.4.10 is vulnerable to a Arbitrary File Upload resulting in an...8.8 High
- ejsejs is vulnerable to remote code execution due to weak input validation9.8 Critical
- ejsejs vulnerable to DoS due to weak input validation7.5 High
- ejsmde ejs vulnerable to XSS6.1 Medium
- Show moreLoading…