CVEs published in November 2017
1,128 vulnerabilities, 173 critical, 2 exploited.
apportUbuntuapport regressionsNo score- libxls, debian linux +1 moreAn exploitable stack based buffer overflow vulnerability exists in the xls_getfcell function of...8.8 High
- libxlsAn exploitable out-of-bounds write vulnerability exists in the read_MSAT function of libxls 1.4....8.8 High
- libxls, debian linux +1 moreAn exploitable out-of-bounds write vulnerability exists in the xls_mergedCells function of libxls...8.8 High
- libxlsAn exploitable out-of-bounds vulnerability exists in the xls_addCell function of libxls 1.4. A...8.8 High
- libxlsAn exploitable integer overflow vulnerability exists in the xls_appendSST function of libxls 1.4...8.8 High
- mit krb5, kerberos 5, redhat enterprise linux +3 more +5 moreAn authentication bypass flaw was found in the way krb5's certauth interface before 1.16.1...6.5 Medium
- horde groupwareIn Horde Groupware 5.2.19, there is XSS via the Name field during creation of a new Resource....5.4 Medium
- horde groupwareIn Horde Groupware 5.2.19 and 5.2.21, there is XSS via the Color field in a Create Task List action.5.4 Medium
- horde groupwareIn Horde Groupware 5.2.19-5.2.22, there is XSS via the URL field in a "Calendar -> New Event"...5.4 Medium
- lvyecms project lvyecmsThe Public tologin feature in admin.php in LvyeCMS through 3.1 allows XSS via a crafted username...6.1 Medium
- lvyecms project lvyecmsLvyeCMS through 3.1 allows remote attackers to upload and execute arbitrary PHP code via...9.8 Critical
- symantec management consolePrior to ITMS 8.1 RU4, the Symantec Management Console can be susceptible to a directory...6.8 Medium
- vonage vdv-23 firmwareOn the Vonage VDV-23 115 3.2.11-0.9.40 home router, sending a long string of characters in the...7.5 High
- xfig project xfig, debian linux +1 moreAn array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause a...7.1 High
- apache openofficeA vulnerability in the OpenOffice Writer DOC file parser before 4.1.4, and specifically in the...7.8 High
- libmingThe printMP3Headers function in util/listmp3.c in libming v0.4.8 or earlier is vulnerable to a...5.5 Medium
- tt-rss tiny tiny rssA SQL injection in classes/handler/public.php in the forgotpass component of Tiny Tiny RSS 17.4...9.8 Critical
- belden tofino xenon security appliance firmwareAn issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2...9.8 Critical
- belden tofino xenon security appliance firmwareAn issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2...9.8 Critical
- belden tofino xenon security appliance firmwareAn issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2...6.8 Medium
- apache openofficeThe Apache OpenOffice installer (versions prior to 4.1.3, including some branded as OpenOffice...7.8 High
- moodleMoodle Exposure of Sensitive Information to an Unauthorized Actor4.3 Medium
- laravelIn Laravel framework through 5.5.21, remote attackers can obtain sensitive information (such as...7.5 High
- busybox, canonical ubuntu linux, debian linux +3 more +5 moreIn the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete...8.8 High
- bftpd project bftpdIn Bftpd before 4.7, there is a memory leak in the file rename function.7.5 High
- pivotal software spring-ldap, debian linux +1 moreImproper Authentication in Pivotal Spring-LDAP8.1 High
- libmingThe outputSWF_TEXT_RECORD function in util/outputscript.c in libming <= 0.4.8 is vulnerable to a...6.5 Medium
- icingaIcinga Core through 1.14.0 initially executes bin/icinga as root but supports configuration...7.8 High
- symphony project symphonyb3log Symphony (aka Sym) 2.2.0 does not properly address XSS in JSON objects, as demonstrated by...6.1 Medium
- phpcaptcha securimageSecurimage HTML Injection6.1 Medium
- qacctv jooan a5 ip camera firmwareOn Jooan IP Camera A5 2.3.36 devices, an insecure FTP server does not require authentication,...9.8 Critical
- apereo opencastOpencast has Incorrect Permission Assignment6.5 Medium
- opencastOpencast RCE Vulnerability8.8 High
- exiv2Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser5.5 Medium
- exiv2Exiv2 0.26 contains a heap buffer overflow in tiff parser5.5 Medium
- exiv2exiv2 0.26 contains a Stack out of bounds read in webp parser5.5 Medium
- vmware workstationVMware Workstation (12.x before 12.5.8) installer contains a DLL hijacking issue that exists due...7.8 High
- whoops project whoopsfilp whoops Cross-site Scripting vulnerability6.1 Medium
- snap7 project serverThe Snap7 Server version 1.4.1 can be crashed when the ItemCount field of the ReadVar or WriteVar...7.5 High
- parallelus salutationStored XSS in Salutation Responsive WordPress + BuddyPress Theme version 3.0.15 could allow...5.4 Medium
- simplexml project simplexml, apache solr +1 moreSimpleXML has XML External Entity (XXE) vulnerability9.1 Critical
- phoenixframework phoenixPhoenix Arbitrary URL Redirect6.1 Medium
- philips intellispace cardiovascular, xcelera +1 moreThe workstation logging function in Philips IntelliSpace Cardiovascular (ISCV) 2.3.0 and earlier...7.2 High
- xrootdROOT xrootd version 4.6.0 and below is vulnerable to an unauthenticated shell command injection...9.8 Critical
- f5 big-ip afm, big-ip analytics, big-ip apm +6 more +8 moreOn BIG-IP versions 11.6.0-11.6.2 (fixed in 11.6.2 HF1), 12.0.0-12.1.2 HF1 (fixed in 12.1.2 HF2),...7.4 High
- moxa eds-g512e firmwareAn issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. A denial of service may occur.7.5 High
- moxa eds-g512e firmwareAn issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. Cookies can be stolen,...5.3 Medium
- moxa eds-g512e firmwareAn issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. There is XSS in the...4.8 Medium
- jqueryfiletree project jqueryfiletreejqueryFileTree vulnerable to Directory Traversal7.5 High
- Show moreLoading…