CVEs published in November 2017
1,128 vulnerabilities, 173 critical, 2 exploited.
- huawei technologies co., ltd. mate 9, huawei mate 9 firmware +1 moreMate 9 smartphones with software MHA-AL00AC00B125 have a directory traversal vulnerability in...7.1 High
- huawei technologies co., ltd. p9, huawei p9 firmware +1 moreHuawei P9 smartphones with software versions earlier before EVA-AL10C00B365, versions earlier...2.4 Low
- huawei crowdtest, hiapp, hicinema +12 more +14 moreSmarthome 1.0.2.364 and earlier versions,HiAPP 7.3.0.303 and earlier versions,HwParentControl 2.0...7.5 High
- huawei mate 9 firmware, p9 firmware, huawei technologies co., ltd. mate 9, p9 +2 morePhone Finder in versions earlier before MHA-AL00BC00B156,Versions earlier before MHA-CL00BC00B156...6.8 Medium
- huawei mate 9 firmware, huawei technologies co., ltd. mate 9 +1 morePhone Finder in versions earlier before MHA-AL00C00B170 can be bypass. An attacker can bypass the...6.8 Medium
- huawei technologies co., ltd. mate 9, huawei mate 9 firmware +1 moreMate 9 with software MHA-AL00AC00B125 has a denial of service (DoS) vulnerability. An attacker...3.3 Low
- huawei ac6005 firmware, ac6605 firmware, huawei technologies co., ltd. ac6005,ac6605 +2 moreAC6005 with software V200R006C10, AC6605 with software V200R006C10 have a DoS Vulnerability. An...7.5 High
- huawei honor 7 firmware, lyo-l21 firmware, mate s firmware +1 more +3 moreThe Huawei Themes APP in versions earlier than PLK-UL00C17B385, versions earlier than CRR...7.8 High
- huawei p8 firmware, huawei technologies co., ltd. p8 +1 moreThe ddr_devfreq driver in versions earlier than GRA-UL00C00B197 has buffer overflow vulnerability...7.8 High
- huawei gt3 firmware, honor 5c firmware, knt firmware +2 more +4 moreThe goldeneye driver in NMO-L31C432B120 and earlier versions,NEM-L21C432B100 and earlier versions...7.8 High
- huawei y6ii firmware, huawei technologies co., ltd. y6¢ò +1 moreThe emerg_data driver in CAM-L21C10B130 and earlier versions, CAM-L21C185B141 and earlier...7.8 High
- huawei technologies co., ltd. tit-al00, huawei tit-al00 firmware +1 moreTIT-AL00C583B211 has a directory traversal vulnerability which allows an attacker to obtain the...5.5 Medium
- huawei vmall, huawei technologies co., ltd. hwvmall +1 moreThe AlarmService component in HwVmall with software earlier than 1.5.2.0 versions has no control...3.3 Low
- huawei g8 firmware, honor 6 firmware, honor 7 firmware +6 more +8 moreALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier versions,ALE-L21C10B150 and...7.8 High
- huawei g8 firmware, honor 6 firmware, honor 7 firmware +6 more +8 moreThe Keyguard application in ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier...7.8 High
- huawei technologies co., ltd. p9, huawei p9 firmware +1 moreHuawei P9 versions earlier before EVA-AL10C00B373, versions earlier before EVA-CL00C92B373,...6.8 Medium
- huawei espace u1910 firmware, espace u1911 firmware, espace u1930 firmware +5 more +7 moreSoftCo with software V200R003C20,eSpace U1910 with software V200R003C00, V200R003C20 and...5.5 Medium
- postgresqlPostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x...6.7 Medium
- norton install norton securityPrior to v 7.6, the Install Norton Security (INS) product can be susceptible to a certificate...3.7 Low
- fortinet fortiweb, fortinet, inc. fortinet fortiweb +1 moreA stored Cross-site Scripting (XSS) vulnerability in Fortinet FortiWeb webUI Certificate View...5.4 Medium
- qnap video stationQNAP has already patched this vulnerability. This security concern allows a remote attacker to...9.8 Critical
- f5 big-ip ltm, websafe, f5 networks, inc. big-ip ltm, aam, afm, analytics, apm, asm, dns, link controller, pem, and websafe +9 more +11 moreIn BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software 12...5.9 Medium
- cohuhd 3960hd firmwareClient-side enforcement using JavaScript of server-side security options on the Cohu 3960HD...9.8 Critical
- cohuhd 3960hd firmwareInformation disclosure of .esp source code on the Cohu 3960 allows an attacker to view sensitive...7.5 High
- cohuhd 3960hd firmwareThe webupgrade function on the Cohu 3960HD does not verify the firmware upgrade files or process,...9.8 Critical
- cohuhd 3960hd firmwareMissing authentication for the remote configuration port 1236/tcp on the Cohu 3960HD allows an...9.8 Critical
- cohuhd 3960hd firmwareInformation disclosure through directory listing on the Cohu 3960HD allows an attacker to view...6.5 Medium
- ohcount project ohcountOhcount 3.0.0 is prone to a command injection via specially crafted filenames containing shell...9.8 Critical
- linux kernelThe assoc_array_insert_into_terminal_node function in lib/assoc_array.c in the Linux kernel...5.5 Medium
- fiyo cmsMultiple SQL injection vulnerabilities in Fiyo CMS 2.0_1.9.1 allow remote attackers to execute...9.8 Critical
- intel active management technology firmware, dual band wireless-ac 3160, dual band wireless-ac 3165 +14 more +16 moreFrame replay vulnerability in Wi-Fi subsystem in Intel Dual-Band and Tri-Band Wireless-AC...7.4 High
- intel deep learning training toolA vulnerability in the Intel Deep Learning Training Tool Beta 1 allows a network attacker to...9.8 Critical
- intel manageability engine firmware, intel corporation active management technology, asus b150-a firmware +196 more +198 moreBuffer overflow in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x...7.2 High
- intel manageability engine firmware, intel corporation active management technology, asus b150-a firmware +196 more +198 moreMultiple buffer overflows in Active Management Technology (AMT) in Intel Manageability Engine...7.8 High
- intel trusted execution engine firmware, intel corporation trusted execution engine +1 moreMultiple privilege escalations in kernel in Intel Trusted Execution Engine Firmware 3.0 allows...7.8 High
- intel server platform services firmware, intel corporation server platform services +1 moreMultiple privilege escalations in kernel in Intel Server Platform Services Firmware 4.0 allows...7.8 High
- intel manageability engine firmware, intel corporation manageability engine +1 moreMultiple privilege escalations in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11...7.8 High
- intel trusted execution engine firmware, intel corporation trusted execution engine +1 moreMultiple buffer overflows in kernel in Intel Trusted Execution Engine Firmware 3.0 allow attacker...7.8 High
- intel server platform services firmware, intel corporation server platform services +1 moreMultiple buffer overflows in kernel in Intel Server Platform Services Firmware 4.0 allow attacker...7.8 High
- intel manageability engine firmware, intel corporation manageability engine +1 moreMultiple buffer overflows in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11...7.8 High
- tenda ac15 firmware, ac18 firmware, ac9 firmware +2 moreCommand Injection vulnerability in app_data_center on Shenzhen Tenda Ac9 US_AC9V1.0BR_V15.03.05...8.8 High
- otrs, debian linux +1 moreCode injection exists in Kernel/System/Spelling.pm in Open Ticket Request System (OTRS) 5 before...8.8 High
- finecmsv5/config/system.php in dayrui FineCms 5.2.0 has a default SYS_KEY value and does not require key...9.8 Critical
- docuware fulltext serverThe default installation of DocuWare Fulltext Search server through 6.11 allows remote users to...8.8 High
rmpvcrates.ioUnchecked vector pre-allocationNo score- mapos project maposMapOS 3.1.11 and earlier has a Stored Cross-site Scripting (XSS) vulnerability in /clientes...5.4 Medium
- ffmpeg, debian linux +1 moreThe VC-2 Video Compression encoder in FFmpeg 3.0 and 3.4 allows remote attackers to cause a...9.8 Critical
- openstack swauth, swift, debian linux +2 moreOpenStack Swauth object/proxy server writing Auth Token to log file9.8 Critical
- samba, canonical ubuntu linux, debian linux +3 more +5 moreSamba before 4.7.3 might allow remote attackers to obtain sensitive information by leveraging...7.5 High
- samba, canonical ubuntu linux, debian linux +3 more +5 moreUse-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute...9.8 Critical
- Show moreLoading…