CVEs published in November 2017
1,128 vulnerabilities, 173 critical, 2 exploited.
- tgsoft vir.it explorerTG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer...7.8 High
- misp-project mispThe admin_edit function in app/Controller/UsersController.php in MISP 2.4.82 mishandles the...4.9 Medium
- exim, debian linux +1 moreThe receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote...7.5 High
- exim, debian linux +1 moreThe receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote...9.8 Critical
- octobercms october** DISPUTED ** October CMS through 1.0.428 does not prevent use of .htaccess in themes, which...8.8 High
- libsndfile project libsndfileIn libsndfile 1.0.25 (fixed in 1.0.26), a divide-by-zero error exists in the function...6.5 Medium
- liblouis, redhat enterprise linux desktop, enterprise linux server +3 more +5 moreA missing patch for a stack-based buffer overflow in findTable() was found in Red Hat version of...7.8 High
- optipng project optipngA global buffer overflow in OptiPNG 0.7.6 allows remote attackers to cause a denial-of-service...7.8 High
- tenda ac15 firmware, ac18 firmware, ac9 firmware +2 moreDirectory Traversal vulnerability in app_data_center on Shenzhen Tenda Ac9 US_AC9V1.0BR_V15.03.05...6.5 Medium
- ametysAmetys before 4.0.3 requires authentication only for URIs containing a /cms/ substring, which...9.8 Critical
- dbltek web serverThe web server on DBL DBLTek devices allows remote attackers to execute arbitrary OS commands by...9.8 Critical
- icingaetc/initsystem/prepare-dirs in Icinga 2.x through 2.8.1 has a chown call for a filename in a user...7.0 High
- cactiauth_login.php in Cacti before 1.0.0 allows remote authenticated users who use web authentication...8.8 High
- debian linux, linux kernel +1 moreThe XFRM dump policy implementation in net/xfrm/xfrm_user.c in the Linux kernel before 4.13.11...7.8 High
- xmlsoft libxml2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreparser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro...9.8 Critical
- moxa eds-g512e firmwareAn issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. The backup file contains...9.8 Critical
- moxa eds-g512e firmwareAn issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. The password encryption...7.5 High
- moxa eds-g512e firmwareAn issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. An attacker could extract...7.5 High
gimpSUSESecurity update for gimpNo score- neutrinolabs xrdp, debian linux +1 moreThe scp_v0s_accept function in sesman/libscp/libscp_v0.c in the session manager in xrdp through 0...8.4 High
- google chrome, xmlsoft libxml2, debian linux +2 moreAn integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62...8.8 High
- xmlsoft libxml2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreNokogiri gem, via libxml, is affected by DoS vulnerabilities7.5 High
- invisible-island ncursesStack-based buffer overflow in the _nc_write_entry function in tinfo/write_entry.c in ncurses 6.0...7.8 High
- huawei technologies co., ltd. warsaw, huawei p10 lite firmware +1 moreWarsaw Huawei Smart phones with software of versions earlier than Warsaw-AL00C00B180, versions...5.5 Medium
- huawei technologies co., ltd. honor 8,honor v8,honor 9,honor v9,nova 2,nova 2 plus,p9,p10 plus,toronto, huawei honor 8 firmware, honor 9 firmware +7 more +9 moreHonor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto Huawei smart phones with...6.2 Medium
- huawei technologies co., ltd. honor 8,honor v8,honor 9,honor v9,nova 2,nova 2 plus,p9,p10 plus,toronto, huawei honor 8 firmware, honor 9 firmware +7 more +9 moreHonor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto Huawei smart phones with...6.2 Medium
- huawei smc2.0, smc2.0 firmware +1 moreHuawei SMC2.0 with software of V100R003C10, V100R005C00SPC100, V100R005C00SPC101B001T,...5.3 Medium
- huawei technologies co., ltd. honor 5c,honor 6x, huawei honor 5c firmware, honor 6x firmware +2 moreThe driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM...7.8 High
- huawei technologies co., ltd. honor 5c,honor 6x, huawei honor 5c firmware, honor 6x firmware +2 moreThe driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM...7.8 High
- huawei technologies co., ltd. honor 5c,honor 6x, huawei honor 5c firmware, honor 6x firmware +2 moreThe driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM...7.8 High
- huawei technologies co., ltd. honor 5c,honor 6x, huawei honor 5c firmware, honor 6x firmware +2 moreThe driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM...7.8 High
- huawei technologies co., ltd. honor 5c,honor 6x, huawei honor 5c firmware, honor 6x firmware +2 moreThe driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM...7.8 High
- huawei honor 5c firmware, honor 6x firmware, huawei technologies co., ltd. honor 5c,honor 6x +2 moreThe driver of honor 5C, honor 6x Huawei smart phones with software of versions earlier than NEM...7.8 High
- huawei technologies co., ltd. honor 7 lite, huawei honor 7 lite firmware +1 moreHONOR 7 Lite mobile phones with software of versions earlier than NEM-L21C432B352 have an App...6.8 Medium
- huawei technologies co., ltd. honor 9, huawei honor 9 firmware +1 moreThe Bastet driver of Honor 9 Huawei smart phones with software of versions earlier than Stanford...7.8 High
- huawei technologies co., ltd. honor 9, huawei honor 9 firmware +1 moreThe Bastet driver of Honor 9 Huawei smart phones with software of versions earlier than Stanford...7.8 High
- huawei technologies co., ltd. nova 2 plus,nova 2, huawei nova 2 firmware, nova 2 plus firmware +2 moreThe Bastet Driver of Nova 2 Plus,Nova 2 Huawei smart phones with software of Versions earlier...7.8 High
- huawei prague-al00a firmware, prague-al00b firmware, prague-al00c firmware +3 more +5 moreThe CameraISP driver of some Huawei smart phones with software of versions earlier than Prague...5.5 Medium
- huawei max presence firmware, tp3106 firmware, tp3206 firmware +1 more +3 moreMAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R002C00 have an a memory leak...6.5 Medium
- huawei max presence firmware, tp3106 firmware, tp3206 firmware +1 more +3 moreMAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R002C00 have an out-of-bounds read...6.5 Medium
- huawei max presence firmware, tp3106 firmware, tp3206 firmware +1 more +3 moreMAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R002C00 have an out-of-bounds read...6.5 Medium
- huawei fusionsphereFusionSphere V100R006C00SPC102(NFV) has an SQL injection vulnerability. An authenticated, remote...7.2 High
- huawei fusionsphereFusionSphere V100R006C00SPC102(NFV) has a command injection vulnerability. An authenticated,...7.2 High
- huawei fusionsphereFusionSphere V100R006C00SPC102(NFV) has an incorrect authorization vulnerability. An...4.2 Medium
- huawei fusionsphere openstackThe FusionSphere OpenStack V100R006C00SPC102(NFV) has an improper authentication vulnerability....8.8 High
- huawei fusionsphere openstackThe FusionSphere OpenStack V100R006C00SPC102(NFV) has an improper authentication vulnerability....8.8 High
- huawei fusionsphere openstackThe FusionSphere OpenStack V100R006C00SPC102(NFV) has a command injection vulnerability. Due to...8.0 High
- huawei fusionsphere openstackFusionSphere OpenStack V100R006C00 has an improper authorization vulnerability. Due to improper...7.8 High
- huawei fusionsphere openstackFusionSphere OpenStack V100R006C00SPC102(NFV)has a week cryptographic algorithm vulnerability....5.9 Medium
- huawei fusionsphere openstackFusionSphere OpenStack V100R006C00SPC102(NFV)has an improper verification of cryptographic...6.7 Medium
- Show moreLoading…