CVEs published in November 2017
1,128 vulnerabilities, 173 critical, 2 exploited.
- samsung 850 pro firmware, pm851 firmware, seagate st500lt015 firmware +1 more +3 moreSamsung 850 Pro and PM851 solid-state drives and Seagate ST500LT015 and ST500LT025 hard disk...4.2 Medium
- ibm rational doors next generationIBM DOORS Next Generation (DNG/RRC) 6.0 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- ibm rational doors next generationIBM DOORS Next Generation (DNG/RRC) 6.0 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- ibm rational doors next generationIBM DOORS Next Generation (DNG/RRC) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm rational doors next generationIBM DOORS Next Generation (DNG/RRC) 6.0 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- ibm business process managerIBM Business Process Manager 8.6.0.0 allows authenticated users to stop and resume the Event...6.5 Medium
- ibm rational doors next generationIBM DOORS Next Generation (DNG/RRC) 6.0 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- ibm rational doors next generationIBM DOORS Next Generation (DNG/RRC) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +4 more +6 moreIBM Jazz Foundation products could allow an authenticated user to obtain sensitive information...4.3 Medium
- ibm rational doors next generationIBM DOORS Next Generation (DNG/RRC) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm websphere commerce enterprise, websphere commerce +1 moreIBM WebSphere Commerce Enterprise, Professional, Express, and Developer 7.0 and 8.0 could allow...4.3 Medium
- ibm rational doors next generationIBM DOORS Next Generation (DNG/RRC) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm mq, websphere mq +1 moreIBM WebSphere MQ 8.0 and 9.0 could allow an authenticated user to cause a shared memory leak by...4.3 Medium
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +4 more +6 moreAn undisclosed vulnerability in CLM applications may result in some administrative deployment...4.3 Medium
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +4 more +6 moreIBM Rhapsody DM products could reveal sensitive information in HTTP 500 Internal Server Error...4.3 Medium
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +4 more +6 moreIBM Jazz technology based products might divulge information that might be useful in helping...4.3 Medium
- teampassTeamPass Improper Privilege Management8.1 High
- teampassTeamPass arbitrary file upload vulnerability7.5 High
- teampassTeamPass Improper Privilege Management4.9 Medium
- teampassTeamPass Improper Privilege Management4.9 Medium
- teampassTeamPass stored cross-site scripting (XSS) vulnerability5.4 Medium
- dahua technologies ipc-hdw4300s\nvr11hs\ipc-hfw4x00\ipc-hdw4x00\ipc-hdbw4x00\ipc-hf5x00\ipc-hfw5x00\ipc-hdw5x00\ipc-hdbw5x00\nvr11hs, dahuasecurity ipc-hdbw4x00 firmware, ipc-hdbw5x00 firmware +7 more +9 moreFirmware upgrade authentication bypass vulnerability was found in Dahua IPC-HDW4300S and some IP...6.5 Medium
- redhat openstack platformWhen libvirtd is configured by OSP director (tripleo-heat-templates) to use the TLS transport it...8.1 High
- atlassian hipchat, hipchat for mac desktop client +1 moreThe Hipchat for Mac desktop client is vulnerable to client-side remote code execution via video...9.8 Critical
- atlassian hipchat data center, hipchat server +1 moreA Server Side Request Forgery (SSRF) vulnerability could lead to remote code execution for...7.2 High
- zulip serverIn Zulip Server before 1.7.1, on a server with multiple realms, a vulnerability in the invitation...8.8 High
- postgresql, suse postgresql-init, linux enterprise server +2 morelocal privilege escalation in SUSE postgresql init script7.3 High
- swagger swagger-codegen, swagger-parser +1 moreDeserialization of Untrusted Data in swagger-codegen8.8 High
- foreman project foreman, redhat satellite, satellite capsule +2 moreAn attacker submitting facts to the Foreman server containing HTML can cause a stored XSS on...6.1 Medium
- typed-function, typed function project function +1 moreArbitrary JavaScript Execution in typed-function8.8 High
- math.js, mathjs project mathjs +1 moreArbitrary Code Execution in mathjs9.8 Critical
- math.jsArbitrary Code Execution in mathjs9.8 Critical
- gitphp project gitphpGitPHP by xiphux is vulnerable to OS Command Injections9.8 Critical
- pivotal software spring advanced message queuing protocolDeserialization of Untrusted Data in Spring AMQP9.8 Critical
- vmware single sign-on for pivotal cloud foundryIn Pivotal Single Sign-On for PCF (1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4...6.1 Medium
- broadcom spring web flowInsecure Default Initialization of Resource in Pivotal Spring Web Flow5.9 Medium
- pivotal software credhub-releaseIn Cloud Foundry Foundation Credhub-release version 1.1.0, access control lists (ACLs) enforce...8.8 High
- cloudfoundry cf-release, uaa-release +1 moreCloud Foundry UAA Denial of Service through client token revocation endpoint5.3 Medium
- vmware spring securityDeserialization of Untrusted Data in Spring Security8.1 High
- communigate proThe WebMail components (Crystal, pronto, and pronto4) in CommuniGate Pro before 6.2.1 have stored...6.1 Medium
- bigtreecms bigtree cmsA SQL injection vulnerability in core/inc/auto-modules.php in BigTree CMS through 4.2.19 allows...6.5 Medium
- tp-link tl-er3210g firmware, tl-er3220g firmware, tl-er5110g firmware +52 more +54 moreTP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute...8.8 High
- tp-link tl-er3210g firmware, tl-er3220g firmware, tl-er5110g firmware +50 more +52 moreThe locale feature in cgi-bin/luci on TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allows...6.5 Medium
- tp-link tl-er3210g firmware, tl-er3220g firmware, tl-er5110g firmware +50 more +52 moreTP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute...8.8 High
- tp-link tl-er3210g firmware, tl-er3220g firmware, tl-er5110g firmware +50 more +52 moreTP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute...8.8 High
- symphony project symphonyb3log Symphony (aka Sym) 2.2.0 allows an XSS attack by sending a private letter with a certain ...6.1 Medium
- inlinks project inlinksSQL injection vulnerability in the InLinks plugin through 1.1 for WordPress allows authenticated...8.8 High
- pivotal software cf-deploymentIn Cloud Foundry Foundation cf-deployment v0.35.0, a misconfiguration with Loggregator and syslog...7.5 High
- linux kernelThe walk_hugetlb_range function in mm/pagewalk.c in the Linux kernel before 4.14.2 mishandles...5.5 Medium
- gnome evinceCommand injection in evince via filename when printing to PDF. This affects versions earlier than...7.8 High
- Show moreLoading…