CVEs published in November 2017
1,128 vulnerabilities, 173 critical, 2 exploited.
- cisco firepower extensible operating system, nx-os, unified computing system +2 moreA vulnerability in the CLI of Cisco Firepower Extensible Operating System (FXOS) and NX-OS System...6.3 Medium
- cisco ip phone 8800 series firmwareA vulnerability in Session Initiation Protocol (SIP) call handling in Cisco IP Phone 8800 Series...5.8 Medium
- cisco webex meeting centerA vulnerability in Cisco WebEx Meeting Center could allow an authenticated, remote attacker to...5.0 Medium
- splunkSplunk Web in Splunk Enterprise 7.0.x before 7.0.0.1, 6.6.x before 6.6.3.2, 6.5.x before 6.5.6, 6...9.8 Critical
- squiz matrixAn issue was discovered in Squiz Matrix before 5.3.6.1 and 5.4.x before 5.4.1.3. Authenticated...8.8 High
- squiz matrixAn issue was discovered in Squiz Matrix before 5.3.6.1 and 5.4.x before 5.4.1.3. There are...6.1 Medium
- squiz matrixAn issue was discovered in Squiz Matrix from 5.3 through to 5.3.6.1 and 5.4.1.3. An information...7.5 High
- sound exchange project exchange, sourceforge sox - sound exchange +1 moreSoX - Sound eXchange 14.4.2 and earlier is affected by: Out-of-bounds Read. The impact is: Denial...5.5 Medium
- sound exchange project exchange, debian linux +1 moreIn the startread function in xa.c in Sound eXchange (SoX) through 14.4.2, a corrupt header...7.5 High
- linux kernelThe Linux Kernel versions 2.6.38 through 4.14 have a problematic use of pmd_mkdirty() in the...7.0 High
- atlassian crucible, fisheye, fisheye and crucible +2 moreAtlassian Fisheye and Crucible versions less than 4.4.3 and version 4.5.0 are vulnerable to...9.0 Critical
- fortinet fortiwebmanager, fortiweb manager +1 moreAn improper access control vulnerability in Fortinet FortiWebManager 5.8.0 allows anyone that can...9.8 Critical
- fortinet fortiosA Cross-site Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5...5.4 Medium
libtiffMageiaUpdated libtiff packages fix security vulnerabilities & bugsNo score- emc rsa authentication agent api for c, rsa authentication agent sdk for c +1 moreEMC RSA Authentication Agent API 8.5 for C and RSA Authentication Agent SDK 8.6 for C allow...10.0 Critical
- rsa authentication agent for webEMC RSA Authentication Agent for Web: Apache Web Server version 8.0 and RSA Authentication Agent...9.8 Critical
- amtythumb project amtythumbXSS exists in the amtyThumb amty-thumb-recent-post (aka amtyThumb posts or wp-thumb-post) plugin...6.1 Medium
- apple mac os xAn issue was discovered in certain Apple products. macOS High Sierra before Security Update 2017...8.1 High
- trusted boot project boot, fedoraproject fedora, redhat enterprise linux +2 moreA Security Bypass Vulnerability exists in TBOOT before 1.8.2 in the boot loader module when...5.5 Medium
- haxx curl, libcurl +1 morecurl and libcurl before 7.57.0 on 32-bit platforms allow attackers to cause a denial of service ...9.8 Critical
- automattic woocommerce** DISPUTED ** The WooCommerce plugin through 3.x for WordPress has a Directory Traversal...7.5 High
- aubioAubio Divide-By-Zero DoS vulnerability in new_aubio_source_wavread function5.5 Medium
- linux kernelThe init_new_context function in arch/x86/include/asm/mmu_context.h in the Linux kernel before 4...7.0 High
- linux kernelThe mm_init function in kernel/fork.c in the Linux kernel before 4.12.10 does not clear the -...7.8 High
- tgsoft vir.it explorerTG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer...7.8 High
- tgsoft vir.it explorerTG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer...7.8 High
- haxx curl, libcurl, debian linux +2 moreThe FTP wildcard function in curl and libcurl before 7.57.0 allows remote attackers to cause a...9.8 Critical
- haxx curl, libcurl, debian linux +2 moreThe NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows...9.8 Critical
- zitec emag marketplace connectorThe Emag Marketplace Connector plugin 1.0.0 for WordPress has reflected XSS because the parameter...6.1 Medium
- yardoc yardArbitrary file read vulnerability in yard server7.5 High
- dahua technologies ip camera and ip ptz ipc-hfw1xxx, ipc-hdw1xxx, ipc-hdbw1xxx, ipc-hfw2xxx, ipc-hdw2xxx, ipc-hdbw2xxx, ipc-hfw4xxx, ipc-hdw4xxx, ipc-hdbw4xxx, ipc-hf5xxx, ipc-hfw5xxx, ipc-hdw5xxx, ipc-hdbw5xxx, ipc-hf8xxx, ipc-hfw8xxx, ipc-hdbw8xxx, ipc-ebw8xxx, ipc-pfw8xxx, ipc-pdbw8xxx, ipc-hum8xxx, psd8xxxx, dh-sd2xxxxx, dh-sd4xxxxx, dh-sd5xxxxx, dh-sd6xxxxx, dahuasecurity dh-sd2xxxxx firmware, dh-sd4xxxxx firmware +23 more +25 moreCustomer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time...9.8 Critical
- kmplayerKMPlayer 4.2.2.4 allows remote attackers to cause a denial of service via a crafted NSV file.5.5 Medium
- audiovalley winamp proWinamp Pro 5.66 Build 3512 allows remote attackers to cause a denial of service via a crafted WAV...5.5 Medium
- cs-cartThe files function in the administration section in CS-Cart 4.6.2 and earlier allows attackers to...7.2 High
- emc scaleioAn issue was discovered in EMC ScaleIO 2.0.1.x. A buffer overflow vulnerability in the SDBG...9.8 Critical
- emc scaleioAn issue was discovered in EMC ScaleIO 2.0.1.x. A vulnerability in message parsers (MDM, SDS, and...7.5 High
- dell emc scaleioAn issue was discovered in EMC ScaleIO 2.0.1.x. In a Linux environment, one of the support...8.4 High
- cloudfoundry capi-release, cf-deployment, cf-release +2 moreAn issue was discovered in Cloud Foundry Foundation capi-release (all versions prior to 1.45.0),...6.5 Medium
- emc rsa authentication managerEMC RSA Authentication Manager before 8.2 SP1 P6 has a cross-site scripting vulnerability that...5.4 Medium
- pebble firmwarePebble Smartwatch devices through 4.3 mishandle UUID storage, which allows attackers to read an...6.1 Medium
- hitachivantara pentaho business analyticsIn Hitachi Vantara Pentaho BA Platform through 8.0, a CSRF issue exists in the Business Analytics...8.8 High
- xenAn issue was discovered in Xen through 4.9.x on the ARM platform allowing guest OS users to...6.5 Medium
- xenAn issue was discovered in Xen through 4.9.x allowing HVM guest OS users to gain privileges on...8.8 High
- xenAn issue was discovered in Xen through 4.9.x allowing HVM guest OS users to cause a denial of...6.5 Medium
- x libxcursor, canonical ubuntu linux, debian linux +2 morelibXcursor before 1.1.15 has various integer overflows that could lead to heap buffer overflows...7.5 High
- x libxfont, canonical ubuntu linux, debian linux +2 moreIn libXfont before 1.5.4 and libXfont2 before 2.0.3, a local attacker can open (but not read)...5.5 Medium
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreThe Network Block Device (NBD) server in Quick Emulator (QEMU) before 2.11 is vulnerable to a...5.8 Medium
firefoxUbuntufirefox regressionNo score- seagate st500lt015 firmwareSeagate ST500LT015 hard disk drives, when operating in eDrive mode on Lenovo ThinkPad W541...4.2 Medium
- samsung 850 pro firmware, pm851 firmware, seagate st500lt015 firmware +1 more +3 moreSamsung 850 Pro and PM851 solid-state drives and Seagate ST500LT015 and ST500LT025 hard disk...4.2 Medium
- Show moreLoading…