CVEs published in November 2018
989 vulnerabilities, 150 critical, 5 exploited.
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect dialog placement in WebContents in Google Chrome prior to 70.0.3538.67 allowed a remote...4.3 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreA heap buffer overflow in GPU in Google Chrome prior to 70.0.3538.67 allowed a remote attacker...7.4 High
- google chrome, debian linux, redhat linux desktop +2 more +4 moreIncorrect handling of PDF filter chains in PDFium in Google Chrome prior to 70.0.3538.67 allowed...8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of timer information during navigation in Blink in Google Chrome prior to 70.0...6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficiently quick clearing of stale rendered content in Navigation in Google Chrome prior to...4.3 Medium
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreIncorrect texture handling in Angle in Google Chrome prior to 70.0.3538.67 allowed a remote...8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect implementation of object trimming in V8 in Google Chrome prior to 70.0.3538.67 allowed...8.8 High
- google chrome, debian linux, redhat linux desktop +2 more +4 moreIncorrect handling of history on iOS in Navigation in Google Chrome prior to 70.0.3538.67 allowed...4.3 Medium
- google chrome, debian linux, google chromium v8 +3 more +5 moreIncorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote...8.8 High
- google chrome, debian linux, redhat linux desktop +2 more +4 moreIncorrect refcounting in AppCache in Google Chrome prior to 70.0.3538.67 allowed a remote...9.6 Critical
- qemu, [unknown] qemu:, canonical ubuntu linux +2 moreAn OOB heap buffer r/w access issue was found in the NVM Express Controller emulation in QEMU. It...7.0 High
- rainmachine web applicationA missing X-Frame-Options header in the Green Electronics RainMachine Mini-8 (2nd Generation) and...6.5 Medium
- rainmachine mini-8 firmware, touch hd 12 firmware +1 moreAn authentication bypass vulnerability exists in the Green Electronics RainMachine Mini-8 (2nd...9.8 Critical
- rainmachine web applicationA Cross Site Request Forgery (CSRF) vulnerability in the Green Electronics RainMachine Mini-8 ...8.8 High
- rainmachine web applicationA persistent Cross Site Scripting (XSS) vulnerability in the Green Electronics RainMachine Mini-8...6.1 Medium
- rainmachine mini-8 firmwareThe 'Weather Service' feature of the Green Electronics RainMachine Mini-8 (2nd generation) allows...9.8 Critical
- rainmachine mini-8 firmwareThe time-based one-time-password (TOTP) function in the application logic of the Green...8.1 High
- microstrategy webDirectory traversal vulnerability in Microstrategy Web, version 7, in "/WebMstr7/servlet/mstrWeb"...4.3 Medium
- microstrategy webMicrostrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a...6.1 Medium
- microstrategy webMicrostrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a...6.1 Medium
- iobit malware fighterRegFilter.sys in IOBit Malware Fighter 6.2 and earlier is susceptible to a stack-based buffer...7.8 High
- m2soft report designerM2SOFT Report Designer Viewer 5.0 allows a Buffer Overflow with Extended Instruction Pointer (EIP...7.8 High
- netgain-systems enterprise managerNetGain Enterprise Manager (EM) is affected by OS Command Injection vulnerabilities in versions...7.2 High
- netgain-systems enterprise managerNetGain Enterprise Manager (EM) is affected by multiple Stored Cross-Site Scripting (XSS)...4.8 Medium
- libsdl sdl image, simple directmedia layer directmedia layer +1 moreAn exploitable code execution vulnerability exists in the XCF image rendering functionality of...8.8 High
- yitechnology yi home, yi technology, yitechnology yi home camera firmware +2 moreAn exploitable information disclosure vulnerability exists in the phone-to-camera communications...9.0 Critical
- yi technology, yitechnology yi home camera firmware +1 moreAn exploitable code execution vulnerability exists in the firmware update functionality of Yi...7.5 High
- yitechnology yi home, yi technology, yitechnology yi home camera firmware +2 moreAn exploitable code execution vulnerability exists in the cloud OTA setup functionality of Yi...8.8 High
- yitechnology yi home, yi technology, yitechnology yi home camera firmware +2 moreAn exploitable code execution vulnerability exists in the QR code scanning functionality of Yi...9.1 Critical
- [unknown] glusterfs, debian linux, redhat enterprise linux server +2 more +4 moreA flaw was found in glusterfs server through versions 4.1.4 and 3.1.2 which allowed repeated...6.5 Medium
- zte zxr10 8905e, zxr10 8905e firmware +1 moreAll versions up to V3.03.10.B23P2 of ZTE ZXR10 8905E product are impacted by TCP Initial Sequence...5.6 Medium
- cisco adaptive security appliance software, adaptive security appliance (asa) software, secure firewall threat defense +2 moreCisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software Denial of Service Vulnerability8.6 High
- 1234n minicmsMiniCMS 1.10 allows execution of arbitrary PHP code via the install.php sitename parameter, which...9.8 Critical
- 1234n minicmsMiniCMS 1.10 allows file deletion via /mc-admin/post.php?state=delete&delete= because the...7.5 High
- 1234n minicmsMiniCMS 1.10 allows full path disclosure via /mc-admin/post.php?state=delete&delete= with an...5.3 Medium
- laravelcms project laravelcmsAn issue was discovered in laravelCMS through 2018-04-02. \app\Http\Controllers\Backend...9.8 Critical
- s-cmsS-CMS PHP 1.0 has SQL injection in member/member_news.php via the type parameter (aka the $N_type...9.8 Critical
tzdataDebiantzdata - updateNo score- xenAn issue was discovered in Xen 4.9.x through 4.11.x, on Intel x86 platforms, allowing x86 HVM and...8.8 High