CVEs published in November 2018
989 vulnerabilities, 150 critical, 5 exploited.
- google androidIn avrc_proc_vendor_command of avrc_api.cc, there is a possible out of bounds write due to a...8.8 High
- google androidIn avct_bcb_msg_ind of avct_bcb_act.cc, there is a possible out of bounds read due to a missing...7.5 High
- google androidIn smp_br_state_machine_event of smp_br_main.cc, there is a possible out of bounds write due to...9.8 Critical
- google androidIn readMetadata of Utils.cpp, there is a possible path traversal bug due to a confused deputy....6.8 Medium
- google androidIn ih264d_video_decode of ih264d_api.c there is a possible resource exhaustion due to an infinite...5.5 Medium
- google androidWhen a device connects only over WiFi VPN, the device may not receive security updates due to...5.0 Medium
- google androidIn getstring of ID3.cpp there is a possible out-of-bounds read due to a missing bounds check....5.5 Medium
- google androidIn bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds...7.5 High
- google androidIn CopyToOMX of OMXNodeInstance.cpp there is a possible out-of-bounds write due to an incorrect...7.8 High
- google androidIn processMessagePart of InboundSmsHandler.java, there is a possible remote denial of service due...7.5 High
- google androidIn process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing...7.5 High
- google androidIn process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing...7.5 High
- google androidIn process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing...7.5 High
- google androidIn gatts_process_attribute_req of gatt_sc.cc, there is a possible read of uninitialized data due...7.5 High
- google androidIn BNEP_Write of bnep_api.cc, there is a possible out of bounds write due to an incorrect bounds...7.8 High
- google androidIn bnep_data_ind of bnep_main.c, there is a possible remote code execution due to a double free....9.8 Critical
- google androidIn bta_dm_sdp_result of bta_dm_act.cc, there is a possible out of bounds stack write due to a...9.8 Critical
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +4 more +6 moreIBM Jazz applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0...5.9 Medium
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +4 more +6 moreIBM Jazz based applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and...4.3 Medium
- ti ble-stackTexas Instruments BLE-STACK v2.2.1 for SimpleLink CC2640 and CC2650 devices allows remote...8.8 High
- i18n project i18n, debian linux +1 morei18n Vulnerable to Denial of Service Attack7.5 High
- degraupublicidadeBusca.aspx.cs in Degrau Publicidade e Internet Plataforma de E-commerce allows SQL Injection via...9.8 Critical
- zohocorp manageengine network configuration manager, manageengine opmanager +1 moreAn XML External Entity injection (XXE) vulnerability exists in Zoho ManageEngine Network...7.5 High
- oscommerce online merchantosCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page....4.9 Medium
- oscommerce online merchantosCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page....4.9 Medium
- oscommerce online merchantosCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page....4.9 Medium
- [unknown] nginx, apple xcode, canonical ubuntu linux +2 more +4 morenginx before versions 1.15.6, 1.14.1 has a vulnerability in the ngx_http_mp4_module, which might...8.2 High
- [unknown] nginx, apple xcode, canonical ubuntu linux +1 more +3 morenginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that...5.3 Medium
- [unknown] nginx, apple xcode, canonical ubuntu linux +2 more +4 morenginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that...5.3 Medium
- cached-path-relative project cached-path-relative, debian linux +1 morePrototype Pollution in cached-path-relative7.5 High
- ics-cert cx-supervisorA type confusion vulnerability exists when processing project files in Omron CX-Supervisor...7.8 High
- ics-cert cx-supervisorWhen processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior, the application...7.8 High
- ics-cert cx-supervisorWhen processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior and tampering...3.3 Low
- ics-cert cx-supervisorWhen processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior and tampering...7.8 High
- mz-automation libiec61850An issue has been found in libIEC61850 v1.3. It is a stack-based buffer overflow in...9.8 Critical
- atlassian sourcetree, sourcetree for windows +1 moreThere was an argument injection vulnerability in Sourcetree for Windows from version 0.5.1.0...8.8 High
- atlassian sourcetree, sourcetree for macos +1 moreThere was an argument injection vulnerability in Sourcetree for macOS from version 1.0b2 before...8.8 High
- suricata-ids suricataThe ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x before 4.0.6 allows remote...7.5 High
- tuyoshi jquery picture cutUnauthenticated arbitrary file upload vulnerability in jQuery Picture Cut <= v1.1Beta9.8 Critical
- jeecmsJEECMS 9.3 has XSS via an index.do#/content/update?type=update URI.4.8 Medium
- kindeditorKindEditor through 4.1.11 has a path traversal vulnerability in php/upload_json.php. Anyone can...7.5 High
- zohocorp manageengine opmanagerZoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings.9.8 Critical
- basercmsXSS in baserCMS before 4.1.44.8 Medium
- basercmsRCE in baserCMS before 4.1.47.2 High
- wuzhi cms project cmsAn issue was discovered in WUZHI CMS 4.1.0. There is stored XSS in index.php?m=core&f=index via a...4.8 Medium
- wuzhicmsAn issue was discovered in WUZHI CMS 4.1.0. There is stored XSS in index.php?m=core&f=index via...4.8 Medium
- mz-automation libiec61850An issue has been found in libIEC61850 v1.3. It is a NULL pointer dereference in...7.5 High
- popojicmsAn issue was discovered in PopojiCMS v2.0.1. admin_library.php allows remote attackers to delete...7.5 High
- popojicmsAn issue was discovered in PopojiCMS v2.0.1. It has CSRF via the po-admin/route.php?mod=component...8.8 High
- popojicmsAn issue was discovered in PopojiCMS v2.0.1. admin_component.php is exploitable via the po-admin...9.8 Critical
- Show moreLoading…