CVEs published in November 2018
989 vulnerabilities, 150 critical, 5 exploited.
- foscam c2 application firmware, c2 system firmware, opticam i5 application firmware +1 more +3 moreAn issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application...9.8 Critical
- foscam c2 application firmware, c2 system firmware, opticam i5 application firmware +1 more +3 moreAn issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application...5.3 Medium
- foscam c2 application firmware, c2 system firmware, opticam i5 application firmware +1 more +3 moreAn issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application...7.5 High
- foscam c2 application firmware, c2 system firmware, opticam i5 application firmware +1 more +3 moreAn issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application...7.2 High
- foscam c2 application firmware, c2 system firmware, opticam i5 application firmware +1 more +3 moreAn issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application...5.5 Medium
- foscam c2 application firmware, c2 system firmware, opticam i5 application firmware +1 more +3 moreAn issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application...7.8 High
- foscam c2 application firmware, c2 system firmware, opticam i5 application firmware +1 more +3 moreAn issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application...7.2 High
- foscam c2 application firmware, c2 system firmware, opticam i5 application firmware +1 more +3 moreAn issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application...9.8 Critical
- foscam c2 application firmware, c2 system firmware, opticam i5 application firmware +1 more +3 moreAn issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and...4.9 Medium
- foscam c2 application firmware, c2 system firmware, opticam i5 application firmware +1 more +3 moreAn issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application...9.8 Critical
- foscam c2 application firmware, c2 system firmware, opticam i5 application firmware +1 more +3 moreAn issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application...7.5 High
- foscam c2 application firmware, c2 system firmware, opticam i5 application firmware +1 more +3 moreAn issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application...7.5 High
- foscam c2 application firmware, c2 system firmware, opticam i5 application firmware +1 more +3 moreAn issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application...9.8 Critical
- foscam c2 application firmware, c2 system firmware, opticam i5 application firmware +1 more +3 moreAn issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application...9.8 Critical
- dedecmsDedeCMS 5.7 SP2 has SQL Injection via the dede\co_do.php ids parameter.9.8 Critical
- micro focus operation bridge containerized suite, microfocus operations bridge +1 moreMFSBGN03829 rev.1 - Micro Focus Operation Bridge Containerized Suite, Remote Code Execution9.6 Critical
- sparksuite simplemdeSimpleMDE XSS Vulnerability6.1 Medium
- ipandao editor.mdPandao editor.md vulnerable to DOM XSS6.1 Medium
- apache supersetDeserialization of Untrusted Data in superset9.8 Critical
- pbootcmsPbootCMS 1.2.2 allows remote attackers to execute arbitrary PHP code by specifying a .php...7.2 High
- lighttpd, debian linux, opensuse backports sle +2 more +4 moreAn issue was discovered in mod_alias_physical_handler in mod_alias.c in lighttpd before 1.4.50....7.5 High
- mpdf project mpdf** DISPUTED ** mPDF through 7.1.6, if deployed as a web application that accepts arbitrary HTML,...10.0 Critical
- metinfoMetInfo 6.1.3 has XSS via the admin/index.php?a=dogetpassword abt_type parameter.6.1 Medium
- metinfoMetInfo 6.1.3 has XSS via the admin/index.php?a=dogetpassword langset parameter.6.1 Medium
libdatetime-timezone-perlDebianlibdatetime-timezone-perl - regression updateNo scorelibdatetime-timezone-perlDebianlibdatetime-timezone-perl - new upstream versionNo score- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +11 more +13 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection...6.4 Medium
- freedesktop poppler, canonical ubuntu linux +1 moreAn issue was discovered in Poppler 0.71.0. There is a NULL pointer dereference in goo/GooString.h...6.5 Medium
- freedesktop poppler, canonical ubuntu linux +1 moreAn issue was discovered in Poppler 0.71.0. There is a out-of-bounds read in EmbFile::save2 in...6.5 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +3 more +5 moreAn issue was discovered in Poppler 0.71.0. There is a reachable abort in Object.h, will lead to...6.5 Medium
- tibco enterprise message service, tibco software inc. enterprise message service - community edition, enterprise message service - developer edition +2 moreTIBCO Enterprise Message Service Vulnerable to CSRF Attacks7.5 High
- tibco rendezvous, rendezvous network server, substation es +5 more +7 moreTIBCO Rendezvous Vulnerable to CSRF Attacks7.5 High
- tibco messaging - apache kafka distribution - schema repository, tibco software inc. messaging - apache kafka distribution - schema repository - community edition, messaging - apache kafka distribution - schema repository - enterprise edition +2 moreTIBCO Messaging - Apache Kafka Distribution - Schema Repository Vulnerable to CSRF Attacks7.5 High
- tibco ftl, tibco software inc. ftl - community edition, ftl - developer edition +1 more +3 moreTIBCO FTL Realm Server Vulnerable to CSRF Attacks7.5 High
- tibco activespaces, tibco software inc. activespaces - community edition, activespaces - developer edition +1 more +3 moreTIBCO ActiveSpaces Administrative Daemon Vulnerable to CSRF Attacks7.5 High
- [unknown] richfaces, red hat jboss richfaces framework, redhat enterprise linux +2 moreRichfaces vulnerable to arbitrary code execution9.8 Critical
- apache syncopeImproper Restriction of XML External Entity Reference in org.apache.syncope:syncope-core7.2 High
- apache syncopeImproper Control of Interaction Frequency in Apache syncope-core5.4 Medium
- knight project knight, npm knightjs +1 morePath Traversal in knightjs7.5 High
- npm tianma-staticStored Cross-Site Scripting in tianma-static6.1 Medium
- npm takeapeekPath Traversal in takeapeek5.3 Medium
- google androidWhen wifi is switched, function sendNetworkStateChangeBroadcast of WifiStateMachine.java...7.5 High
- google androidIn the SELinux permissions of crash_dump.te, there is a permissions bypass due to a missing...7.8 High
- google androidIn task_get_unused_fd_flags of binder.c, there is a possible memory corruption due to a use after...7.8 High
- google androidIn Attachment of Attachment.java and getFilePath of EmlAttachmentProvider.java, there is a...8.8 High
- google androidIn computeFocusedWindow of RootWindowContainer.java, and related functions, there is possible...7.8 High
- google androidIn sdpu_extract_attr_seq of sdp_utils.cc, there is a possible out of bounds read due to an...7.5 High
- google androidIn bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds...5.5 Medium
- google androidIn avdt_msg_prs_cfg of avdt_msg.cc, there is a possible out of bounds read due to a missing...5.5 Medium
- google androidIn DynamicRefTable::load of ResourceTypes.cpp, there is a possible out of bounds read due to a...5.5 Medium
- Show moreLoading…