CVEs published in November 2018
989 vulnerabilities, 150 critical, 5 exploited.
- cisco prime service catalogCisco Prime Service Catalog Cross-Site Scripting Vulnerability5.4 Medium
- cisco prime collaboration assurance, prime collaboration +1 moreCisco Prime Collaboration Assurance File Overwrite Vulnerability6.5 Medium
- brocade fabric os, broadcom fabric operating system +1 moreA Vulnerability in the supportsave command of Brocade Fabric OS command line interface (CLI)...7.8 High
- brocade fabric os, broadcom fabric operating system +1 moreA Vulnerability in the help command of Brocade Fabric OS command line interface (CLI) versions...7.8 High
- brocade fabric os, broadcom fabric operating system +1 moreA Vulnerability in the firmwaredownload command of Brocade Fabric OS command line interface (CLI)...7.8 High
- cisco video surveillance media server, video surveillance media server software +1 moreCisco Video Surveillance Media Server Denial of Service Vulnerability4.3 Medium
- cisco registered envelope serviceCisco Registered Envelope Service Information Disclosure Vulnerability5.3 Medium
- cisco integrated management controller (imc) supervisor, integrated management controller +1 moreCisco Integrated Management Controller Supervisor SQL Injection Vulnerability6.5 Medium
- iminho mindocAn issue was discovered in MinDoc through v1.0.2. It allows attackers to gain privileges by...8.8 High
- cisco meeting serverCisco Meeting Server Information Disclosure Vulnerability5.3 Medium
- cisco energy management suite, energy management suite software +1 moreCisco Energy Management Suite Cross-Site Request Forgery Vulnerability6.3 Medium
- cisco energy management suite, energy management suite software +1 moreCisco Energy Management Suite XML External Entity Vulnerability6.3 Medium
- cisco firepower system software, firepower management center +1 moreCisco Firepower Detection Engine TCP Intrusion Prevention System Rule Bypass Vulnerability5.8 Medium
- cisco small business 300 series managed switches, sf200-24 firmware, sf200-24fp firmware +112 more +114 moreCisco Small Business Switches Privileged Access Vulnerability9.8 Critical
- cisco amp for endpoints, advanced malware protection for endpoints, immunet for endpoints +2 moreCisco Immunet and Cisco AMP for Endpoints System Scan Denial of Service Vulnerability5.5 Medium
- cisco stealthwatch enterpriseCisco Stealthwatch Management Console Authentication Bypass Vulnerability9.8 Critical
- cisco content security management appliance (sma), content security management appliance +1 moreCisco Content Security Management Appliance (SMA) Cross-Site Scripting Vulnerability4.8 Medium
- cisco unity expressCisco Unity Express Arbitrary Command Execution Vulnerability9.8 Critical
- cisco meraki mr, meraki m5, meraki mx +9 more +11 moreCisco Meraki Local Status Page Privilege Escalation Vulnerability6.5 Medium
- brocade fabric os, broadcom fabric operating system +1 moreA vulnerability in the Brocade Webtools firmware update section of Brocade Fabric OS before 8.2.1...8.8 High
- brocade fabric os, broadcom fabric operating system +1 moreA vulnerability in Secure Shell implementation of Brocade Fabric OS versions before 8.2.1, 8.1.2f...7.8 High
- brocade fabric os, broadcom fabric operating system +1 moreA Vulnerability in the secryptocfg command of Brocade Fabric OS command line interface (CLI)...7.8 High
- brocade fabric os, broadcom fabric operating system +1 moreA vulnerability in the web management interface of Brocade Fabric OS versions before 8.2.1, 8.1...7.5 High
- brocade fabric os, broadcom fabric operating system +1 moreA vulnerability in the secryptocfg export command of Brocade Fabric OS versions before 8.2.1, 8.1...5.5 Medium
- apache hiveModerate severity vulnerability that affects org.apache.hive:hive-jdbc4.3 Medium
- apache hiveImproper Authentication in hive:hive-exec8.1 High
- google cardboardThe Google Cardboard application 1.8 for Android and 1.2 for iOS sends potentially private...5.3 Medium
- tianti project tiantiThe skin-management feature in tianti 2.3 allows remote authenticated users to bypass intended...6.5 Medium
- tianti project tiantitianti 2.3 allows remote authenticated users to bypass intended permission restrictions by...8.8 High
- librecadLibreCAD 2.1.3 allows remote attackers to cause a denial of service (0x89C04589 write access...7.8 High
- bagesoft bagecmsIn BageCMS 3.1.3, upload/index.php has a CSRF vulnerability that can be used to upload arbitrary...8.8 High
- keepalived, debian linux, redhat enterprise linux server +4 more +6 morekeepalived before 2.0.7 has a heap-based buffer overflow when parsing HTTP status codes resulting...9.8 Critical
- exiv2, canonical ubuntu linux, debian linux +3 more +5 moreIn Exiv2 0.26, Exiv2::PsdImage::readMetadata in psdimage.cpp in the PSD image reader may suffer...6.5 Medium
- exiv2, canonical ubuntu linux, debian linux +3 more +5 moreIn Exiv2 0.26, Exiv2::IptcParser::decode in iptc.cpp (called from psdimage.cpp in the PSD image...6.5 Medium
- postgresql, canonical ubuntu linux, redhat enterprise linux +2 morepostgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and...8.0 High
- axtls project axtlsIn sig_verify() in x509.c in axTLS version 2.1.3 and before, the PKCS#1 v1.5 signature...5.9 Medium
- axtls project axtlsIn sig_verify() in x509.c in axTLS version 2.1.3 and before, the PKCS#1 v1.5 signature...5.9 Medium
- axtls project axtlsIn sig_verify() in x509.c in axTLS version 2.1.3 and before, the PKCS#1 v1.5 signature...5.9 Medium
- mz-automation libiec61850** DISPUTED ** An issue has been found in libIEC61850 v1.3. It is a SEGV in...7.5 High
- yzmcmsAn issue was discovered in YzmCMS v5.2. It has XSS via a search/index/archives/pubtime/ query...6.1 Medium
- tianti project tiantitianti 2.3 has reflected XSS in the user management module via the tianti-module-admin/user/list...5.4 Medium
- tianti project tiantitianti 2.3 has stored XSS in the article management module via an article title.5.4 Medium
- tianti project tiantitianti 2.3 has stored XSS in the userlist module via the tianti-module-admin/user/ajax/save_role...5.4 Medium
- wecenterWeCenter 3.2.0 through 3.2.2 has XSS in the views/default/question/index.tpl.html...6.1 Medium
- foscam c2 application firmware, c2 system firmware, opticam i5 application firmware +1 more +3 moreAn issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and...9.8 Critical
- foscam c2 application firmware, c2 system firmware, opticam i5 application firmware +1 more +3 moreAn issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and...9.8 Critical
- foscam c2 application firmware, c2 system firmware, opticam i5 application firmware +1 more +3 moreAn issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and...6.1 Medium
- foscam c2 application firmware, c2 system firmware, opticam i5 application firmware +1 more +3 moreAn issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and...7.5 High
- foscam c2 application firmware, c2 system firmware, opticam i5 application firmware +1 more +3 moreAn issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and...9.8 Critical
- foscam c2 application firmware, c2 system firmware, opticam i5 application firmware +1 more +3 moreAn issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and...7.5 High
- Show moreLoading…