CVEs published in November 2018
989 vulnerabilities, 150 critical, 5 exploited.
- microsoft office, sharepoint server, office web apps +2 moreA remote code execution vulnerability exists in Microsoft Word software when it fails to properly...7.8 High
- microsoft office, outlook, office 365 proplus +1 more +3 moreA remote code execution vulnerability exists in Microsoft Outlook software when it fails to...7.8 High
- microsoft office, outlook, office 365 proplus +1 more +3 moreA remote code execution vulnerability exists in Microsoft Outlook software when it fails to...7.8 High
- microsoft windows 10, windows 10 servers, windows 8.1 +5 more +7 moreAn elevation of privilege vulnerability exists when DirectX improperly handles objects in memory,...7.8 High
- microsoft windows 10 servers, windows server 2008, windows server 2008 r2 +4 more +6 moreA remote code execution vulnerability exists in the way that Windows Deployment Services TFTP...9.8 Critical
- microsoft windows 10, windows 7, windows 8.1 +2 more +4 moreAn elevation of privilege vulnerability exists in the way that the Microsoft RemoteFX Virtual GPU...7.8 High
- microsoft windows 10, windows 10 servers, windows server 2019 +1 more +3 moreAn information disclosure vulnerability exists when Windows Audio Service fails to properly...5.5 Medium
- microsoft windows 10, windows 10 servers, windows 7 +7 more +9 moreA remote code execution vulnerability exists when Windows Search handles objects in memory, aka ...8.8 High
- microsoft windows 10, windows 10 servers, windows server 2016 +1 more +3 moreA security feature bypass vulnerability exists in Microsoft JScript that could allow an attacker...5.3 Medium
- microsoft .net core, asp.net core +1 moreTampering vulnerability in .NET Core6.5 Medium
- microsoft powershell core, windows 10, windows 10 servers +9 more +11 moreA tampering vulnerability exists in PowerShell that could allow an attacker to execute unlogged...7.8 High
- microsoft windows 10, windows 10 servers, windows 7 +7 more +9 moreAn information disclosure vulnerability exists when the Windows kernel improperly initializes...5.5 Medium
- microsoft windows 10, windows 10 servers, windows 7 +8 more +10 moreAn information disclosure vulnerability exists when "Kernel Remote Procedure Call Provider"...5.5 Medium
- microsoft microsoft.powershell.archive, powershell core, windows 10 +10 more +12 moreA remote code execution vulnerability exists when PowerShell improperly handles specially crafted...8.8 High
- rackRack vulnerable to Denial of Service7.5 High
- vmware vrealize log insightVMware vRealize Log Insight (4.7.x before 4.7.1 and 4.6.x before 4.6.2) contains a vulnerability...7.2 High
- apache hadoopPath Traversal in Hadoop8.8 High
- losant arduino mqtt clientThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- sap fiori clientWhen opening a deep link URL in SAP Fiori Client with log level set to "Debug", the client...7.8 High
- sap fiori clientThe broadcast messages received by SAP Fiori Client are not protected by permissions. SAP Fiori...7.8 High
- sap fiori clientLocally, without any permission, an arbitrary android application could delete the SSO...7.8 High
- sap fiori clientIt is possible for a malware application installed on an Android device to send local push...7.8 High
- sap disclosure managementSAP Disclosure Management 10.x allows an attacker to exploit through a specially crafted zip file...8.3 High
- sap fiori clientIt is possible for a malicious application or malware to execute JavaScript in a SAP Fiori...7.7 High
- sap businessobjects business intelligence, businessobjects business intelligence platform +1 moreHTTP Verb Tampering is possible in SAP BusinessObjects Business Intelligence Platform, versions 4...4.3 Medium
- sap mobile secure, mobile secure android application +1 moreSAP Mobile Secure Android Application, Mobile-secure.apk Android client, before version 6.60...7.5 High
- sap aba, advanced business application programming +1 moreIn some SAP standard roles, in SAP_ABA versions, 7.00 to 7.02, 7.10 to 7.11, 7.30, 7.31, 7.40, 7...7.2 High
- sap businessobjects business intelligence platform (biworkspace), businessobjects bi platform +1 moreSAP BusinessObjects Business Intelligence Platform (BIWorkspace), versions 4.1 and 4.2, does not...6.1 Medium
- sap basis, basis (trex / bwa installation) +1 moreAn attacker can use specially crafted inputs to execute commands on the host of a TREX / BWA...7.2 High
- sap knowledge management (xmlforms) in sap netweaver, netweaver +1 moreKnowledge Management (XMLForms) in SAP NetWeaver, versions 7.30, 7.31, 7.40 and 7.50 does not...8.8 High
- sap netweaver, netweaver (forums) +1 moreDue to insufficient URL Validation in forums in SAP NetWeaver versions 7.30, 7.31, 7.40, an...6.1 Medium
- sap businessobjects business intelligence, businessobjects business intelligence platform server +1 moreSAP BusinessObjects Business Intelligence Platform Server, versions 4.1 and 4.2, when using Web...6.5 Medium
- huawei technologies co., ltd. watch 2, huawei watch 2 firmware +1 moreHuawei Watch 2 with versions and earlier than OWDD.180707.001.E1 have an improper authorization...4.6 Medium
- huawei technologies co., ltd. emily-al00a, huawei emily-al00a firmware +1 moreThe radio module of some Huawei smartphones Emily-AL00A The versions before 8.1.0.171(C00) have a...6.8 Medium
- huawei alp-al00b firmware, alp-tl00b firmware, bla-al00b firmware +3 more +5 moreSome Huawei smartphones ALP-AL00B 8.0.0.118D(C00), ALP-TL00B 8.0.0.118D(C01), BLA-AL00B 8.0.0...6.8 Medium
- keycloakKeycloak Open Redirect6.1 Medium
- keycloak, redhat single sign-on +1 moreKeycloak Improper Bruteforce Detection5.4 Medium
- keycloak, redhat single sign-on +1 moreKeycloak vulnerable to cross-site scripting via the state parameter4.6 Medium
- tibco datasynapse gridserver managerTIBCO DataSynapse GridServer Manager Component Vulnerable to Cross-Site Request Forgery7.1 High
- ibm websphere commerceIBM WebSphere Commerce 9.0.0.0 through 9.0.0.6 could allow some server-side code injection due to...4.3 Medium
- ibm mq, websphere mq +1 moreIBM WebSphere MQ 8.0.0.0 through 8.0.0.10, 9.0.0.0 through 9.0.0.5, 9.0.1 through 9.0.5, and 9.1...8.8 High
- apache qpid proton-jImproper Certificate Validation in proton-j7.4 High
- pivotal cloud foundry credhub service brokerCredHub Service Broker uses guessable client secret8.1 High
- dell emc recoverpoint, dell emc recoverpoint, dell emc recoverpoint for virtual machines +1 more +3 moreDell EMC RecoverPoint Uncontrolled Resource Consumption Vulnerability7.1 High
- dell emc recoverpoint, recoverpoint virtual machine (vm), emc recoverpoint for virtual machines +2 moreDell EMC RecoverPoint Information Disclosure Vulnerability5.5 Medium
- cisco advanced malware protection for endpoints, amp for endpoints +1 moreCisco Advanced Malware Protection for Endpoints on Windows DLL Preloading Vulnerability5.5 Medium
- micro focus service managerMFSBGN03823 rev.1 - Micro Focus Service Manager, unauthorized disclosure of data6.8 Medium
- php-proxyLFI in PHP-Proxy 5.1.07.5 High
- charlesproxy charlesAn XML External Entity (XXE) vulnerability exists in the Charles 4.2.7 import/export setup option...8.6 High
- nvidia gpu driver, nvidia corporation gpu graphics driver +1 moreNVIDIA graphics driver contains a vulnerability that may allow access to application data...5.5 Medium
- Show moreLoading…