CVEs published in November 2018
989 vulnerabilities, 150 critical, 5 exploited.
- amazon payfort-php-sdkThe Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the success...6.1 Medium
- amazon payfort-php-sdkThe Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via an...6.1 Medium
- amazon payfort-php-sdkThe Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the route...6.1 Medium
- microsoft dynamics 365A remote code execution vulnerability exists in Microsoft Dynamics 365 (on-premises) version 8...8.8 High
- microsoft dynamics 365A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8...5.4 Medium
- microsoft dynamics 365A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8...5.4 Medium
- microsoft dynamics 365A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8...5.4 Medium
- microsoft dynamics 365A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8...5.4 Medium
- microsoft team, team foundation server +1 moreA Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly...5.4 Medium
- microsoft azure app, azure app service on azure stack +1 moreA Cross-site Scripting (XSS) vulnerability exists when Azure App Services on Azure Stack does not...6.1 Medium
- microsoft windows 10, windows server 2019 +1 moreAn elevation of privilege vulnerability exists in Windows 10 version 1809 when installed from...6.4 Medium
- microsoft win32k, windows 7, windows server 2008 +1 more +3 moreAn elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k...7.8 High
- microsoft chakracore, edge +1 moreChakraCore RCE Vulnerability7.5 High
- microsoft windows 10, windows 10 servers, windows server 2016 +1 more +3 moreAn elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced...7.8 High
- microsoft office, outlook, office 365 proplus +2 more +4 moreA remote code execution vulnerability exists in the way that Microsoft Outlook parses specially...8.8 High
- microsoft exchange serverAn elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft...7.4 High
- microsoft office, office 365 proplus +1 moreAn information disclosure vulnerability exists when attaching files to Outlook messages, aka ...6.5 Medium
- microsoft sharepoint, sharepoint enterprise server +1 moreAn information disclosure vulnerability exists when Microsoft SharePoint Server improperly...4.3 Medium
- microsoft excel, excel viewer, office +3 more +5 moreA remote code execution vulnerability exists in Microsoft Excel software when the software fails...7.8 High
- microsoft office, outlook, office 365 proplus +2 moreA remote code execution vulnerability exists in Microsoft Outlook software when it fails to...7.8 High
- microsoft project, project server, office +1 more +3 moreA remote code execution vulnerability exists in Microsoft Project software when it fails to...7.8 High
- microsoft excel, office, office 365 proplus +2 moreA remote code execution vulnerability exists in Microsoft Excel software when the software fails...7.8 High
- microsoft office, word, office 365 proplus +2 moreA remote code execution vulnerability exists in Microsoft Word software when it fails to properly...7.8 High
- microsoft sharepoint, sharepoint server, sharepoint enterprise server +1 more +3 moreAn elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly...5.4 Medium
- microsoft internet explorer 11, internet explorer +1 moreA remote code execution vulnerability exists when Internet Explorer improperly accesses objects...7.5 High
- microsoft sharepoint, sharepoint server, sharepoint enterprise server +1 more +3 moreAn elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly...5.4 Medium
- microsoft edgeAn elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce...5.4 Medium
- microsoft windows 10, windows 10 servers, windows server 2016 +1 more +3 moreA security feature bypass vulnerability exists when Windows improperly suspends BitLocker Device...4.6 Medium
- microsoft windows 10, windows 10 servers, windows 7 +7 more +9 moreAn information disclosure vulnerability exists when the win32k component improperly provides...5.5 Medium
- microsoft edgeA spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka...4.3 Medium
- microsoft windows 7, windows 8.1, windows rt 8.1 +4 more +6 moreAn information disclosure vulnerability exists when DirectX improperly handles objects in memory,...5.5 Medium
- microsoft windows 10, windows 10 servers, windows 7 +8 more +10 moreAn elevation of privilege vulnerability exists in Windows when the Win32k component fails to...7.8 High
- microsoft windows 10, windows 10 servers, windows 8.1 +5 more +7 moreAn elevation of privilege vulnerability exists when DirectX improperly handles objects in memory,...7.8 High
- microsoft office, office 365 proplus +1 moreAn information disclosure vulnerability exists when Microsoft Outlook fails to respect "Default...6.5 Medium
- microsoft chakracore, edge +1 moreChakraCore RCE Vulnerability7.5 High
- microsoft chakracore, edge +1 moreChakraCore RCE Vulnerability7.5 High
- microsoft chakracore, edge +1 moreChakraCore RCE Vulnerability7.5 High
- microsoft windows 10, windows 10 servers, windows server 2019 +1 more +3 moreAn elevation of privilege vulnerability exists when DirectX improperly handles objects in memory,...7.8 High
- microsoft windows 10, windows 7, windows 8.1 +6 more +8 moreA remote code execution vulnerability exists in the way that Microsoft Graphics Components handle...7.8 High
- microsoft internet explorer 10, internet explorer 11, internet explorer 9 +1 more +3 moreAn information disclosure vulnerability exists when VBScript improperly discloses the contents of...7.5 High
- microsoft chakracore, edge +1 moreChakraCore RCE Vulnerability7.5 High
- microsoft windows 10, windows 7, windows 8.1 +5 more +7 moreAn elevation of privilege exists in Windows COM Aggregate Marshaler, aka "Windows COM Elevation...7.8 High
- microsoft windows 10, windows 8.1, windows rt 8.1 +3 more +5 moreA security feature bypass exists when Windows incorrectly validates kernel driver signatures, aka...5.5 Medium
- microsoft windows 10, windows 10 servers, windows 8.1 +5 more +7 moreA cross-site-scripting (XSS) vulnerability exists when an open source customization for Microsoft...5.4 Medium
- microsoft lync, office, office 365 proplus +4 more +6 moreA denial of service vulnerability exists in Skype for Business, aka "Microsoft Skype for Business...5.9 Medium
- microsoft edgeAn information disclosure vulnerability exists in the way that Microsoft Edge handles cross...4.3 Medium
- microsoft windows 10, windows 10 servers, windows 7 +8 more +10 moreA remote code execution vulnerability exists in the way that the VBScript engine handles objects...8.8 High
- microsoft chakracore, edge +1 moreChakraCore RCE Vulnerability7.5 High
- microsoft chakracore, edge +1 moreChakraCore RCE Vulnerability7.5 High
- microsoft chakracore, edge +1 moreChakraCore RCE Vulnerability7.5 High
- Show moreLoading…