CVEs published in November 2018
989 vulnerabilities, 150 critical, 5 exploited.
- digium asteriskBuffer overflow in DNS SRV and NAPTR lookups in Digium Asterisk 15.x before 15.6.2 and 16.x...7.5 High
- ckeditorCkeditor XSS Vulnerability6.1 Medium
- netapp storagegrid webscaleAll StorageGRID Webscale versions are susceptible to a vulnerability which could permit an...9.8 Critical
- google androidA Elevation of privilege vulnerability in the HTC bootloader. Product: Android. Versions: Android...9.8 Critical
- google androidIn BTA_HdRegisterApp of bta_hd_api.cc, there is a possible out-of-bound write due to a missing...7.8 High
- google androidIn register_app of btif_hd.cc, there is a possible out-of-bounds read due to a missing bounds...5.5 Medium
- google androidIn trim_device of f2fs_format_utils.c, it is possible that the data partition is not wiped during...5.5 Medium
- google androidIn avrc_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a...7.5 High
- google androidIn avrc_pars_vendor_rsp of avcr_pars_ct.cc, there is a possible out-of-bounds read due to a...7.5 High
- google androidIn avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.c, there is a possible out of bounds read due to a...7.5 High
- google androidIn the ClearKey CAS descrambler, there is a possible use after free due to a race condition. This...7.0 High
- google androidIn CAacDecoder_DecodeFrame of aacdecode.cpp, there is a possible out-of-bounds write due to a...8.8 High
- google androidIn numerous functions of libFDK, there are possible out of bounds writes due to incorrect bounds...7.8 High
- google androidIn ixheaacd_reset_acelp_data_fix of ixheaacd_lpc.c there is a possible out of bounds write due to...8.8 High
- google androidIn ixheaacd_mps_getstridemap of ixheaacd_mps_parse.c there is a possible out of bounds write due...8.8 High
- google androidIn ixheaacd_dec_data_init of ixheaacd_create.c there is a possible out of write read due to a...8.8 High
- google androidIn ixheaacd_extract_frame_info_ld of ixheaacd_env_extr.c there is a possible out of bounds write...8.8 High
- google androidIn AudioSpecificConfig_Parse of tpdec_asc.cpp, there is a possible out-of-bounds write due to a...7.8 High
- google androidIn ixheaacd_tns_ar_filter_dec of ixheaacd_aac_tns.c there is a possible out of bounds write due...8.8 High
- google androidIn ixheaacd_individual_ch_stream of ixheaacd_channel.c there is a possible out of bounds write...8.8 High
- google androidIn ixheaacd_over_lap_add1_armv8 of ixheaacd_overlap_add1.s there is a possible out of bounds...8.8 High
- google androidIn vorbis_book_decodev_set of codebook.c there is a possible out of bounds write due to missing...7.8 High
- google androidIn device configuration data, there is an improperly configured setting. This could lead to...7.5 High
- google androidIn the AndroidManifest.xml file defining the SliceBroadcastReceiver handler for com.android...7.8 High
- google androidIn functionality implemented in System UI, there are insufficient protections implemented around...7.8 High
- google androidIn Parcel.writeMapInternal of Parcel.java, there is a possible parcel serialization...7.8 High
- google androidIn the serialization functions of StatsLogEventWrapper.java, there is a possible out-of-bounds...7.8 High
- google androidIn parseMPEGCCData of NuPlayer2CCDecoder.cpp, there is a possible out of bounds write due to an...8.8 High
- google androidIn onCheckedChanged of BluetoothPairingController.java, there is a possible way to retrieve...5.5 Medium
- google androidIn function SMF_ParseMetaEvent of file eas_smf.c there is incorrect input validation causing an...6.5 Medium
- nagios xiNagios XI 5.5.6 allows reflected cross site scripting from remote unauthenticated attackers via...6.1 Medium
- nagios xiNagios XI 5.5.6 allows persistent cross site scripting from remote authenticated attackers via...5.4 Medium
- nagios xiNagios XI 5.5.6 allows reflected cross site scripting from remote unauthenticated attackers via...6.1 Medium
- nagios xiNagios XI 5.5.6 allows remote authenticated attackers to reset and regenerate the API key of more...8.8 High
- nagios xiNagios XI 5.5.6 allows local authenticated attackers to escalate privileges to root via...7.8 High
- nagios xiNagios XI 5.5.6 allows remote authenticated attackers to execute arbitrary commands via a crafted...8.8 High
- nagios xiSnoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary...9.8 Critical
- zte zxhn h168n, zxhn h168n firmware +1 moreZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2...6.5 Medium
- zte zxhn h168n, zxhn h168n firmware +1 moreZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2...6.5 Medium
- intel corporation raid web console v3, intel raid web console 3 +1 moreCross-site scripting in the Intel RAID Web Console v3 for Windows may allow an unauthenticated...6.1 Medium
- intel ready mode technologyImproper file permissions in the installer for the Intel Ready Mode Technology may allow an...7.8 High
- intel media server studioImproper directory permissions in the installer for the Intel Media Server Studio may allow...7.8 High
- intel raid web console 3, intel corporation raid web console v3 for windows +1 moreAuthentication bypass in the Intel RAID Web Console 3 for Windows before 4.186 may allow an...5.5 Medium
- intel corporation rapid store technology, intel rapid storage technology +1 moreInsufficient input validation in installer in Intel Rapid Store Technology (RST) before version...7.8 High
- intel corporation driver & support assistant, intel driver\&support assistant +1 moreInsufficient input validation in the Intel Driver & Support Assistant before 3.6.0.4 may allow an...6.5 Medium
- intel parallel studio xe, intel corporation parallel studio xe 2018 +1 moreHeap overflow in Intel Trace Analyzer 2018 in Intel Parallel Studio XE 2018 Update 3 may allow an...7.8 High
- phpoffice phpspreadsheetXXE in PHPSpreadsheet due to encoding issue8.8 High
- centreonCentreon SQL Injection8.8 High
- amazon payfort-php-sdkThe Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the error...6.1 Medium
- amazon payfort-php-sdkThe Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via an...6.1 Medium
- Show moreLoading…