CVEs published in November 2018
989 vulnerabilities, 150 critical, 5 exploited.
- phpmailer project phpmailer, debian linux, fedoraproject fedora +1 more +3 morePhar object injection in PHPMailer8.8 High
- linux kernel, canonical ubuntu linux +1 moreIn the Linux kernel 4.15.x through 4.19.x before 4.19.2, map_write() in kernel/user_namespace.c...7.0 High
- tp4a teleporttp4a TELEPORT 3.1.0 allows XSS via the login page because a crafted username is mishandled when...6.1 Medium
php-pear-CASMageiaUpdated php-pear-CAS packages fix security vulnerabilitiesNo scoregdalMageiaUpdated gdal packages fix security vulnerabilitiesNo score- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreFlash Player versions 31.0.0.122 and earlier have an out-of-bounds read vulnerability. Successful...7.5 High
- sonatype nexus repository managerSonatype Nexus Repository Manager before 3.14 allows Java Expression Language Injection.7.2 High
- sonatype nexus repository managerSonatype Nexus Repository Manager before 3.14 has Incorrect Access Control.7.5 High
- sonatype nexus repository managerSonatype Nexus Repository Manager before 3.14 allows XSS.6.1 Medium
- polycom trio 8500 firmwareThe Web administration console on Polycom Trio devices with software before 5.5.4 has XSS.6.1 Medium
- polycom trio 8500 firmwareThe Bluetooth subsystem on Polycom Trio devices with software before 5.5.4 has Incorrect Access...6.5 Medium
- microsoft team, team foundation server +1 moreA remote code execution vulnerability exists when Team Foundation Server (TFS) does not enable...9.8 Critical
- ibm websphere application serverThe Installation Verification Tool of IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is...6.1 Medium
- life sciences computing corporation opendolphinOpenDolphin 2.7.0 and earlier allows authenticated attackers to bypass authentication to create...6.5 Medium
- life sciences computing corporation opendolphinOpenDolphin 2.7.0 and earlier allows authenticated attackers to obtain other users credentials...8.8 High
- life sciences computing corporation opendolphinOpenDolphin 2.7.0 and earlier allows authenticated users to gain administrative privileges and...8.8 High
- feitian japan co., ltd securecore standard edition, ftsafe securecore +1 moreSecureCore Standard Edition Version 2.x allows an attacker to bypass the product 's...7.8 High
- eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 moreIn Eclipse Mosquitto versions 1.5 to 1.5.2 inclusive, if a message is published to Mosquitto that...7.5 High
- bluestacks, bluestacks app player +1 moreBlueStacks App Player (BlueStacks App Player for Windows 3.0.0 to 4.31.55, BlueStacks App Player...8.8 High
- hiroshi yuki yukiwikiYukiWiki 2.1.3 and earlier does not process a particular request properly that may allow...7.5 High
- hiroshi yuki yukiwikiCross-site scripting vulnerability in YukiWiki 2.1.3 and earlier allows remote attackers to...6.1 Medium
- metabaseCross-site scripting vulnerability in Metabase version 0.29.3 and earlier allows remote attackers...6.1 Medium
- usvn, usvn team user-friendly svn (usvn) +1 moreCross-site scripting vulnerability in User-friendly SVN (USVN) Version 1.0.7 and earlier allows...6.1 Medium
- soliton filezenFileZen V3.0.0 to V4.2.1 allows remote attackers to execute arbitrary OS commands via unspecified...9.8 Critical
- soliton filezenDirectory traversal vulnerability in FileZen V3.0.0 to V4.2.1 allows remote attackers to upload...7.5 High
- baidu, inc. baidu browser, baidu spark browser +1 moreUntrusted search path vulnerability in Baidu Browser Version 43.23.1000.500 and earlier allows an...7.8 High
- softbank, ntt docomo, kddi multiple +message apps (softbank +message app for android prior to version 10.1.7, softbank +message app for ios prior to version 1.1.23, ntt docomo +message app for android prior to version 42.40.2800, ntt docomo +message app for ios prior to version 1.1.23, kddi +message app for android prior to version 1.0.6, and kddi +message app for ios prior to version 1.1.23), kddi \+ message +1 moreMultiple +Message Apps (Softbank +Message App for Android prior to version 10.1.7, Softbank ...5.9 Medium
- sony music center for pcAn unvalidated software update vulnerability in Music Center for PC version 1.0.02 and earlier...7.5 High
- neojapan inc. denbun by neojapan inc. (denbun pop version v3.3p r4.0 and earlier, denbun imap version v3.3i r4.0 and earlier), neo debun imap, debun pop +2 moreCross-site scripting vulnerability in Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and...6.1 Medium
- neojapan inc. denbun by neojapan inc. (denbun pop version v3.3p r4.0 and earlier, denbun imap version v3.3i r4.0 and earlier), neo debun imap, debun pop +2 moreDenbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4...8.8 High
- neojapan inc. denbun pop version v3.3p r4.0 and earlier, neo debun pop +1 moreSQL injection vulnerability in the Denbun POP version V3.3P R4.0 and earlier allows remote...8.8 High
- neojapan inc. denbun by neojapan inc. (denbun pop version v3.3p r3.0 and earlier, denbun imap version v3.3i r3.0 and earlier), neo debun imap, debun pop +2 moreBuffer overflow in Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R3.0 and earlier, Denbun...9.8 Critical
- neojapan inc. denbun by neojapan inc. (denbun pop version v3.3p r4.0 and earlier, denbun imap version v3.3i r4.0 and earlier), neo debun imap, debun pop +2 moreBuffer overflow in Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun...9.8 Critical
- neojapan inc. denbun by neojapan inc. (denbun pop version v3.3p r4.0 and earlier, denbun imap version v3.3i r4.0 and earlier), neo debun imap, debun pop +2 moreDenbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4...9.8 Critical
- neojapan inc. denbun by neojapan inc. (denbun pop version v3.3p r4.0 and earlier, denbun imap version v3.3i r4.0 and earlier), neo debun imap, debun pop +2 moreDenbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4...9.8 Critical
- neojapan inc. denbun by neojapan inc. (denbun pop version v3.3p r4.0 and earlier, denbun imap version v3.3i r4.0 and earlier), neo debun imap, debun pop +2 moreDenbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4...9.8 Critical
- fxc ae1021pe firmware, fxc5426f firmware, fxc5428 firmware +8 more +10 moreCross-site scripting vulnerability in multiple FXC Inc. network devices (Managed Ethernet switch...4.8 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreDirectory traversal vulnerability in Cybozu Garoon 3.5.0 to 4.6.3 allows authenticated attackers...8.1 High
- microfocus access manager, netiq edirectory access manager (nam) +1 moreNetIQ Access Manager XSS vulnerability in versions prior to 4.4 SP36.1 Medium
- dilicmsAn issue was discovered in DiliCMS 2.4.0. There is a CSRF vulnerability that can delete a user or...6.5 Medium
- valine.js valineValine HTML Injection6.1 Medium
- zohocorp manageengine opmanagerZoho ManageEngine OpManager 12.3 before Build 123223 has XSS via the updateWidget API.6.1 Medium
- ninjaforma ninja formsXSS in the Ninja Forms plugin before 3.3.18 for WordPress allows Remote Attackers to execute...6.1 Medium
- mubu curtainThe server in mubu note 2018-11-11 has XSS by configuring an account with a crafted name value ...6.1 Medium
- harfbuzz project harfbuzzHarfBuzz before 1.0.4 allows remote attackers to cause a denial of service (invalid read of two...6.5 Medium
- canonical ubuntu linux, debian linux, nodejs node.js +17 more +19 moreSimultaneous Multi-threading (SMT) in processors can enable local users to exploit software...4.7 Medium
- qemu, canonical ubuntu linux, opensuse leap +2 moreThe pnv_lpc_do_eccb function in hw/ppc/pnv_lpc.c in Qemu before 3.1 allows out-of-bounds write or...5.5 Medium
- centreonCentreon allows SNMP trap SQL Injection9.8 Critical
- centreonCentreon XSS Vulnerability6.1 Medium
- primx zonecentralPRIMX ZoneCentral before 6.1.2236 on Windows sometimes leaks the plaintext of NTFS files. On non...4.3 Medium
- Show moreLoading…