CVEs published in November 2018
989 vulnerabilities, 150 critical, 5 exploited.
- foxitsoftware foxit reader, u3d +1 moreThe u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0...7.1 High
- foxitsoftware foxit reader, u3d +1 moreThe u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0...7.1 High
- foxitsoftware foxit reader, u3d +1 moreThe u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0...7.1 High
- foxitsoftware foxit reader, u3d +1 moreThe u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0...7.1 High
- foxitsoftware foxit reader, u3d +1 moreThe u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0...7.1 High
- guriddo form phpGuriddo Form PHP 5.3 has XSS via the demos/jqform/defaultnodb/default.php OrderID, ShipName,...6.1 Medium
- google gvisorpkg/sentry/kernel/shm/shm.go in Google gVisor before 2018-11-01 allows attackers to overwrite...9.8 Critical
- s-cmsAn issue was discovered in S-CMS v1.5. There is a CSRF vulnerability that can add a new user via...8.8 High
- s-cmsAn issue was discovered in S-CMS v1.5. There is a SQL injection vulnerability in search.php via...7.5 High
- greencmsGreenCMS v2.3.0603 allows remote authenticated administrators to delete arbitrary files by...4.9 Medium
- laobancmsLAOBANCMS 2.0 allows install/mysql_hy.php?riqi=../ Directory Traversal.9.8 Critical
- jtbc phpAn issue was discovered in JTBC(PHP) 3.0.1.7. aboutus/manage.php?type=action&action=add allows CSRF.8.8 High
- zyxel vmg1312-b10d firmwareZyxel VMG1312-B10D devices before 5.13(AAXA.8)C0 allow ../ Directory Traversal, as demonstrated...7.5 High
- kimsq rbkimsQ Rb 2.3.0 allows XSS via the second input field to the /?r=home&mod=mypage&page=info URI.5.4 Medium
- phpbb, debian linux +1 morephpBB Remote Code Execution7.2 High
- dell bsafe, oracle application testing suite, communications analytics +9 more +11 moreRSA BSAFE Micro Edition Suite versions prior to 4.0.11 (in 4.0.x series) and versions prior to 4...7.5 High
- srcms project srcmsSRCMS 3.0.0 allows CSRF via admin.php?m=Admin&c=gifts&a=update to change goods prices with the...6.5 Medium
- srcms project srcmsSRCMS 3.0.0 allows CSRF via admin.php?m=Admin&c=manager&a=update to change the username and...8.8 High
- centreonCentreon SQL Injection8.8 High
- centreonCentreon XSS Vulnerability5.4 Medium
- school equipment monitoring system project equipment monitoring systemSchool Equipment Monitoring System 1.0 allows SQL injection via the login screen, related to...9.8 Critical
- pointofsales project pointofsalesPoint Of Sales 1.0 allows SQL injection via the login screen, related to LoginForm1.vb.9.8 Critical
- bakeshop inventory system project inventory systemBakeshop Inventory System 1.0 has SQL injection via the login screen, related to include...9.8 Critical
- curriculum evaluation system project evaluation systemCurriculum Evaluation System 1.0 allows SQL Injection via the login screen, related to frmCourse...9.8 Critical
- bsen ordering software project ordering softwareThe BSEN Ordering software 1.0 has SQL Injection via student/index.php?view=view&id=[SQL] or...9.8 Critical
- school attendance monitoring system project attendance monitoring systemSchool Attendance Monitoring System 1.0 has CSRF via event/controller.php?action=photos.8.8 High
- school attendance monitoring system project attendance monitoring systemSchool Attendance Monitoring System 1.0 has CSRF via /user/user/edit.php.8.8 High
- library management system project management systemLibrary Management System 1.0 has SQL Injection via the "Search for Books" screen.9.8 Critical
- school event management system project event management systemSchool Event Management System 1.0 has SQL Injection via the student/index.php or event/index.php...9.8 Critical
- school event management system project event management systemSchool Event Management System 1.0 allows CSRF via user/controller.php?action=edit.8.8 High
- school event management system project event management systemSchool Event Management System 1.0 allows Arbitrary File Upload via event/controller.php?action...9.8 Critical
- saltosSaltOS 3.1 r8126 allows action=ajax&query=numbers&page=usuarios&action2=[SQL] SQL Injection.9.8 Critical
- saltosSaltOS 3.1 r8126 allows action=login&querystring=&user=[SQL] SQL Injection.9.8 Critical
- saltos rhinosRhinOS 3.0 build 1190 allows CSRF.6.5 Medium
- modbustools modbus slaveModbus Slave 7.0.0 in modbus tools has a Buffer Overflow.7.5 High
- kangujang local serverLocal Server 1.0.9 has a Buffer Overflow via crafted data on Port 4008.7.5 High
- k-iwiK-iwi Framework 1775 has SQL Injection via the admin/user/group/update user_group_id parameter or...9.8 Critical
- inova-software inova partnerInova Partner 5.0.5-RELEASE, Build 0510-0906 and earlier allows authenticated users authorization...6.4 Medium
- inova-software inova partnerInova Partner 5.0.5-RELEASE, Build 0510-0906 and earlier allows authenticated users authorization...6.4 Medium
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 using Enterprise bundle Archives (EBA)...6.3 Medium
- ibm jazz reporting serviceThe Report Builder of Jazz Reporting Service 5.0 through 5.0.2 and 6.0 through 6.0.6 could allow...4.3 Medium
- zte zxhn f670, zxhn f670 firmware +1 moreAll versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper authorization...4.3 Medium
- zte zxhn f670, zxhn f670 firmware +1 moreAll versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper access control...7.5 High
- zte zxhn f670, zxhn f670 firmware +1 moreAll versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by null pointer dereference...6.5 Medium
- zte zxhn f670, zxhn f670 firmware +1 moreAll versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by information exposure...9.6 Critical
- zte zxhn f670, zxhn f670 firmware +1 moreAll versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by heap-based buffer...9.0 Critical
- lenovo thinkserver bmc, thinkserver rd340 firmware, thinkserver rd440 firmware +2 more +4 moreLegacy Server BMC Remote Command Injection7.2 High
- ibm bladecenter hs23 firmware, bladecenter hs23e firmware, flex system x220 m4 firmware +24 more +26 moreMissing System x Flash Memory Write Protection Lock Bit4.9 Medium
- lenovo chassis management module (cmm), chassis management module firmware +1 moreCMM Security Vulnerability5.9 Medium
- lenovo chassis management module (cmm), chassis management module firmware +1 moreCMM Security Vulnerability5.3 Medium
- Show moreLoading…