CVEs published in November 2018
989 vulnerabilities, 150 critical, 5 exploited.
- liquidvpnMultiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client...7.8 High
- liquidvpnMultiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client...7.8 High
- liquidvpnMultiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client...7.8 High
- liquidvpnMultiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client...7.8 High
- control-webpanel webpanelCentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.740 allows XSS via the admin/index...6.1 Medium
- control-webpanel webpanelCentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.740 allows CSRF via admin/index.php...8.8 High
- control-webpanel webpanelCentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.740 allows CSRF via admin/index.php...8.8 High
- zohocorp manageengine opmanagerZoho ManageEngine OpManager 12.3 before 123219 has a Self XSS Vulnerability.6.1 Medium
- zohocorp manageengine opmanagerZoho ManageEngine OpManager 12.3 before 123219 has stored XSS.6.1 Medium
- roche accu-chek inform ii firmware, coaguchek pro ii firmware, coaguchek xs plus firmware +2 more +4 moreAn issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 (Serial number...6.8 Medium
- roche accu-chek inform ii firmware, coaguchek pro ii firmware, cobas h 232 firmware +2 moreAn issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 (Serial number...7.4 High
- roche accu-chek inform ii firmware, coaguchek pro ii firmware, coaguchek xs plus firmware +2 more +4 moreAn issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 (Serial number...9.6 Critical
- roche accu-chek inform ii firmware, base unit hub firmware, coaguchek firmware +1 more +3 moreAn issue was discovered in Roche Accu-Chek Inform II Base Unit / Base Unit Hub before 03.01.04...8.8 High
- roche accu-chek inform ii firmware, base unit hub firmware, coaguchek firmware +1 more +3 moreAn issue was discovered in Roche Accu-Chek Inform II Base Unit / Base Unit Hub before 03.01.04...8.0 High
- denx u-bootDENX U-Boot through 2018.09-rc1 has a locally exploitable buffer overflow via a crafted kernel...7.8 High
- denx u-bootDENX U-Boot through 2018.09-rc1 has a remotely exploitable buffer overflow via a malicious TFTP...9.8 Critical
- ismartalarm cubeone firmwareIncorrect access control for the diagnostic files of the iSmartAlarm Cube One through 2.2.4.10...5.3 Medium
- qbeecamInsecure Cryptographic Storage of credentials in com.vestiacom.qbeecamera_preferences.xml in the...9.8 Critical
- ismartalarmCleartext Storage of credentials in the iSmartAlarmData.xml configuration file in the iSmartAlarm...6.8 Medium
- samsung 840 evo firmwareAn issue was discovered on Samsung 840 EVO devices. Vendor-specific commands may allow access to...4.2 Medium
- micron crucial mx100 firmware, crucial mx200 firmware, crucial mx300 firmware +4 more +6 moreAn issue was discovered on Samsung 840 EVO and 850 EVO devices (only in "ATA high" mode, not...4.0 Medium
- access manager manager, microfocus access manager +1 moreAn open redirect vulnerability exists in the Access Manager Identity Provider prior to 4.4 SP3.6.1 Medium
- ibm api connectIBM API Connect 2018.1 through 2018.3.7 could allow an unauthenticated attacker to cause a denial...7.5 High
- portainerPortainer through 1.19.2 provides an API endpoint (/api/users/admin/check) to verify that the...9.8 Critical
- google monorailGoogle Monorail before 2018-06-07 has a Cross-Site Search (XS-Search) vulnerability because CSV...5.3 Medium
- google monorailGoogle Monorail before 2018-05-04 has a Cross-Site Search (XS-Search) vulnerability because CSV...5.3 Medium
- google monorailGoogle Monorail before 2018-04-04 has a Cross-Site Search (XS-Search) vulnerability because CSV...5.3 Medium
- linux kernel, canonical ubuntu linux +1 moreThe vcpu_scan_ioapic function in arch/x86/kvm/x86.c in the Linux kernel through 4.19.2 allows...5.5 Medium
- qemu, canonical ubuntu linux, debian linux +2 more +4 morehw/9pfs/cofile.c and hw/9pfs/9p.c in QEMU can modify an fid path while it is being accessed by a...5.5 Medium
- philips intellispace pacs, isite pacs +1 morePhilips iSite and IntelliSpace PACS, iSite PACS, all versions, and IntelliSpace PACS, all...8.8 High
- fineuploader php-traditional-serverFineUploader php-traditional-server unauthenticated arbitrary file upload vulnerability9.8 Critical
- hayageek jquery upload fileUnrestricted Upload of File with Dangerous Type in jquery-file-upload9.8 Critical
- ibm cloud privateIBM Cloud Private 2.1.0 could allow a local user to obtain the CA Private Key due to it being...6.2 Medium
- apache sparkRemote Code Execution in spark-core9.8 Critical
- cloud foundry uaa, uaa release, pivotal software cloud foundry uaa +1 more +3 moreUAA Privilege Escalation9.9 Critical
- pivotal on demand services sdk, pivotal software broker api +1 moreOn Demand Services SDK Timing Attack Vulnerability9.1 Critical
termcrates.ioterm is looking for a new maintainerNo score- bestxsoftware best free keyloggerBestXsoftware Best Free Keylogger before 6.0.0 allows local users to gain privileges via a Trojan...7.8 High
- mypresta customer files upload, prestashop +1 moremodules/orderfiles/ajax/upload.php in the Customer Files Upload addon 2018-08-01 for PrestaShop ...9.8 Critical
- gnome gnome-keyringGNOME Keyring through 3.28.2 allows local users to retrieve login credentials via a Secret...7.8 High
- gnome seahorse** DISPUTED ** GNOME Seahorse through 3.30 allows physically proximate attackers to read...6.8 Medium
- ansilove libansiloveThe ansilove_ansi function in loaders/ansi.c in libansilove 1.0.0 allows remote attackers to...6.5 Medium
- jupyter notebookJupyter Notebook XSS via directory name6.1 Medium
- jupyter notebookJupyter Notebook XSS via untrusted notebooks6.1 Medium
- google chromeIncorrect array position calculations in V8 in Google Chrome prior to 70.0.3538.102 allowed a...8.8 High
- seacmsIn SeaCMS v6.6.4, there is stored XSS via the member.php?action=chgpwdsubmit email parameter...5.4 Medium
- seacmsIn SeaCMS v6.64, there is SQL injection via the admin_makehtml.php topic parameter because of...7.2 High
- foxitsoftware foxit reader, u3d +1 moreThe u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0...7.1 High
- foxitsoftware foxit reader, u3d +1 moreThe u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0...7.1 High
- foxitsoftware foxit reader, u3d +1 moreThe u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0...7.1 High
- Show moreLoading…