CVEs published in November 2018
989 vulnerabilities, 150 critical, 5 exploited.
- gnuplot, debian linux, opensuse leap +2 moreAn issue was discovered in datafile.c in Gnuplot 5.2.5. This issue allows an attacker to conduct...7.8 High
- articlecms project articlecmsArticleCMS through 2017-02-19 has XSS via the /update_personal_infomation realname or email...6.1 Medium
- hucartHuCart 5.7.4 has SQL injection in get_ip() in system/class/helper_class.php via the X-Forwarded...9.8 Critical
- git-scm git, canonical ubuntu linux +1 moreGit before 2.19.2 on Linux and UNIX executes commands from the current working directory (as if '...9.8 Critical
- artifex ghostscript, canonical ubuntu linux, debian linux +7 more +9 morepsi/zfjbig2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended...7.8 High
- artifex ghostscript, canonical ubuntu linux, debian linux +7 more +9 morepsi/zicc.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access...7.8 High
- artifex ghostscript, canonical ubuntu linux, debian linux +7 more +9 morepsi/zdevice2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended...7.8 High
ghostscriptMageiaUpdated Ghostscript packages fixes security issuesNo score- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreFlash Player versions 31.0.0.148 and earlier have a type confusion vulnerability. Successful...9.8 Critical
- dismall discuz\!Discuz! X3.4 allows XSS via admin.php because admincp/admincp_setting.php and template\default...4.8 Medium
- zblogcn z-blogphp** DISPUTED ** zb_system/function/lib/upload.php in Z-BlogPHP through 1.5.1 allows remote...8.8 High
- armcode adult filterAdult Filter 1.0 has a Buffer Overflow via a crafted Black Domain List file.7.8 High
- php-proxyUnauthenticated File Read in PHP Proxy7.5 High
- logicspice faq scriptLogicspice FAQ Script 2.9.7 allows uploading arbitrary files, which leads to remote command...7.2 High
- trytonSession Fixation in Tryton5.9 Medium
- ucms project ucmsUCMS 1.4.7 allows remote authenticated users to change the administrator password because ...8.8 High
- weberpAn issue was discovered in the Manufacturing component in webERP 4.15. CollectiveWorkOrderCost...7.2 High
- weberpAn issue was discovered in the Sales component in webERP 4.15. SalesInquiry.php has SQL Injection...7.2 High
- weberpAn issue was discovered on the "Bank Account Matching - Receipts" screen of the General Ledger component in webERP 4.15. BankMatching.php has Blind SQL injection via the AmtClear_ parameter.7.2 High
- showdocShowDoc 2.4.1 has XSS via the lang parameter because install/database.php mishandles the ...6.1 Medium
- apple icloud, itunes, safari +3 more +5 moreMultiple memory corruption issues were addressed with improved memory handling. This issue...8.8 High
- apple icloud, itunes, safari +3 more +5 moreMultiple memory corruption issues were addressed with improved memory handling. This issue...8.8 High
- apple icloud, itunes, safari +2 more +4 moreA cross-site scripting issue existed in Safari. This issue was addressed with improved URL...6.1 Medium
- libsndfile project libsndfile, debian linux +1 moreAn issue was discovered in libsndfile 1.0.28. There is a NULL pointer dereference in the function...6.5 Medium
- clippercmsClipperCMS 1.3.3 allows remote authenticated administrators to upload .htaccess files.7.2 High
- codiadCodiad 2.8.4 allows remote authenticated administrators to execute arbitrary code by uploading an...7.2 High
- get-simple getsimple cmsIn GetSimpleCMS 3.3.15, admin/upload.php blocks .html uploads but Internet Explorer render HTML...3.8 Low
- get-simple getsimple cmsIn GetSimpleCMS 3.3.15, admin/upload.php blocks .html uploads but there are several alternative...3.8 Low
- contiki-ngAn issue was discovered in the MQTT server in Contiki-NG before 4.2. The function...10.0 Critical
- sysstat project sysstatAn issue was discovered in sysstat 12.1.1. The remap_struct function in sa_common.c has an out-of...7.8 High
roundcubemailMageiaUpdated roundcubemail packages fix security vulnerability & bugsNo score- paessler prtg network monitorPRTG Network Monitor before 18.2.40.1683 allows an authenticated user with a read-only account to...8.8 High
- paessler prtg network monitorPRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users...9.8 Critical
- ibm cloud privateThe Identity and Access Management (IAM) services (IBM Cloud Private 3.1.0) do not use a secure...4.1 Medium
- microfocus netwareIn Novell NetWare before 6.5 SP8, a stack buffer overflow in processing of CALLIT RPC calls in...9.8 Critical
cephDebianceph - regression updateNo score- intelliants subrion cmsSubrion CMS RCE Vulnerability7.2 High
- artifex ghostscript, canonical ubuntu linux, debian linux +5 more +7 moreAn issue was discovered in Artifex Ghostscript before 9.26. LockSafetyParams is not checked...9.8 Critical
- linux kernelkvm_pv_send_ipi in arch/x86/kvm/lapic.c in the Linux kernel through 4.19.2 allows local users to...5.5 Medium
- yxcmsIn YXcms 1.4.7, protected/apps/appmanage/controller/indexController.php allow remote...7.2 High
- google chromeIncorrect object lifetime calculations in GPU code in Google Chrome prior to 70.0.3538.110...8.8 High
- phpext/standard/var_unserializer.c in PHP 5.x through 7.1.24 allows attackers to cause a denial of...7.5 High
- phpext/standard/var.c in PHP 5.x through 7.1.24 on Windows allows attackers to cause a denial of...7.5 High
- foxitsoftware foxit readerFoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service ...5.5 Medium
- foxitsoftware foxit readerFoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service ...5.5 Medium
- foxitsoftware foxit readerFoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service ...5.5 Medium
- greencmsAn issue was discovered in GreenCMS v2.3.0603. There is a CSRF vulnerability that allows...6.5 Medium
- royalapplications royal ts, royal tsx +1 moreThe Royal browser extensions TS before 4.3.60728 (Release Date 2018-07-28) and TSX before 3.3.1 ...8.1 High
- loadbalancer enterprise va maxLoadbalancer.org Enterprise VA MAX before 8.3.3 has XSS because Apache HTTP Server logs are...9.6 Critical
- pcman ftp serverBuffer overflow in PCMan FTP Server 2.0.7 allows for remote code execution via the APPE command.9.8 Critical
- Show moreLoading…