CVEs published in November 2018
989 vulnerabilities, 150 critical, 5 exploited.
- dell avamar, emc avamar, emc integrated data protection appliance +2 more +4 moreDell EMC Avamar and Integrated Data Protection Appliance Open Redirection Vulnerability6.1 Medium
- dell avamar, emc avamar, emc integrated data protection appliance +2 more +4 moreDell EMC Avamar and Integrated Data Protection Appliance Remote Code Execution Vulnerability9.8 Critical
- linux kernel, [unknown] kernel:, redhat enterprise linux desktop +5 more +7 moreThe Linux kernel before 4.15-rc8 was found to be vulnerable to a NULL pointer dereference bug in...5.5 Medium
- goldplugins easy testimonialsStored XSS was discovered in the Easy Testimonials plugin 3.2 for WordPress. Three wp-admin/post...6.1 Medium
- [unknown] moodleMoodle Login CSRF vulnerability in login form6.5 Medium
- ibm websphere application serverIBM WebSphere Application Server 9.0.0.0 through 9.0.0.9 is vulnerable to a XML External Entity...7.1 High
- ibm integration bus, websphere message broker +1 moreIBM Integration Bus 9.0.0.0, 9.0.0.11, 10.0.0.0, and 10.0.0.14 (including IBM WebSphere Message...4.0 Medium
- phpokAn issue was discovered in PHPok 4.9.015. admin.php?c=update&f=unzip allows remote attackers to...8.8 High
- sikcmssikcms 1.1 has CSRF via admin.php?m=Admin&c=Users&a=userAdd to add an administrator account.8.8 High
- bagesoft bagecmsBageCMS 3.1.3 has CSRF via upload/index.php?r=admini/admin/ownerUpdate to modify a user account.8.8 High
- cuppacmsCuppaCMS before 2018-11-12 has SQL Injection in administrator/classes/ajax/functions.php via the...9.8 Critical
- arcms project arcmsAn issue was discovered in arcms through 2018-03-19. SQL injection exists via the json/newslist...9.8 Critical
- arcms project arcmsAn issue was discovered in arcms through 2018-03-19. No authentication is required for index/main...9.8 Critical
- zblogcn z-blogphp** DISPUTED ** zb_system/admin/index.php?act=UploadMng in Z-BlogPHP 1.5 mishandles file preview,...4.3 Medium
- tp4a teleporttp4a TELEPORT 3.1.0 has CSRF via user/do-reset-password to change any password, such as the...8.8 High
- dotcmsAn issue was discovered in Dotcms through 5.0.3. Attackers may perform XSS attacks via the inode,...5.4 Medium
- interspire email marketerInterspire Email Marketer through 6.1.6 has SQL Injection via an updateblock sortorder request to...8.8 High
- interspire email marketerInterspire Email Marketer through 6.1.6 has SQL Injection via a deleteblock blockid[] request to...8.8 High
- interspire email marketerInterspire Email Marketer through 6.1.6 has SQL Injection via a checkduplicatetags tagname...8.8 High
- interspire email marketerInterspire Email Marketer through 6.1.6 allows arbitrary file upload via a surveys_submit.php ...8.8 High
- interspire email marketerInterspire Email Marketer through 6.1.6 has SQL Injection via a tagids Delete action to...8.8 High
- rudrasoftech edusecindex.php?r=site%2Flogin in EduSec through 4.2.6 does not restrict sending a series of LoginForm...9.8 Critical
- jtbc phpJTBC(PHP) 3.0.1.7 has XSS via the console/xml/manage.php?type=action&action=edit content parameter.6.1 Medium
- jtbc phpJTBC(PHP) 3.0.1.7 has CSRF via the console/xml/manage.php?type=action&action=edit URI, as...8.8 High
- jeecmsJEECMS 9.3 has CSRF via the api/admin/role/save URI to add a user.8.8 High
- jeecmsJEECMS 9.3 has CSRF via the api/admin/content/save URI to add news.6.5 Medium
- jasper project jasper, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in JasPer 2.0.14. There is a heap-based buffer over-read of size 8 in the...7.8 High
- jasper project jasper, canonical ubuntu linux, debian linux +3 more +5 moreAn issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function...6.5 Medium
- jasper project jasper, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900...8.8 High
- jasper project jasper, debian linux, suse linux enterprise desktop +1 more +3 moreAn issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900...8.8 High
- jasper project jasper, debian linux, opensuse leap +2 more +4 moreAn issue was discovered in JasPer 2.0.14. There is an access violation in the function...6.5 Medium
- tp-link archer c5 firmwareTP-Link Archer C5 devices through V2_160201_US allow remote command execution via shell...7.2 High
- podofo project podofoA NULL pointer dereference vulnerability exists in the function PdfTranslator::setTarget() in...8.8 High
- httl project httlHTTL (aka Hyper-Text Template Language) through 1.0.11 allows remote command execution because...9.8 Critical
- httl project httlHTTL (aka Hyper-Text Template Language) through 1.0.11 allows remote command execution because...9.8 Critical
- tp-link tl-wr886n firmwareTP-Link TL-WR886N 7.0 1.1.0 devices allow remote attackers to cause a denial of service (Tlb Load...9.8 Critical
- debian linux, linux kernel, [unknown] kernel: +2 more +4 moreA security flaw was found in the Linux kernel in a way that the cleancache subsystem clears an...5.3 Medium
- php, sdcms +1 moreAn issue was discovered in SDCMS 1.6 with PHP 5.x. app/admin/controller/themecontroller.php uses...8.8 High
- tcpdumpIn tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print...5.5 Medium
- php, canonical ubuntu linux, debian linux +1 more +3 moreUniversity of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other...7.5 High
- exiv2, canonical ubuntu linux, debian linux +3 more +5 moreIn Exiv2 0.26 and previous versions, PngChunk::readRawProfile in pngchunk_int.cpp may cause a...6.5 Medium
- sysstat project sysstatAn issue was discovered in sysstat 12.1.1. The remap_struct function in sa_common.c has an out-of...5.5 Medium
xml-security-cDebianxml-security-c - security updateNo scorefirefoxUbuntufirefox regressionsNo score- audiocoding freeware advanced audio decoder 2An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1. There is a NULL...7.8 High
- audiocoding freeware advanced audio decoder 2An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1. There was a stack...7.8 High
- audiocoding freeware advanced audio decoder 2An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.1. There was a heap...7.8 High
- vanillaforums vanillaVanilla before 2.5.5 and 2.6.x before 2.6.2 allows Remote Code Execution because authenticated...7.2 High
- gnuplot, debian linux, opensuse leap +2 moreAn issue was discovered in cairo.trm in Gnuplot 5.2.5. This issue allows an attacker to conduct a...7.8 High
- gnuplot, debian linux, opensuse leap +2 moreAn issue was discovered in post.trm in Gnuplot 5.2.5. This issue allows an attacker to conduct a...7.8 High
- Show moreLoading…