CVEs published in November 2018
989 vulnerabilities, 150 critical, 5 exploited.
- google androidIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- google androidIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- google androidIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- google androidIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- google androidIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- showdocShowdoc Forced Browsing6.5 Medium
- fortinet fortios, fortinet, inc. fortinet fortios +1 moreAn uninitialized memory buffer leak exists in Fortinet FortiOS 5.6.1 to 5.6.3, 5.4.6 to 5.4.7, 5...7.5 High
- lenovo system management module firmware, thinksystem smm +1 moreSystem Management Module Vulnerabilities6.5 Medium
- lenovo system management module firmware, thinksystem smm +1 moreSystem Management Module Vulnerabilities8.1 High
- lenovo system management module firmware, thinksystem smm +1 moreSystem Management Module Vulnerabilities6.1 Medium
- lenovo system management module firmware, thinksystem smm +1 moreSystem Management Module Vulnerabilities5.9 Medium
- lenovo system management module firmware, thinksystem smm +1 moreSystem Management Module Vulnerabilities8.1 High
- lenovo system management module firmware, thinksystem smm +1 moreSystem Management Module Vulnerabilities8.1 High
- lenovo system management module firmware, thinksystem smm +1 moreSystem Management Module Vulnerabilities8.1 High
- lenovo system management module firmware, thinksystem smm +1 moreSystem Management Module Vulnerabilities7.5 High
- lenovo system management module firmware, thinksystem smm +1 moreSystem Management Module Vulnerabilities7.5 High
- apache hadoopArbitrary Command Execution in Hadoop8.8 High
- suse pam, kernel linux-pam +1 morepam_access does not handle netmask matches correctly7.5 High
- safe-transmute project safe-transmuteHeap overflow or corruption in safe-transmute9.8 Critical
- exiv2Exiv2::isoSpeed in easyaccess.cpp in Exiv2 v0.27-RC2 allows remote attackers to cause a denial of...6.5 Medium
- pbootcmsPbootCMS V1.3.1 build 2018-11-14 allows remote attackers to execute arbitrary code via use of ...9.8 Critical
- cesanta mongooseIn Cesanta Mongoose 6.13, a SIGSEGV exists in the mongoose.c mg_mqtt_add_session() function.6.5 Medium
- artifex ghostscript, debian linux +1 moreIn Artifex Ghostscript before 9.26, a carefully crafted PDF file can trigger an extremely long...5.5 Medium
- artifex ghostscript, debian linux, redhat enterprise linux desktop +4 more +6 moreIn Artifex Ghostscript through 9.25, the setpattern operator did not properly validate certain...7.8 High
- [unknown] samba, canonical ubuntu linux, debian linux +2 moreSamba from version 4.0.0 and before versions 4.7.12, 4.8.7, 4.9.3 is vulnerable to a denial of...6.5 Medium
- [unknown] samba, canonical ubuntu linux, debian linux +2 moreSamba from version 4.3.0 and before versions 4.7.12, 4.8.7 and 4.9.3 are vulnerable to a denial...5.7 Medium
- [unknown] samba, canonical ubuntu linux, debian linux +2 moreA denial of service vulnerability was discovered in Samba's LDAP server before versions 4.7.12, 4...6.5 Medium
event-streamnpm,flatmap-streamnpm +1 moreCritical severity vulnerability that affects event-stream and flatmap-stream9.8 Critical- [unknown] dnsdistAn issue has been found in PowerDNS DNSDist before 1.3.3 allowing a remote attacker to craft a...5.9 Medium
- buffalo ts5600d1206 firmwareIncorrect access control in nasapi in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to...9.8 Critical
- buffalo ts5600d1206 firmwareCross-site scripting in detail.html in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to...6.1 Medium
- buffalo ts5600d1206 firmwareDirectory traversal in list_folders method in Buffalo TS5600D1206 version 3.61-0.10 allows...6.5 Medium
- buffalo ts5600d1206 firmwareIncorrect access controls in nasapi in Buffalo TS5600D1206 version 3.61-0.10 allow attackers to...8.8 High
- buffalo ts5600d1206 firmwareSystem Command Injection in network.set_auth_settings in Buffalo TS5600D1206 version 3.70-0.10...7.2 High
- buffalo ts5600d1206 firmwareIncorrect access control in get_portal_info in Buffalo TS5600D1206 version 3.61-0.10 allows...7.5 High
- buffalo ts5600d1206 firmwareSystem command injection in User.create method in Buffalo TS5600D1206 version 3.61-0.10 allows...7.2 High
- totolink a3002ru firmwarePassword disclosure in password.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to obtain...6.1 Medium
- totolink a3002ru firmwareIncorrect access control in formPasswordSetup in TOTOLINK A3002RU version 1.0.8 allows attackers...9.8 Critical
- totolink a3002ru firmwareCross-site scripting in notice_gen.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to...6.1 Medium
- totolink a3002ru firmwareSystem command injection in formDlna in TOTOLINK A3002RU version 1.0.8 allows attackers to...9.8 Critical
- totolink a3002ru firmwareCross-site scripting in password.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to...6.1 Medium
- totolink a3002ru firmwareCross-site scripting in password.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to...6.1 Medium
- totolink a3002ru firmwareCross-site scripting in notice_gen.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to...6.1 Medium
- dcraw project dcrawA floating point exception in kodak_radc_load_raw in dcraw through 9.28 could be used by...5.5 Medium
- dcraw project dcrawA floating point exception in parse_tiff_ifd in dcraw through 9.28 could be used by attackers...5.5 Medium
- dcraw project dcrawA heap buffer over-read in parse_tiff_ifd in dcraw through 9.28 could be used by attackers able...7.1 High
- dcraw project dcrawA buffer over-read in crop_masked_pixels in dcraw through 9.28 could be used by attackers able to...7.1 High
- tibco statistica serverTIBCO Statistica Server Vulnerable to Cross Site Scripting7.6 High
- dell avamar, emc avamar, emc integrated data protection appliance +2 more +4 moreDell EMC Avamar and Integrated Data Protection Appliance Command Injection Vulnerability6.7 Medium
- dell avamar, emc avamar, emc integrated data protection appliance +2 more +4 moreDell EMC Avamar and Integrated Data Protection Appliance Information Exposure Vulnerability6.5 Medium
- Show moreLoading…