CVEs published in November 2018
989 vulnerabilities, 150 critical, 5 exploited.
- powerdns authoritative, recursor, debian pdns +1 more +3 morePowerDNS Authoritative Server 4.1.0 up to 4.1.4 inclusive and PowerDNS Recursor 4.0.0 up to 4.1.4...5.3 Medium
- powerdns authoritative, recursor, debian pdns +1 more +3 morePowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor...5.3 Medium
- red hat ansible, redhat ansible engine +1 moreAnsible Logs Passwords If PowerShell ScriptBlock is Enabled4.2 Medium
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +4 more +6 moreIBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.6 are...5.4 Medium
- pulsesecure pulse secure desktop clientPulse Secure Desktop Client 5.3 up to and including R6.0 build 1769 on Windows has Insecure...5.5 Medium
- gitlabAn issue was discovered in the wiki API in GitLab Community and Enterprise Edition before 11.2.7,...9.8 Critical
libsshUbuntulibssh regressionNo score- symantec endpoint protection, symantec corporation endpoint protection (sep) +1 moreSymantec Endpoint Protection prior to 14.2 MP1 may be susceptible to a DLL Preloading...7.8 High
- symantec endpoint protection, endpoint protection cloud, norton antivirus +1 more +3 moreNorton prior to 22.15; Symantec Endpoint Protection (SEP) prior to 12.1.7454.7000 & 14.2;...6.8 Medium
- symantec endpoint protection, endpoint protection cloud, norton antivirus +1 more +3 moreNorton prior to 22.15; Symantec Endpoint Protection (SEP) prior to 12.1.7454.7000 & 14.2;...7.8 High
- ossec, wazuh +1 moreThe agent in OSSEC through 3.1.0 on Windows allows local users to gain NT AUTHORITY\SYSTEM access...7.8 High
- libjpeg-turbolibjpeg-turbo 2.0.1 has a heap-based buffer over-read in the put_pixel_rows function in wrbmp.c,...6.5 Medium
- dcraw project dcraw, suse linux enterprise desktop, linux enterprise server +2 moreA stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in...8.8 High
- sales \& company management system project \& company management systemAn issue was discovered in Sales & Company Management System (SCMS) through 2018-06-06. There is...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.6.0 to 2.6.4, the ZigBee ZCL dissector could crash. This was addressed in epan...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the IxVeriWave file parser could crash. This was...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the DCOM dissector could crash. This was...5.5 Medium
- wireshark, debian linux +1 moreIn Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the dissection engine could crash. This was...5.5 Medium
- wireshark, debian linux +1 moreIn Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the PVFS dissector could crash. This was...5.5 Medium
- wireshark, debian linux +1 moreIn Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the LBMPDM dissector could crash. In addition, a...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the MMSE dissector could go into an infinite...7.5 High
- check point software technologies ltd. freerdp, canonical ubuntu linux, debian linux +2 moreFreeRDP prior to version 2.0.0-rc4 contains several Out-Of-Bounds Reads in the NTLM...7.5 High
- check point software technologies ltd. freerdp, canonical ubuntu linux, debian linux +2 moreFreeRDP prior to version 2.0.0-rc4 contains an Out-Of-Bounds Write of up to 4 bytes in function...9.8 Critical
- check point software technologies ltd. freerdp, canonical ubuntu linux, debian linux +6 more +8 moreFreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer...9.8 Critical
- check point software technologies ltd. freerdp, canonical ubuntu linux, debian linux +7 more +9 moreFreeRDP prior to version 2.0.0-rc4 contains an Integer Truncation that leads to a Heap-Based...9.8 Critical
- check point software technologies ltd. freerdp, canonical ubuntu linux +1 moreFreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function...9.8 Critical
- check point software technologies ltd. freerdp, canonical ubuntu linux +1 moreFreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function...9.8 Critical
- libsndfile project libsndfile, debian linux +1 moreThere is a heap-based buffer over-read at wav.c in wav_write_header in libsndfile 1.0.28 that...6.5 Medium
- libsndfile project libsndfile, debian linux +1 moreAn issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function...8.1 High
- libsndfile project libsndfile, debian linux +1 moreAn issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function...6.5 Medium
- perl, canonical ubuntu linux, debian linux +5 more +7 morePerl before 5.26.3 has a buffer overflow via a crafted regular expression that triggers invalid...9.8 Critical
- perl, apple mac os x, canonical ubuntu linux +6 more +8 morePerl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers...9.1 Critical
- perl, canonical ubuntu linux, debian linux +5 more +7 morePerl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular...9.8 Critical
- perl, apple mac os x, canonical ubuntu linux +15 more +17 morePerl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular...9.8 Critical
- subaru starlink 2017 firmware, starlink 2018 firmware, starlink 2019 firmware +2 moreA vulnerability in the update mechanism of Subaru StarLink Harman head units 2017, 2018, and 2019...6.4 Medium
- ics-cert teledyne dalsa sherlock, teledynedalsa sherlock +1 moreA stack-based buffer overflow vulnerability has been identified in Teledyne DALSA Sherlock...9.8 Critical
- interspire email marketeradmin/functions/remote.php in Interspire Email Marketer through 6.1.6 has Server Side Request...6.5 Medium
- yoast seoA Race condition vulnerability in unzip_file in admin/import/class-import-settings.php in the...6.6 Medium
- rapid7 komandIn Rapid7 Komand version 0.41.0 and prior, certain endpoints that are able to list the always...3.4 Low
- cisco prime license managerCisco Prime License Manager SQL Injection Vulnerability9.4 Critical
drupal/bootstrapPackagistThis base theme bridges the gap between Drupal and the Bootstrap Framework. The theme doesn't sufficiently filter valid targets under the scenario of opening modals, popovers, and tooltips. This vulne…No score- imperva securesphereThe Python CGI scripts in PWS in Imperva SecureSphere 13.0.10, 13.1.10, and 13.2.10 allow remote...9.8 Critical
- node.jsNode.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Hostname spoofing in...4.3 Medium
- node.js, suse enterprise storage, linux enterprise server +1 more +3 moreNode.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial...7.5 High
- node.js, redhat enterprise linux, enterprise linux desktop +5 more +7 moreNode.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with...7.5 High
- node.jsNode.js: All versions prior to Node.js 6.15.0: Debugger port 5858 listens on any interface by...8.1 High
- node.js, suse enterprise storage, linux enterprise server +1 more +3 moreNode.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can...7.5 High
- ibm maximo asset managementIBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- freebsdIn FreeBSD before 11.2-STABLE(r340268) and 11.2-RELEASE-p5, due to incorrectly accounting for...5.9 Medium
- qnap qtsBuffer Overflow vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3...9.8 Critical
- Show moreLoading…