CVEs published in November 2019
1,672 vulnerabilities, 196 critical, 11 exploited.
- 10-strike free photo viewer Free Photo Viewer 1.3 allows remote attackers to execute arbitrary code via a crafted BMP and/or... 7.8 High
- gnupg, canonical ubuntu linux, fedoraproject fedora +1 more +3 more A flaw was found in the way certificate signatures could be forged using collisions found in the... 5.3 Medium
- huami mi fit The Anhui Huami Mi Fit application before 4.0.11 for Android has an Unencrypted Update Check. 5.3 Medium
- cbc gem The CBC Gem application before 9.24.1 for Android and before 9.26.0 for iOS has Unencrypted... 5.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +6 more +8 more relay_open in kernel/relay.c in the Linux kernel through 5.4.1 allows local users to cause a... 5.5 Medium
- No product listed Remove newline characters from uu encoding methods No score
-
fileDebian file - regression update No score - zabbix Zabbix before 5.0 represents passwords in the users table with unsalted MD5. 7.5 High
- gnome dia, fedoraproject fedora, opensuse leap +2 more When GNOME Dia before 2019-11-27 is launched with a filename argument that is not a valid... 5.5 Medium
- omniosce omnios illumos, as used in OmniOS Community Edition before r151030y, allows a kernel crash via an... 7.5 High
- huawei honor play firmware Honor play smartphones with versions earlier than 9.1.0.333(C00E333R1P1T8) have an information... 4.6 Medium
- huawei myna, myna firmware +1 more There is an information leak vulnerability in Huawei smart speaker Myna. When the smart speaker... 5.4 Medium
- huawei mate 20 rs firmware Mate 20 RS smartphones with versions earlier than 9.1.0.135(C786E133R3P1) have an improper... 2.4 Low
- huawei atlas 300 firmware, atlas 500 firmware +1 more Huawei Atlas 300, Atlas 500 have a buffer overflow vulnerability. A local, authenticated attacker... 5.5 Medium
- huawei cd10-10 firmware, cd16-10 firmware, cd17-10 firmware +19 more +21 more Some Huawei home routers have an input validation vulnerability. Due to input parameter is not... 8.1 High
- huawei cd10-10 firmware, cd16-10 firmware, cd17-10 firmware +19 more +21 more Some Huawei home routers have an improper authorization vulnerability. Due to improper... 7.8 High
- huawei band 2 firmware, band 3 firmware +1 more There is an insufficient authentication vulnerability in Huawei Band 2 and Honor Band 3. The band... 8.8 High
- huawei p20, p20 firmware +1 more The Huawei Share function of P20 phones with versions earlier than Emily-L29C 9.1.0.311 has an... 5.7 Medium
- huawei vp9630 firmware, vp9650 firmware, vp9660 firmware +2 more There is a use of insufficiently random values vulnerability in Huawei ViewPoint products. An... 7.5 High
- huawei p20, p20 firmware +1 more There is an improper access control vulnerability in Huawei Share. The software does not properly... 5.5 Medium
- huawei nova 5 firmware, nova 5i pro firmware +1 more Nova 5i pro and Nova 5 smartphones with versions earlier than 9.1.1.190(C00E190R6P2)and Versions... 7.8 High
- huawei hisuite firmware, mate 20 firmware, p30 firmware +1 more +3 more P30, P30 Pro, Mate 20 smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193... 5.5 Medium
- huawei hisuite, hwbackup +1 more HiSuite with 9.1.0.305 and earlier versions and 9.1.0.305(MAC) and earlier versions and HwBackup... 5.5 Medium
- huawei p30, p30 firmware +1 more P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.193(C00E190R1P21) have an out of... 5.5 Medium
- huawei mate 20 firmware, p30 firmware, p30 pro firmware +2 more P30, Mate 20, P30 Pro smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193... 7.8 High
- huawei hisuite firmware, mate 20 firmware, p30 firmware +1 more +3 more P30, P30 Pro, Mate 20 smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193... 5.5 Medium
- alliedtelesis at-gs950\/8 firmware A Directory Traversal in the Web interface of the Allied Telesis AT-GS950/8 until Firmware AT... 7.5 High
- inist ezmaster In EzMaster before 5.2.11 docker containers were executed with advanced privileges by default 6.6 Medium
- lab digital wagtail-2fa 2FA bypass in Wagtail through new device path 8.7 High
- linux kernel In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image can lead to slab-out-of... 7.8 High
- linux kernel, netapp active iq unified manager, cloud backup +2 more +4 more In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations... 7.8 High
- luajit, moonjit project moonjit +1 more In LuaJIT through 2.0.5, as used in Moonjit before 2.1.2 and other products, debug.getinfo has a... 9.1 Critical
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 more A heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0,... 8.8 High
- [unknown] grub2 A flaw was found in the grub2-set-bootflag utility of grub2. A local attacker could run this... 5.9 Medium
- mozilla network security services, nss, siemens ruggedcom rox mx5000 firmware +7 more +9 more In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS... 7.5 High
- fusionpbx A cross-site scripting (XSS) vulnerability in app/fax/fax_log_view.php in FusionPBX 4.4.1 allows... 6.1 Medium
- fusionpbx A cross-site scripting (XSS) vulnerability in app/dialplans/dialplans.php in FusionPBX 4.4.1... 6.1 Medium
- fusionpbx A cross-site scripting (XSS) vulnerability in app/voicemail_greetings/voicemail_greeting_edit.php... 6.1 Medium
- fusionpbx A cross-site scripting (XSS) vulnerability in app/fifo_list/fifo_interactive.php in FusionPBX 4.4... 6.1 Medium
- fusionpbx A cross-site scripting (XSS) vulnerability in app/dialplans/dialplan_detail_edit.php in FusionPBX... 6.1 Medium
- misp-project misp In app/Controller/TagsController.php in MISP 2.4.118, users can bypass intended restrictions on... 5.3 Medium
- octopus deploy In Octopus Deploy before 2019.10.6, an authenticated user with TeamEdit permission could send a... 6.5 Medium
- octopus deploy In Octopus Deploy before 2019.10.7, in a configuration where SSL offloading is enabled, the CSRF... 5.3 Medium
- rconfig ** DISPUTED ** A downloadFile.php download_file path traversal vulnerability in rConfig through 3... 7.5 High
-
ucode-intelSUSE Security update for ucode-intel No score -
ucode-intelSUSE Security update for ucode-intel No score -
libxml2SUSE,python-libxml2-pythonSUSE +1 more Security update for libxml2 No score -
libxml2SUSE,python-libxml2SUSE +1 more Security update for libxml2 No score - gnu bash, netapp hci management node, oncommand unified manager +5 more +7 more An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. By... 7.8 High
- debian linux, linux kernel, canonical ubuntu linux +11 more +13 more In the Linux kernel 5.3.11, mounting a crafted btrfs image twice can cause an... 4.4 Medium
- Show olderLoading…