CVEs published in November 2019
1,672 vulnerabilities, 196 critical, 11 exploited.
- ovirt ovirt-engineovirt-engine 3.2 running on Linux kernel 3.1 and newer creates certain files world-writeable due...7.8 High
- glpi-project glpi, debian linux +1 moreGLPI 0.83.7 has Local File Inclusion in common.tabs.php.7.5 High
- foswikiFoswiki before 1.1.8 contains a code injection vulnerability in the MAKETEXT macro.9.8 Critical
- symantec sonar, sonar component +1 moreThe Symantec SONAR component, prior to 12.0.2, may be susceptible to a tamper protection bypass...6.1 Medium
- f5 big-ip (afm), big-ip advanced firewall manager +1 moreOn BIG-IP AFM 15.0.0-15.0.1, 14.0.0-14.1.2, 13.1.0-13.1.3.1, and 12.1.0-12.1.5, a vulnerability...4.3 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, a reflected cross-site scripting ...6.1 Medium
- sonatype nexus repository managerThere is an OS Command Injection in Nexus Repository Manager <= 2.14.14 (bypass CVE-2019-5475)...7.2 High
- freebsd name server daemon, nsd3 +1 moreFreeBSD NSD before 3.2.13 allows remote attackers to crash a NSD child server process (SIGSEGV)...7.5 High
- apache struts, redhat jboss enterprise web server +1 moreStruts ParameterInterceptor vulnerability allows remote command execution9.8 Critical
- twikiTWiki allows arbitrary shell command execution via the Include function9.8 Critical
- sensiolabs symfony, fedoraproject fedora, redhat enterprise linux +2 moreSymfony collectionCascaded and collectionCascadedDeeply fields security bypass8.1 High
- gnome evince, debian linux, opensuse +1 more +3 moreevince is missing a check on number of pages which can lead to a segmentation fault5.5 Medium
- debian linux, readymedia project readymedia +1 moreMiniDLNA has heap-based buffer overflow9.8 Critical
- readymedia project readymediaminidlna has SQL Injection that may allow retrieval of arbitrary files9.8 Critical
- miniupnp project miniupnpd, debian linux +1 moreMiniUPnPd has information disclosure use of snprintf()7.5 High
- jitbit .net forumA cross-site scripting (XSS) vulnerability in Jitbit .NET Forum (aka ASP.NET forum) 8.3.8 allows...5.4 Medium
- infosysta in-app \& desktop notificationsAn issue was discovered in the Infosysta "In-App & Desktop Notifications" app before 1.6.14_J8...4.3 Medium
- infosysta in-app \& desktop notificationsAn issue was discovered in the Infosysta "In-App & Desktop Notifications" app before 1.6.14_J8...5.3 Medium
- apple ios, safari, iphone os +2 moreThis issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari...6.1 Medium
- apple ios, ipados, macos +2 more +4 moreAn issue existed in the drawing of web page elements. The issue was addressed with improved logic...4.3 Medium
- redhat codeready linux builder, codeready linux builder eus, codeready linux builder for arm64 eus +20 more +22 moreA vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted...8.8 High
- apple icloud, icloud for windows, itunes +4 more +6 moreA logic issue was addressed with improved state management. This issue is fixed in tvOS 13,...6.1 Medium