CVEs published in November 2019
1,672 vulnerabilities, 196 critical, 11 exploited.
- horde groupware, debian linux, opensuse +2 moreHorde Groupware Web mail 5.1.2 has CSRF with requests to change permissions5.3 Medium
- horde groupware, debian linux +1 moreHorde Groupware Webmail Edition has CSRF and XSS when saving search as a virtual address book8.8 High
- phantomjsPhantomJS Arbitrary File Read7.5 High
- debian linux, gnome display manager, opensuse leap +1 more +3 moregdm3 3.14.2 and possibly later has an information leak before screen lock2.4 Low
- cryptocatCryptocat has an Unspecified Chat Participant User List Disclosure5.3 Medium
- cryptocatCryptocat before 2.0.22: cryptocat.js handlePresence() has cross site scripting6.1 Medium
- kubernetes kube-state-metrics, redhat openshift container platform +1 morekube-state-metrics may expose secret content in metrics5.3 Medium
apportUbuntuapport regressionNo scorewhoopsieUbuntuwhoopsie regressionNo score- oracle mysql, fedoraproject fedora, mariadb +4 more +6 moreVulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions...3.7 Low
- oracle mysql, canonical ubuntu linux, mariadb +5 more +7 moreVulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions...3.7 Low
- redhat rhq mongo db drift server, rhq mongo db drift server mongo db drift server, redhat jboss operations network +2 moreAn insecurity temporary file vulnerability exists in RHQ Mongo DB Drift Server through 2013-09-25...7.1 High
- python software foundation; beanbag djblets, review board, review board board +2 more +4 moreReviewBoard and Djblets library are vulnerable to code execution9.8 Critical
- arm mbed-mqtt, mbed-os +1 moreA denial-of-service issue was discovered in the MQTT library in Arm Mbed OS 2017-11-02. The...7.5 High
- amazon freertos\+fatReal Time Engineers FreeRTOS+FAT 160919a has a use after free. The function FF_Close() is defined...7.5 High
- isl arp-guardA SQL injection vulnerability in a /login/forgot1 POST request in ARP-GUARD 4.0.0-5 allows...9.8 Critical
- [unknown] vdsm, redhat enterprise virtualization, storage +1 more +3 moreInsecure temporary file vulnerability in RedHat vsdm 4.9.6.5.5 Medium
- debian shadow, red hat sudo, debian linux +1 more +3 moreThere is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su -...7.8 High
- oneidentity cloud access managerOne Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows CSRF for logout requests.6.5 Medium
- oneidentity cloud access managerOne Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows OTP bypass via vectors involving a...8.1 High
- cryptocatCryptocat before 2.0.42 has Group Chat ECC Private Key Generation Brute Force Weakness7.5 High
- cryptocatCryptocat before 2.0.22 has Nickname User Impersonation5.3 Medium
- cryptocatCryptocat before 2.0.22 has Arbitrary Code Execution on Firefox Conversation Overview9.8 Critical
- cryptocatCryptocat before 2.0.22 has Multiparty Encryption Scheme Information Disclosure7.5 High
- cryptocatCryptocat before 2.0.22: Cryptocat.random() Function Array Key has Entropy Weakness9.8 Critical
- sudo project sudoSudo through 1.8.29 allows local users to escalate to root if they have write access to file...7.0 High
- cryptocatCryptocat strophe.js before 2.0.22 has information disclosure7.5 High
- cryptocat project cryptocatCryptocat before 2.0.22 Chrome Extension 'img/keygen.gif' has Information Disclosure7.5 High
- cryptocat project cryptocatCryptocat before 2.0.22 has weak encryption in the Socialist Millionnaire Protocol7.5 High
- debian linux, linux kernel, broadcom fabric operating system +15 more +17 moreAn issue was discovered in drivers/media/platform/vivid in the Linux kernel through 5.3.8. It is...7.0 High
- cryptocat project cryptocatCryptocat before 2.0.22 has Remote Denial of Service via username7.5 High
- cryptocat project cryptocatCryptocat before 2.0.22 Link Markup Decorator HTML Handling Weakness5.3 Medium
- cryptocat project cryptocatCryptocat before 2.0.22 strophe.js Math.random() Random Number Generator Weakness9.1 Critical
- 360 security technology, inc. safe router, 360 safe router p0 firmware, safe router p1 firmware +3 more +5 moreA command injection vulnerability exists when the authorized user passes crafted parameter to...8.8 High
- cryptocat project cryptocatCryptocat before 2.0.22 has Remote Script Injection due to improperly sanitizing user input9.8 Critical
- sap hana databaseSAP HANA Database, versions 1.0, 2.0, allows an unauthorized attacker to send a malformed...7.5 High
- linux kernelAn issue was discovered in the Linux kernel 4.4.x before 4.4.195. There is a NULL pointer...7.5 High
- jboss aerogear, redhat jboss aerogear +1 moreJBoss AeroGear has reflected XSS via the password field6.1 Medium
- redhat update infrastructure, rhui +1 moreRHUI (Red Hat Update Infrastructure) 2.1.3 has world readable PKI entitlement certificates5.5 Medium
- [unknown] cloudformsCloudForms stores user passwords in recoverable format5.5 Medium
- berlios slim, debian linux +1 moreslim has NULL pointer dereference when using crypt() method from glibc 2.177.5 High
- apple ios, iphone os +1 moreA memory corruption issue was addressed with improved state management. This issue is fixed in...8.8 High
- apple ios, iphone os +1 moreA buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS...8.8 High
- apple icloud, icloud for windows, ios +7 more +9 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...8.8 High
- apple icloud, icloud for windows, ios +8 more +10 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...8.8 High
- apple icloud, icloud for windows, ios +7 more +9 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...8.8 High
- apple icloud, icloud for windows, ios +11 more +13 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...8.8 High
- apple icloud, icloud for windows, ios +10 more +12 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...8.8 High
- apple icloud, icloud for windows, ios +7 more +9 moreA logic issue was addressed with improved state management. This issue is fixed in iOS 13.2 and...6.1 Medium
- apple icloud, icloud for windows, ios +8 more +10 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...8.8 High
- Show moreLoading…