CVEs published in November 2019
1,672 vulnerabilities, 196 critical, 11 exploited.
- linux kernel, canonical ubuntu linux +1 moreIn the Linux kernel through 5.3.8, f->fmt.sdr.reserved is uninitialized in...5.5 Medium
- salesagility suitecrmSuiteCRM 7.10.x versions prior to 7.10.21 and 7.11.x versions prior to 7.11.9 allow SQL Injection.9.8 Critical
- sillycycle xlockmorexlockmore 5.13 allows potential xlock bypass when FVWM switches to the same virtual desktop as a...9.8 Critical
- sillycycle xlockmorexlockmore 5.13 and 5.22 segfaults when using libpam-opensc and returns the underlying xsession....9.8 Critical
- joomla joomla\!An issue was discovered in Joomla! before 3.9.13. A missing token check in com_template causes a...8.8 High
- joomla joomla\!An issue was discovered in Joomla! before 3.9.13. A missing access check in the phputf8 mapping...5.3 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition XSS Vulnerability5.4 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento Cross-Site Scripting via Attribute Set Name5.4 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition XML Injection9.8 Critical
- adobe systems incorporated magento 2, magento +1 moreMagento Cross-Site Scripting via admin panel5.4 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition SSRF vulnerability7.2 High
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition RCE Vulnerability8.8 High
- magento, adobe systems incorporated magento 1 +1 moreMagento XSS Vulnerability4.8 Medium
- simplesamlphp, xmlseclibs project xmlseclibs, debian linux +2 moreSignature validation bypass in XmlSecLibs8.8 High
- magento, adobe systems incorporated magento 1 +1 moreWithdrawn Advisory: Magento 2 Community Edition XSS Vulnerability4.8 Medium
- magento, adobe systems incorporated magento 1 +1 moreWithdrawn Advisory: Magento 2 Community Edition RCE Vulnerability7.2 High
- magento, adobe systems incorporated magento 1 +1 moreMagento Remote code execution through support/output path modification7.2 High
- magento, adobe systems incorporated magento 1 +1 moreMagento Remote code execution through catalog attribute sets7.2 High
- magento, adobe systems incorporated magento 1 & 2 +1 moreMagento 2 Community Edition RCE Vulnerability6.6 Medium
firefoxUbuntufirefox regressionsNo score- adobe systems incorporated magento 2, magento +1 moreComposer JavaScript injection possible via html comments6.1 Medium
- magento, adobe systems incorporated magento 1 +1 moreMagento prior to 1.9.4.3 and prior to 1.14.4.3 included a user's CSRF token in the URL of a GET...7.5 High
- adobe systems incorporated magento 2, magento +1 moreMagento remote code execution vulnerability8.8 High
- adobe systems incorporated magento 2, magento +1 moreMagento Cross-site Scripting (XSS)6.1 Medium
- magento, adobe systems incorporated magento 1 & 2 +1 moreMagento 2 Community Edition XSS Vulnerability5.4 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento Server-Side Request Forgery (SSRF)7.2 High
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition RCE Vulnerability8.8 High
- adobe systems incorporated magento 2, magento +1 moreMagento Broken authentication and session managememt9.8 Critical
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition XSS Vulnerability4.8 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition XSS Vulnerability5.4 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition XSS Vulnerability5.4 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition RCE Vulnerability9.8 Critical
- adobe systems incorporated magento 2, magento +1 moreMagento Injection vulnerability via email templates6.5 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition XSS Vulnerability5.4 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition RCE Vulnerability7.2 High
- adobe systems incorporated magento 2, magento +1 moreMagento Unrestricted file upload vulnerability4.9 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition XSS Vulnerability5.4 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition XSS Vulnerability5.4 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition RCE Vulnerability8.8 High
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition Insecure Component9.8 Critical
- adobe systems incorporated magento 2, magento +1 moreRemote code execution via vulnerable Symphony dependecy injection9.8 Critical
- adobe systems incorporated magento 2, magento +1 moreMagento SQL injection via marketing account with access to email templates variables8.8 High
- adobe systems incorporated magento 2, magento +1 moreBypass of sitemp access restrictions6.5 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition XSS Vulnerability5.4 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento SQL injection vulnerability8.8 High
- adobe systems incorporated magento 2, magento +1 moreMagento Cross-Site Scripting via Signifyd Guarantee Option Translation Override5.4 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento Cross-Site Scripting via store name5.4 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition SQLi Vulnerability8.8 High
- adobe systems incorporated magento 2, magento +1 moreInformation disclosure through processing of external XML entities4.9 Medium
- adobe systems incorporated magento 1, magento +1 moreA remote code execution vulnerability exists in Magento 1 prior to 1.9.x and 1.14.x. An...7.2 High
- Show moreLoading…