CVEs published in November 2019
1,672 vulnerabilities, 196 critical, 11 exploited.
- linux kernel, canonical ubuntu linux +1 moreA memory leak in the dwc3_pci_probe() function in drivers/usb/dwc3/dwc3-pci.c in the Linux kernel...7.5 High
- linux kernelAn issue was discovered in the Linux kernel through 5.3.9. There is a use-after-free when...9.8 Critical
- eyecomms eyecmsAn Insecure Direct Object Reference (IDOR) vulnerability in eyecomms eyeCMS through 2019-10-15...4.3 Medium
- eyecomms eyecmsA mass assignment vulnerability in eyecomms eyeCMS through 2019-10-15 allows any candidate to...8.8 High
- portainerPortainer before 1.22.1 has Incorrect Access Control (issue 4 of 4).8.8 High
- portainerPortainer before 1.22.1 has XSS (issue 2 of 2).5.4 Medium
- portainerPortainer before 1.22.1 allows Directory Traversal.7.5 High
- portainerPortainer before 1.22.1 has Incorrect Access Control (issue 1 of 4).9.9 Critical
- intelbras wrn 150 firmwareAn issue was discovered on Intelbras WRN 150 1.0.17 devices. There is stored XSS in the Service...6.1 Medium
- portainerPortainer before 1.22.1 has Incorrect Access Control (issue 2 of 4).6.5 Medium
- portainerPortainer before 1.22.1 has XSS (issue 1 of 2).5.4 Medium
- hp 2dr21d firmware, d3q15a firmware, d3q15b firmware +38 more +40 moreFor the printers listed a maliciously crafted print file might cause certain HP Inkjet printers...5.2 Medium
- phpoffice phpspreadsheetXXE in PHPSpreadsheet due to incomplete fix for previous encoding issue8.8 High
- linux kernel, broadcom fabric operating system, netapp active iq unified manager +14 more +16 moreAn issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11. There is...9.8 Critical
libcacardAlmaLinux,libcacard-develAlmaLinux +1 morelibcacard bug fix and enhancement updateNo score- djvulibre project djvulibre, canonical ubuntu linux, debian linux +2 more +4 moreDjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at...7.5 High
- atlassian jira service desk data center, jira service desk server, jira service desk +2 moreThe Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data...7.5 High
- atlassian jira service desk data center, jira service desk server, jira service desk +2 moreThe Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data...5.3 Medium
- google android, canonical ubuntu linux +1 moreIn generate_jsimd_ycc_rgb_convert_neon of jsimd_arm64_neon.S, there is a possible out of bounds...7.8 High
- samsung galaxy note 2 firmware, galaxy s3 firmware, galaxy s8 plus firmware +2 moreSamsung Galaxy S8 plus (Android version: 8.0.0, Build Number: R16NW.G955USQU5CRG3, Baseband...6.5 Medium
- samsung galaxy note 2 firmware, galaxy s3 firmware, galaxy s8 plus firmware +2 moreSamsung Galaxy S8 plus (Android version: 8.0.0, Build Number: R16NW.G955USQU5CRG3, Baseband...6.5 Medium
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus 5.x through 5803 has CSRF on the users' profile information...8.8 High
- wpmarketplace project wpmarketplaceThe ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplace plugin 2.4.0 for...8.8 High
- wpmarketplace project wpmarketplaceDirectory traversal vulnerability in the ajaxinit function in wpmarketplace/libs/cart.php in the...4.3 Medium
- apache cxf, oracle commerce guided search, enterprise manager base platform +2 more +4 morePotential session hijack in Apache CXF9.8 Critical
- google blink, chrome +1 moreA stale layout root is set as an input element in WebKit in Google Chrome before Blink M13 when a...6.5 Medium
- apache cxf, oracle commerce guided search, flexcube private banking +1 more +3 morePotential DOS attack due to unrestricted attachment count in messages6.5 Medium
- eclipse jetty, debian linux +1 moreJSP Dump and Session Dump Servlet XSS in jetty before 6.1.22.6.1 Medium
- eclipse jetty, debian linux +1 moreDump Servlet information leak in jetty before 6.1.22.7.5 High
- leadtoolsAn exploitable integer overflow vulnerability exists in the BMP header parsing functionality of...8.8 High
- leadtoolsAn exploitable heap overflow vulnerability exists in the JPEG2000 parsing functionality of...8.8 High
- leadtoolsAn exploitable integer underflow vulnerability exists in the CMP-parsing functionality of...8.8 High
- leadtoolsAn exploitable heap out-of-bounds write vulnerability exists in the TIF-parsing functionality of...8.8 High
- google chrome os, linux kernel +1 more** DISPUTED ** In kernel/compat.c in the Linux kernel before 3.17, as used in Google Chrome OS...9.1 Critical
- mailpoet newslettersAn issue was discovered in the MailPoet Newsletters (aka wysija-newsletters) plugin before 2.8.2...5.3 Medium
- konversationkonversation before 1.2.3 allows attackers to cause a denial of service.7.5 High
- google blinkAn Integer Overflow exists in WebKit in Google Chrome before Blink M11 in the macOS WebCore:...7.5 High
- mortbay jetty, debian linux +1 moreWebApp JSP Snoop page XSS in jetty though 6.1.21.6.1 Medium
- mortbay jettyCookie Dump Servlet stored XSS vulnerability in jetty though 6.1.20.6.1 Medium
- c4g basic laboratory information system, gatech computing for good\'s basic laboratory information system +1 moreC4G BLIS Improper Access Control10.0 Critical
- c4g basic laboratory information system, gatech computing for good\'s basic laboratory information system +1 moreC4G BLIS Improper Access Control5.3 Medium
- rapid7 metasploit, metasploit pro +1 moreMAGICK3.3 Low
- c4g basic laboratory information system, gatech computing for good\'s basic laboratory information system +1 moreC4G BLIS Improper Access Control10.0 Critical
- redhat pagure, fedoraproject fedora, redhat enterprise linux +2 morePagure: XSS possible in file attachment endpoint6.1 Medium
- mysql-gui-tools, fedoraproject fedora +1 moreMySQL-GUI-tools (mysql-administrator) leaks passwords into process list after with launch of...5.5 Medium
- nicehash minerA Username Enumeration via Error Message issue was discovered in NiceHash Miner before 2.0.3.0...3.1 Low
- nicehash minerAn issue was discovered in NiceHash Miner before 2.0.3.0. Missing Authorization allows an...3.7 Low
- nicehash minerAn issue was discovered in NiceHash Miner before 2.0.3.0. A missing rate limit while adding a...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +44 more +46 moreMemory corruption while accessing the memory as payload size is not validated before access in...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +44 more +46 morePossible Integer overflow because of subtracting two integers without checking if the result...9.8 Critical
- Show moreLoading…