CVEs published in November 2019
1,672 vulnerabilities, 196 critical, 11 exploited.
- [unknown] 389-ds-base, debian linux, fedoraproject 389 directory server +1 more +3 moreA flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission...6.5 Medium
- redhat tuned, fedoraproject fedora +1 moretuned before 2.x allows local users to kill running processes due to insecure permissions with...5.5 Medium
- [unknown] mod auth openidcmod_auth_openidc before version 2.4.0.1 is vulnerable to a None5.8 Medium
- atlassian bamboo, bitbucket, bitbucket server +8 more +10 moreThe Atlassian Troubleshooting and Support Tools plugin prior to version 1.17.2 allows an...4.3 Medium
- apple icloud, icloud for windows, ios +10 more +12 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...8.8 High
- apple ios, ipados, itunes +5 more +7 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...8.8 High
- linux kernel, ubuntu linux kernel, canonical ubuntu linux +2 moreReference counting error in overlayfs/shiftfs error path when used in conjuction with aufs7.1 High
- gri project gri, debian linux +1 moregri before 2.12.18 generates temporary files in an insecure way.9.8 Critical
- getfiregpg firegpgFireGPG before 0.6 handle user?s passphrase and decrypted cleartext insecurely by writing pre...7.5 High
- jon, redhat jboss operations network +1 moreIn JON 2.1.x before 2.1.2 SP1, users can obtain unauthorized security information about private...6.5 Medium
- matrix synapseImproper Verification of Cryptographic Signature in matrix-synapse9.8 Critical
- fryskfrysk packages through 2008-08-05 as shipped in Red Hat Enterprise Linux 5 are built with an...7.8 High
- gambas project gambas, debian linux, gambas3 +2 moreGambas before 3.4.0 allows remote attackers to move or manipulate directory contents or perform...7.5 High
- cisco clamav, debian linux +1 moreclamav 0.91.2 suffers from a floating point exception when using ScanOLE2.9.8 Critical
- monkeyThe web server Monkeyd produces a world-readable log (/var/log/monkeyd/master.log) on gentoo.7.5 High
- viewvc, debian linux +1 moreviewvc 1.0.3 allows improper access control to files in a repository when using the "forbidden"...7.5 High
- twikiTWiki before 5.1.4 allows remote attackers to execute arbitrary shell commands by sending a...9.8 Critical
- debian lintian, canonical ubuntu linux, debian linux +2 moreLintian before 2.5.12 allows remote attackers to gather information about the "host" system using...6.3 Medium
- mandriva mondoMondo 2.24 has insecure handling of temporary files.9.1 Critical
- linux kernel, linux-2.6 +1 moreIn Linux 2.6 before 2.6.23, the TRACE_IRQS_ON function in iret_exc calls a C function without...5.5 Medium
- strapiStrapi allows unauthenticated attacker to reset admin password without valid reset token9.8 Critical
- sir gnuboardGNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via...6.1 Medium
- maharaCross-site Scripting (XSS) in Mahara before 1.5.9 and 1.6.x before 1.6.4 allows remote attackers...6.1 Medium
- eximioussoft logo designerEximious Logo Designer 3.82 has a User Mode Write AV starting at ExiVectorRender!StrokeText_Blend...5.5 Medium
- eximioussoft logo designerEximious Logo Designer 3.82 has a User Mode Write AV starting at ExiCustomPathLib...5.5 Medium
- eximioussoft logo designerEximious Logo Designer 3.82 has Heap Corruption starting at ntdll!RtlpNtMakeTemporaryKey...5.5 Medium
- ldap-git-backup, debian linux, ldap git backup project git backup +2 moreldap-git-backup before 1.0.4 exposes password hashes due to incorrect directory permissions.5.5 Medium
- syscpsyscp 1.4.2.1 allows attackers to add arbitrary paths via the documentroot of a domain by...9.8 Critical
- debian linux, shibboleth service provider +1 moreThe keygen.sh script in Shibboleth SP 2.0 (located in /usr/local/etc/shibboleth by default) uses...7.5 High
- gourceGource through 0.26 logs to a predictable file name (/tmp/gource-$UID.tmp), enabling attackers to...6.5 Medium
- gitolitegitolite before 1.4.1 does not filter src/ or hooks/ from path names.9.8 Critical
- zte mf910s, mf910s firmware +1 moreSecurity researcher Shen Ying from the Sec Consult Security Lab reported an information...6.2 Medium
- hpe nimbleosPotential security vulnerabilities have been identified with HPE Nimble Storage systems in multi...9.8 Critical
- dell idrac7 firmware, idrac8 firmware, idrac9 firmware +1 more +3 moreDell EMC iDRAC8 versions prior to 2.70.70.70 and iDRAC9 versions prior to 3.36.36.36 contain an...5.0 Medium
- google blink, chrome +1 moreAn issue exists in WebKit in Google Chrome before Blink M12. when clearing lists in...6.5 Medium
- tahoe-lafs, debian linux +1 moreTahoe-LAFS fails to ensure integrity7.4 High
- google blink, chrome on 64-bit platforms +1 moreA wrong type is used for a return value from strlen in WebKit in Google Chrome before Blink M12...9.8 Critical
- gnu fribidi, debian linux +1 moreA buffer overflow in the fribidi_get_par_embedding_levels_ex() function in lib/fribidi-bidi.c of...7.8 High
- linux kernel, linux-2.6 +1 moreA vulnerability exists in kernel/time/clocksource.c in the Linux kernel before 2.6.33 where on...7.5 High
- google blink, chrome +1 moreUse after free vulnerability in documentloader in WebKit in Google Chrome before Blink M13 in...6.5 Medium
- google blink, chrome +1 moreIncorrect handling of timer information in Timer.cpp in WebKit in Google Chrome before Blink M13.6.5 Medium
- popojicmsPopojiCMS 2.0.1 allows refer= Open Redirection.6.1 Medium
- popojicmspo-admin/route.php?mod=post&act=edit in PopojiCMS 2.0.1 allows post[1][content]= stored XSS.6.1 Medium
- linux kernelA memory leak in the ql_alloc_large_buffers() function in drivers/net/ethernet/qlogic/qla3xxx.c...5.5 Medium
- linux kernelTwo memory leaks in the sja1105_static_config_upload() function in drivers/net/dsa/sja1105...7.5 High
- linux kernel, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreA memory leak in the ccp_run_sha_cmd() function in drivers/crypto/ccp/ccp-ops.c in the Linux...5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreA memory leak in the af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c in...4.6 Medium
- linux kernel, canonical ubuntu linux +1 moreA memory leak in the komeda_wb_connector_add() function in drivers/gpu/drm/arm/display/komeda...7.5 High
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreA memory leak in the sof_set_get_large_ctrl_data() function in sound/soc/sof/ipc.c in the Linux...5.5 Medium
- linux kernelA memory leak in the sof_dfsentry_write() function in sound/soc/sof/debug.c in the Linux kernel...7.5 High
- Show moreLoading…