CVEs published in November 2019
1,672 vulnerabilities, 196 critical, 11 exploited.
- apache qpid-cppqpid-cpp 1.0 crashes when a large message is sent and the Digest-MD5 mechanism with a security...6.5 Medium
- dtc-xen project dtc-xendtc-xen 0.5.x before 0.5.4 suffers from a race condition where an attacker could potentially get...8.1 High
- liboping, debian linux +1 moreliboping 1.3.2 allows users reading arbitrary files upon the local system.3.3 Low
- redhat enterprise virtualization managerIn RHEV-M VDC 2.2.0, it was found that the SSL certificate was not verified when using the client...3.1 Low
- mantisbtMantisBT 1.2.x before 1.2.2 insecurely handles attachments and MIME types. Arbitrary inline...6.1 Medium
- alsa-project alsa, alsa-driver +1 morealsa-utils 1.0.19 and later versions allows local users to overwrite arbitrary files via a...5.5 Medium
- nvidia geforce experienceNVIDIA GeForce Experience, all versions prior to 3.20.1, contains a vulnerability when GameStream...7.8 High
- nvidia virtual gpu manager, vgpu display driver +1 moreNVIDIA Virtual GPU Manager, all versions, contains a vulnerability in the vGPU plugin, in which...4.4 Medium
- nvidia virtual gpu manager, vgpu display driver +1 moreNVIDIA Virtual GPU Manager, all versions, contains a vulnerability in which it may grant a guest...7.1 High
- nvidia virtual gpu manager, vgpu display driver +1 moreNVIDIA Virtual GPU Manager, all versions, contains a vulnerability in which the provision of an...5.5 Medium
- nvidia gpu display driver, gpu driver +1 moreNVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in NVIDIA Control Panel...6.5 Medium
- nvidia gpu display driver, gpu driver +1 moreNVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode...5.5 Medium
- nvidia gpu display driver, gpu driver +1 moreNVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode...7.8 High
- ibm cognos analyticsIBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability...6.1 Medium
- ibm qradar, qradar security information and event manager +1 moreIBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting. This vulnerability...6.1 Medium
- ibm qradar advisor, qradar advisor with watson +1 moreIBM QRadar Advisor 1.0.0 through 2.4.0 uses incomplete blacklisting for input validation which...4.3 Medium
- ibm qradar, qradar security information and event manager +1 moreIBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to incorrect authorization in some components...4.3 Medium
- ibm qradar, qradar security information and event manager +1 moreIBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- ibm qradar, qradar security information and event manager +1 moreIBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- ibm iIBM i 7.2, 7.3, and 7.4 for i is vulnerable to cross-site scripting. This vulnerability allows...6.1 Medium
- ibm cognos controllerIBM Cognos Controller stores sensitive information in URL parameters. This may lead to...3.7 Low
- ibm cognos controllerIBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, and 10.4.1 could allow an authenticated user to...4.3 Medium
- ibm cognos analyticsIBM Cognos Analytics 11.0 and 11.1 could reveal sensitive information to an authenticated user...4.3 Medium
- ibm cognos analyticsIBM Cognos Analytics 11.0 and 11.1 is vulnerable to a XML External Entity Injection (XXE) attack...8.3 High
- nvidia gpu display driver, gpu driver +1 moreNVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode...7.8 High
- nvidia gpu display driver, gpu driver +1 moreNVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode...7.8 High
- nvidia geforce experienceNVIDIA GeForce Experience, all versions prior to 3.20.1, contains a vulnerability in the...7.8 High
- medtronic valleylab ft10 energy platform (vlft10gen), valleylab ls10 energy platform (vlls10gen—not available in the united states), valleylab ft10 energy platform firmware +1 more +3 moreMedtronic Valleylab FT10 and LS10 Improper Authentication4.8 Medium
- medtronic valleylab ft10 energy platform (vlft10gen), valleylab ls10 energy platform (vlls10gen—not available in the united states), valleylab ft10 energy platform firmware +1 more +3 moreMedtronic Valleylab FT10 and LS10 Protection Mechanism Failure4.6 Medium
- medtronic valleylab exchange client, valleylab ft10 energy platform (vlft10gen), valleylab fx8 energy platform (vlfx8gen) +2 more +4 moreMedtronic Valleylab FT10 and FX8 Reversible One-way Hash7.0 High
- medtronic valleylab exchange client, valleylab ft10 energy platform (vlft10gen), valleylab fx8 energy platform (vlfx8gen) +2 more +4 moreMedtronic Valleylab FT10 and FX8 Use of Hard-coded Credentials5.8 Medium
- zte corporation zxupn-9000e, zte zxupn-9000e firmware +1 moreThe 9000EV5.0R1B12 version, and all earlier versions of ZTE product ZXUPN-9000E are impacted by...8.8 High
- zte corporation zxupn-9000e, zte zxupn-9000e firmware +1 moreThe 9000EV5.0R1B12 version, and all earlier versions of ZTE product ZXUPN-9000E are impacted by...8.8 High
- apache arrowMissing Initialization of Resource in Apache Arrow7.5 High
- apache arrowMissing Initialization of Resource in Apache Arrow7.5 High
- admincolumns admin columnsA CSV injection in the codepress-admin-columns (aka Admin Columns) plugin 3.4.6 for WordPress...8.8 High
- tmaxsoft jeusJEUS 7 Fix#0~5 and JEUS 8Fix#0~1 versions contains a directory traversal vulnerability caused by...7.2 High
- energycapEscalation of privileges in EnergyCAP 7 through 7.5.6 allows an attacker to access data. If an...9.8 Critical
@cubejs-backend/api-gatewaynpmDefault Express middleware security check is ignored in productionNo score- philips tasy emr, tasy webportal +1 moreIn Tasy EMR, Tasy WebPortal Versions 3.02.1757 and prior, there is an information exposure...5.3 Medium
- broadcom brocade sannav, brocade sannav +1 moreA vulnerability, in The ReportsTrustManager class of Brocade SANnav versions before v2.0, could...7.4 High
- broadcom brocade sannav, brocade sannav +1 moreThe authentication mechanism, in Brocade SANnav versions before v2.0, logs plaintext account...5.5 Medium
- broadcom brocade sannav, brocade sannav +1 moreA vulnerability, in Brocade SANnav versions before v2.0, could allow remote attackers to brute...8.8 High
- broadcom brocade sannav, brocade sannav +1 moreBrocade SANnav versions before v2.0, logs plain text database connection password while...5.5 Medium
- broadcom brocade sannav, brocade sannav +1 morePassword-based encryption (PBE) algorithm, of Brocade SANnav versions before v2.0, has a weakness...7.5 High
- broadcom brocade sannav, brocade sannav +1 moreBrocade SANnav versions before v2.0 use a hard-coded password, which could allow local...7.8 High
- mod ruid2 project ruid2, libapache2-mod-ruid2 +1 moremod_ruid2 before 0.9.8 improperly handles file descriptors which allows remote attackers to...7.5 High
- hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 moreThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks6.5 Medium
- [unknown] openstack-mistralAn information-exposure vulnerability was discovered where openstack-mistral's undercloud log...5.9 Medium
- [unknown] syndesis, redhat fuse +1 moreIt was found that the Syndesis configuration for Cross-Origin Resource Sharing was set to allow...7.4 High
- Show moreLoading…