CVEs published in November 2019
1,672 vulnerabilities, 196 critical, 11 exploited.
- getigniteup igniteupincludes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows...7.5 High
- keystone, debian linux +1 moreOpenStack Keystone: extremely long passwords can crash Keystone by exhausting stack space7.5 High
- systematic iris webformsSystematic IRIS WebForms 5.4 and its functionalities can be accessed and used without any form of...9.8 Critical
- systematicinc iris standards managementSystematic IRIS Standards Management (ISM) v2.1 SP1 89 is vulnerable to unauthenticated reflected...6.1 Medium
- systematic iris webformsSystematic IRIS WebForms 5.4 is vulnerable to directory traversal. By manipulating variables that...5.3 Medium
- upredsun file sharing wizardFile Sharing Wizard version 1.5.0 build 2008 is affected by a Structured Exception Handler based...9.8 Critical
- ibm spectrum protect plusIBM Spectrum Protect Plus 10.1.0 through 10.1.4 uses insecure file permissions on restored files...5.1 Medium
- pediapress mwlibmwlib 0.13 through 0.13.4 has a denial of service vulnerability when parsing #iferror magic...7.5 High
- atop, debian linux +1 moreatop: symlink attack possible due to insecure tempfile handling7.8 High
- json-jwt project json-jwt, debian linux +1 moreJSON-jwt Gem lacked element count during splitting of JWE string7.5 High
- istioIstio vulnerable to denial of service7.5 High
- status statusnetstatusnet before 0.9.9 has XSS6.1 Medium
- mitel micollab, mivoice business express +1 moreA vulnerability in the web conference chat component of MiCollab, versions 7.3 PR6 (7.3.0.601)...5.3 Medium
- elggElgg through 1.7.10 has a SQL injection vulnerability9.8 Critical
- elggElgg Reflected XSS Vulnerability6.1 Medium
- gdk-pixbuf, debian linux, redhat enterprise linux +2 moregdk-pixbuf through 2.31.1 has GIF loader buffer overflow when initializing decompression tables...9.8 Critical
- hornetq rest rest, redhat hornetq +1 moreHornetQ REST vulnerable to Improper Restriction of XML External Entity Reference6.5 Medium
- helmHelm Unsafe Link Following9.8 Critical
- clusterlabs pacemakerPacemaker before 1.1.6 configure script creates temporary files insecurely5.5 Medium
- twistedPython Twisted trustRoot is not respected in HTTP client7.5 High
- wso2 identity serverWSO2 IS as Key Manager 5.7.0 allows unauthenticated reflected XSS in the dashboard user profile.6.1 Medium
- wso2 identity serverWSO2 IS as Key Manager 5.7.0 allows stored XSS in download-userinfo.jag because Content-Type is...6.1 Medium
- psutil project psutilDouble Free in psutil7.5 High
- fudforumFUDForum 3.0.9 is vulnerable to Stored XSS via the User-Agent HTTP header. This may result in...9.0 Critical
qemuDebianqemu - security updateNo score- [unknown] dpdk, dpdk data plane development kit, fedoraproject fedora +3 more +5 moreA flaw was found in all dpdk version 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before...7.5 High
- debian linux, intel xeon 3104 firmware, xeon 3106 firmware +56 more +58 moreImproper conditions check in the voltage modulation interface for some Intel(R) Xeon(R) Scalable...6.0 Medium
- canonical ubuntu linux, debian linux, fedoraproject fedora +157 more +159 moreTSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an...6.5 Medium
- intel graphics driver, canonical ubuntu linux, intel atom x5-e3930 firmware +354 more +356 moreInsufficient access control in a subsystem for Intel (R) processor graphics in 6th, 7th, 8th and...7.8 High
- canonical ubuntu linux, intel atom x5-a3930 firmware, atom x5-a3940 firmware +145 more +147 moreInsufficient access control in subsystem for Intel (R) processor graphics in 6th, 7th, 8th and...5.5 Medium
- canonical ubuntu linux, debian linux, f5 big-ip access policy manager +775 more +777 moreImproper invalidation for page table updates by a virtual guest operating system for multiple...6.5 Medium
- gnu mailutilsmaidag in GNU Mailutils before 3.8 is installed setuid and allows local privilege escalation in...7.8 High
- imagemagickImageMagick before 7.0.9-0 allows remote attackers to cause a denial of service because...6.5 Medium
- 10up safe svgA Denial Of Service vulnerability exists in the safe-svg (aka Safe SVG) plugin through 1.9.4 for...7.5 High
- 10up safe svgA Denial Of Service vulnerability exists in the safe-svg (aka Safe SVG) plugin through 1.9.4 for...7.5 High
- drupal svg sanitizerA Denial Of Service vulnerability exists in the SVG Sanitizer module through 8.x-1.0-alpha1 for...7.5 High
- svg-sanitizer project svg-sanitizerXSS in enshrined/svg-sanitize due to mishandled script and data values in attributes7.5 High
- dlink dir-600 b1 firmware, dir-615 j1 firmware, dir-645 a1 firmware +4 more +6 moreCertain D-Link devices have a hardcoded Alphanetworks user account with TELNET access because of ...9.8 Critical
- tnef project tnef, canonical ubuntu linux, debian linux +1 more +3 moreIn tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorized_keys file...5.5 Medium
- envoyproxy envoy, istio +1 moreEnvoy before 1.12.1 allows a remote denial of service because of resource loops, as demonstrated...7.5 High
- chartkick chartkick.jsPrototype Pollution in chartkick7.3 High
bcm20702a1-firmwareopenSUSERecommended update for bcm20702a1-firmwareNo score- google chromeInappropriate implementation in iframe in Google Chrome prior to 77.0.3865.75 allowed a remote...9.6 Critical
- google chromeUse-after-free in accessibility in Google Chrome prior to 77.0.3865.75 allowed a remote attacker...6.5 Medium
- google chromeUse-after-free in content delivery manager in Google Chrome prior to 78.0.3904.70 allowed a...6.5 Medium
- google chromeInsufficient policy enforcement in reader mode in Google Chrome prior to 77.0.3865.75 allowed a...8.8 High
- google chromeInsufficient validation of untrusted input in navigation in Google Chrome prior to 77.0.3865.75...4.3 Medium
- google chromeIncorrect security UI in Omnibox in Google Chrome prior to 77.0.3865.75 allowed a remote attacker...6.5 Medium
- patriotmemory viper rgb firmwareThe MsIo64.sys and MsIo32.sys drivers in Patriot Viper RGB before 1.1 allow local users ...7.1 High
- wolfsslIn wolfSSL 4.1.0 through 4.2.0c, there are missing sanity checks of memory accesses in parsing...7.5 High
- Show moreLoading…