CVEs published in November 2019
1,672 vulnerabilities, 196 critical, 11 exploited.
- rails, debian linux +1 moreThe encrypt/decrypt functions in Ruby on Rails 2.3 are vulnerable to padding oracle attacks.6.5 Medium
- intercomThe Intercom plugin through 1.2.1 for WordPress leaks a Slack Access Token in source code. An...7.5 High
- slack wp slacksyncWP SlackSync plugin through 1.8.5 for WordPress leaks a Slack Access Token in source code. An...7.5 High
- slack-chat project slack-chatSlack-Chat through 1.5.5 leaks a Slack Access Token in source code. An attacker can obtain a lot...7.5 High
- lenovo thinkpad t460p, 130-14ikb firmware, 130-15ikb firmware +391 more +393 moreThinkPad T460p and T470p BIOS Tamper Mechanism9.8 Critical
- lenovo thinkpad, 130-14ikb firmware, 130-15ikb firmware +390 more +392 moreA potential vulnerability in the SMI callback function in some Lenovo ThinkPad models may allow...6.4 Medium
- lenovo thinkpad, 130-14ikb firmware, 130-15ikb firmware +390 more +392 moreA potential vulnerability in some Lenovo ThinkPads may allow an attacker to execute arbitrary...6.4 Medium
- mailscannerThe update{_bad,}_phishing_sites scripts in mailscanner 4.79.11-2 downloads files and trusts them...5.5 Medium
- mailscannermailscanner before 4.79.11-2.1 might allow local users to overwrite arbitrary files via a symlink...4.7 Medium
- nvidia geforce experience, windows gpu display driver, gpu driver +2 moreNVIDIA GeForce Experience (prior to 3.20.1) and Windows GPU Display Driver (all versions)...6.5 Medium
- alien-arena, debian linux, fedoraproject fedora +2 moreIt is possible to cause a DoS condition by causing the server to crash in alien-arena 7.33 by...6.5 Medium
- google blink, chrome +1 moreA double-free vulnerability exists in WebKit in Google Chrome before Blink M12 in the WebCore:...7.5 High
- libpoe-component-irc-perl, debian linux, fedoraproject fedora +2 morelibpoe-component-irc-perl before v6.32 does not remove carriage returns and line feeds. This can...9.8 Critical
- tibco ebx add-onsTIBCO EBX Add-on For Digital Asset Manager Cross-Site Scripting Vulnerabilities7.3 High
- tibco ebx add-onsTIBCO EBX Add-on For Data Exchange Cross-Site Scripting Vulnerabilities7.3 High
- tibco ebxTIBCO EBX Exposes Multiple Cross-Site Scripting Vulnerabilities8.8 High
- microsoft officeA security feature bypass vulnerability exists in Microsoft Office software by not enforcing...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +11 more +13 moreA remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type...8.8 High
- microsoft office, office 365 proplus +1 moreA security feature bypass vulnerability exists in the way that Office Click-to-Run (C2R)...9.8 Critical
- microsoft excel, office, office 365 proplus +2 moreA remote code execution vulnerability exists in Microsoft Excel software when the software fails...7.8 High
- microsoft office online serverA spoofing vulnerability exists when Office Online does not validate origin in cross-origin...5.4 Medium
- microsoft excel, excel services on microsoft sharepoint server 2010 service pack 2, excel services +5 more +7 moreAn information disclosure vulnerability exists when Microsoft Excel improperly discloses the...5.5 Medium
- microsoft office online serverA spoofing vulnerability exists when Office Online does not validate origin in cross-origin...5.4 Medium
- microsoft sharepoint server, sharepoint enterprise server, sharepoint foundation +2 moreAn information disclosure vulnerability exists in Microsoft SharePoint when an attacker uploads a...6.5 Medium
- microsoft sharepoint serverA security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An...5.5 Medium
- microsoft windows, windows server, windows 7 +1 more +3 moreA remote code execution vulnerability exists when the Windows font library improperly handles...8.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +6 more +8 moreAn information disclosure vulnerability exists when the win32k component improperly provides...5.5 Medium
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +11 more +13 moreAn information disclosure vulnerability exists when the Windows GDI component improperly...6.5 Medium
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +11 more +13 moreAn elevation of privilege vulnerability exists when the Windows Graphics Component improperly...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +6 more +8 moreAn elevation of privilege vulnerability exists when the Windows Graphics Component improperly...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +6 more +8 moreAn information disclosure vulnerability exists when the win32k component improperly provides...5.5 Medium
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +11 more +13 moreAn elevation of privilege vulnerability exists when the Windows Graphics Component improperly...7.8 High
- microsoft windows, windows server, windows 10 +5 more +7 moreAn elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +11 more +13 moreAn elevation of privilege vulnerability exists when the Windows Graphics Component improperly...7.8 High
- microsoft windows, windows server, windows 7 +4 more +6 moreAn information disclosure vulnerability exists when DirectWrite improperly discloses the contents...6.5 Medium
- microsoft windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems, windows 10 version 1903 for x64-based systems +3 more +5 moreA remote code execution vulnerability exists when Windows Media Foundation improperly parses...7.8 High
- microsoft internet explorer, internet explorer 10, internet explorer 11 +5 more +7 moreA remote code execution vulnerability exists in the way that the scripting engine handles objects...7.5 High
- microsoft edge, chakracore, edge (edgehtml-based) on windows 10 version 1607 for 32-bit systems +15 more +17 moreA remote code execution vulnerability exists in the way that the scripting engine handles objects...7.5 High
- microsoft edge, chakracore, edge (edgehtml-based) on windows 10 version 1809 for 32-bit systems +6 more +8 moreA remote code execution vulnerability exists in the way that the scripting engine handles objects...7.5 High
- microsoft edge, chakracore, edge (edgehtml-based) on windows 10 for 32-bit systems +17 more +19 moreA remote code execution vulnerability exists in the way that the scripting engine handles objects...7.5 High
- microsoft visual studio 2017, visual studio 2019 +1 moreAn elevation of privilege vulnerability exists when Visual Studio fails to properly validate...6.5 Medium
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +11 more +13 moreA security feature bypass vulnerability exists when Windows Netlogon improperly handles a secure...8.1 High
- microsoft windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems, windows 10 version 1903 for x64-based systems +2 more +4 moreAn elevation of privilege vulnerability exists in the way that the StartTileData.dll handles file...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +11 more +13 moreAn elevation of privilege vulnerability exists in the way that the iphlpsvc.dll handles file...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +9 more +11 moreAn elevation of privilege vulnerability exists in the way that the dssvc.dll handles file...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +11 more +13 moreA remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type...8.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +11 more +13 moreAn information vulnerability exists when Windows Modules Installer Service improperly discloses...3.3 Low
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +6 more +8 moreAn elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +6 more +8 moreAn elevation of privilege vulnerability exists due to a race condition in Windows Subsystem for...7.0 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +11 more +13 moreAn elevation of privilege vulnerability exists in Windows Installer because of the way Windows...7.8 High
- Show moreLoading…