CVEs published in November 2019
1,672 vulnerabilities, 196 critical, 11 exploited.
- netgear wnr3500l firmware, wnr3500u firmware +1 moreSymlink Traversal vulnerability in NETGEAR WNR3500U and WNR3500L due to misconfiguration in the...9.8 Critical
- google androidIn createSessionInternal of PackageInstallerService.java, there is a possible permissions bypass....6.7 Medium
- google androidIn tokenize of sqlite3_android.cpp, there is a possible attacker controlled INSERT statement due...7.8 High
- google androidIn WelcomeActivity.java and related files, there is a possible permissions bypass due to a...7.8 High
- google androidIn call of SliceProvider.java, there is a possible permissions bypass due to improper input...7.8 High
- offlineimap, debian linux +1 moreofflineimap before 6.3.2 does not check for SSL server certificate validation when "ssl = yes"...5.9 Medium
- enghouse web chatAn SSRF issue was discovered in Enghouse Web Chat 6.1.300.31. In any POST request, one can...9.8 Critical
- huawei ar120-s firmware, ar1200-s firmware, ar1200 firmware +13 more +15 moreSome Huawei products have a memory leak vulnerability when handling some messages. A remote...6.5 Medium
- huawei ar120-s firmware, ar1200-s firmware, ar1200 firmware +13 more +15 moreThere is an out of bound read vulnerability in some Huawei products. A remote, unauthenticated...7.5 High
- redhat vdsclient, vdsm and vdsclient and vdsclient, redhat enterprise virtualization +1 more +3 morevdsm and vdsclient does not validate certficate hostname from another vdsm which could facilitate...5.9 Medium
- huawei manageoneGauss100 OLTP database in ManageOne with versions of 6.5.0 have an out-of-bounds read...7.5 High
- letodms, debian linux +1 moreletodms 3.3.6 has CSRF via change password6.5 Medium
- tp-link tl-1043nd firmware, tl-wdr4300 firmware +1 moreSymlink Traversal vulnerability in TP-LINK TL-WDR4300 and TL-1043ND..9.8 Critical
- huawei honor 10 lite firmware, honor 8a firmware, y6 firmware +2 moreHonor 10 Lite, Honor 8A, Huawei Y6 mobile phones with the versions before 9.1.0.217(C00E215R3P1),...3.3 Low
- letodms, debian linux +1 moreletodms has multiple XSS issues: Reflected XSS in Login Page, Stored XSS in Document Owner/User...6.1 Medium
- western digital my cloud ex2 ultra firmwareWestern Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest accounts)...8.8 High
- western digital my cloud ex2 ultra firmwareWestern Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest account)...8.8 High
- jboss keycloak, redhat jboss enterprise web server +1 moreJBoss KeyCloak is vulnerable to soft token deletion via CSRF4.3 Medium
- western digital my cloud ex2 ultra firmwareWestern Digital My Cloud EX2 Ultra firmware 2.31.195 allows a Buffer Overflow with Extended...8.8 High
- openshift origin origin, redhat openshift origin +1 moreOpenShift Origin: Improperly validated team names could allow stored XSS attacks6.1 Medium
- belkin n900 firmwareSymlink Traversal vulnerability in Belkin N900 due to misconfiguration in the SMB service.7.5 High
- ti cc256xb-bt-sp firmware, cc256xc-bt-sp firmware, wl18xx-bt-sp firmware +2 moreTexas Instruments CC256x and WL18xx dual-mode Bluetooth controller devices, when LE scan mode is...8.8 High
- huawei p30, p30 firmware +1 moreP30 smart phones with versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1) have an integer...7.8 High
- asus rt-ac66u firmware, rt-n56u firmware +1 moreSymlink Traversal vulnerability in ASUS RT-AC66U and RT-N56U due to misconfiguration in the SMB...9.8 Critical
- huawei p30, p30 firmware +1 moreP30 smart phones with versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1) have an integer...7.8 High
- fudforumFUDForum 3.0.9 is vulnerable to Stored XSS via the nlogin parameter. This may result in remote...9.0 Critical
- technicolor tc7300.b0 firmwareAn XSS vulnerability on Technicolor TC7300 STFA.51.20 devices allows remote attackers to inject...5.4 Medium
- technicolor tc7300.b0 firmwareAn XSS vulnerability on Technicolor TC7300 STFA.51.20 devices allows remote attackers to inject...5.4 Medium
- huawei emily-al00a firmware, emily-l09c firmware, emily-l29c firmware +4 more +6 moreBastet module of some Huawei smartphones with Versions earlier than Emily-AL00A 9.0.0.182...7.8 High
- huawei emily-l29c, emily-l29c firmware +1 moreHuawei smart phones Emily-L29C with Versions earlier than 9.1.0.311(C10E2R1P13T8), Versions...5.5 Medium
- failure project failureType confusion if __private_get_type_id__ is overriden9.8 Critical
- failure project failureRust Failure Crate Vulnerable to Type confusion9.8 Critical
- mcafee threat intelligence exchange server, mcafee,llc threat intelligence exchange server (tie server) +1 moreExploitation of Authorization in TIE Server4.5 Medium
- mcafee total protection, mcafee,llc mcafee total protection, mcafee anti-virus plus +1 more +3 moreImplicit loading of DLLs6.1 Medium
- huawei elle-al00b, elle-al00b firmware +1 moreSmartphones with software of ELLE-AL00B 9.1.0.109(C00E106R1P21), 9.1.0.113(C00E110R1P21), 9.1.0...6.2 Medium
- huawei taurus-al00b, taurus-al00b firmware +1 moreHuawei smartphones with versions earlier than Taurus-AL00B 10.0.0.41(SP2C00E41R3P2) have an...8.8 High
- huawei p30, p30 firmware +1 moreP30 smartphones with versions earlier than ELLE-AL00B 9.1.0.186(C00E180R2P1) have an improper...4.6 Medium
- huawei mate rs firmware, p20 firmware, p20 pro firmware +2 moreP20 Pro, P20, Mate RS smartphones with versions earlier than Charlotte-AL00A 9.1.0.321...5.5 Medium
- huawei p30, p30 firmware +1 moreP30 smartphones with versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1) have an insufficient...6.2 Medium
- huawei honor play firmwareHonor play smartphones with versions earlier than Cornell-AL00A 9.1.0.321(C00E320R1P1T8) have an...2.4 Low
- huawei honor v20 firmware, p30 firmware, p30 pro firmware +2 moreCertain detection module of P30, P30 Pro, Honor V20 smartphone whith Versions earlier than ELLE...7.8 High
- mysql-gui-tools, fedoraproject fedora +1 moremysql-gui-tools (mysql-query-browser and mysql-admin) before 5.0r14+openSUSE-2.3 exposes the...5.5 Medium
- jboss brms brms, red hat jboss brms, redhat jboss business rules management system +2 moreJBoss BRMS before 5.1.0 has a XSS vulnerability via asset=UUID parameter.6.1 Medium
- huawei hg655m, hg655m firmware +1 moreSome Huawei smart phones with versions earlier than Harry-AL00C 9.1.0.206(C00E205R3P1) have a...8.8 High
- ettercap, debian linux +1 moreAn unchecked sscanf() call in ettercap 0.7.3 allows an insecure temporary settings file to...8.8 High
- google blink, chrome +1 moreWebKit in Google Chrome before Blink M11 and M12 does not properly handle counter nodes, which...6.5 Medium
- babiloo, debian linux +1 morebabiloo 2.0.9 before 2.0.11 creates temporary files with predictable names when downloading and...5.5 Medium
- google blink, chrome +1 moreAn issue exists in third_party/WebKit/Source/WebCore/svg/animation/SVGSMILElement.h in WebKit in...6.5 Medium
- pixelpostCross-site request forgery (CSRF) vulnerability in pixelpost 1.7.3 could allow remote attackers...8.8 High
- google blink, chrome +1 moreUse after free vulnerability exists in WebKit in Google Chrome before Blink M12 in...6.5 Medium
- Show moreLoading…