CVEs published in November 2019
1,672 vulnerabilities, 196 critical, 11 exploited.
- linux kernel, canonical ubuntu linux, fedoraproject fedora +2 moreA memory leak in the nl80211_get_ftm_responder_stats() function in net/wireless/nl80211.c in the...5.5 Medium
- linux kernel, broadcom brocade fabric operating system firmware, canonical ubuntu linux +14 more +16 moreA memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c in the...4.7 Medium
- linux kernel, broadcom brocade fabric operating system firmware, canonical ubuntu linux +12 more +14 moreA memory leak in the rpmsg_eptdev_write_iter() function in drivers/rpmsg/rpmsg_char.c in the...7.5 High
- debian linux, linux kernel, broadcom brocade fabric operating system firmware +15 more +17 moreA memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel...7.5 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreA memory leak in the i2400m_op_rfkill_sw_toggle() function in drivers/net/wimax/i2400m/op-rfkill...5.5 Medium
- linux kernel, broadcom fabric operating system, canonical ubuntu linux +14 more +16 moreA memory leak in the crypto_reportstat() function in crypto/crypto_user_stat.c in the Linux...7.5 High
- linux kernel, opensuse leap +1 moreA memory leak in the unittest_data_add() function in drivers/of/unittest.c in the Linux kernel...7.5 High
- linux kernel, canonical ubuntu linux +1 moreA memory leak in the crypto_reportstat() function in drivers/virt/vboxguest/vboxguest_utils.c in...7.5 High
- linux kernel, canonical ubuntu linux +1 moreA memory leak in the mlx5_fw_fatal_reporter_dump() function in drivers/net/ethernet/mellanox/mlx5...5.5 Medium
- linux kernel, fedoraproject fedora, opensuse leap +2 moreA memory leak in the __ipmi_bmc_register() function in drivers/char/ipmi/ipmi_msghandler.c in the...6.5 Medium
- linux kernel, canonical ubuntu linux, opensuse leap +2 moreA memory leak in the mlx5_fpga_conn_create_cq() function in drivers/net/ethernet/mellanox/mlx5...4.4 Medium
- linux kernel, broadcom brocade fabric operating system firmware, canonical ubuntu linux +12 more +14 moreTwo memory leaks in the v3d_submit_cl_ioctl() function in drivers/gpu/drm/v3d/v3d_gem.c in the...7.5 High
- linux kernel, canonical ubuntu linux, fedoraproject fedora +2 moreA memory leak in the i40e_setup_macvlans() function in drivers/net/ethernet/intel/i40e/i40e_main...5.5 Medium
- sensiolabs symfony, fedoraproject fedora +1 moreArgument injection in a MimeTypeGuesser in Symfony7.5 High
- sensiolabs symfony, fedoraproject fedora +1 moreSymfony Http-Kernel has non-constant time comparison in UriSigner8.1 High
- sensiolabs symfonyUser enumeration leak using switch user functionality in Symfony5.3 Medium
- xorur lpar2rrd, stor2rrd +1 moreAn issue was discovered in Xorux Lpar2RRD 6.11 and Stor2RRD 2.61, as distributed in Xorux 2.41....7.2 High
- kairosdb project kairosdbReflected Cross site scripting (XSS) in kairosdb6.1 Medium
- jhead project jheadjhead 3.03 is affected by: heap-based buffer over-read. The impact is: Denial of service. The...5.5 Medium
- iterm2iTerm2 through 3.3.6 has potentially insufficient documentation about the presence of search...7.5 High
- oniguruma project oniguruma, debian linux, fedoraproject fedora +1 more +3 moreAn integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9...9.8 Critical
- miniupnp project ngiflibMiniUPnP ngiflib 0.4 has a NULL pointer dereference in GifIndexToTrueColor in ngiflib.c via a...7.5 High
- hyper httpInteger Overflow/Infinite Loop in the http crate7.5 High
- hyper httpDouble free in http9.8 Critical
- limnoria project limnoria, fedoraproject fedora +1 moreEval injection in Supybot/Limnoria9.8 Critical
- simpleledger slpjsValidator parsing discrepancy due to string encoding in NPM slpjs5.7 Medium
- simpleledger slp-validateValidator parsing discrepancy due to string encoding in NPM slp-validate 1.0.05.7 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 15.0.0 and 14.1.0-14.1.0.6, under certain conditions, network protections on the...7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 13.1.0-13.1.1.4, sensitive information is logged into the local log files and/or remote...6.5 Medium
- f5 enterprise manager, iworkflow, big-ip, big-iq, iworkflow, enterprise manager +14 more +16 moreThe BIG-IP 15.0.0-15.0.1, 14.0.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.1-11.6.5.1,...5.5 Medium
- f5 big-ip apm, big-ip access policy manager +1 moreWhen the BIG-IP APM 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.4.1, or 11.5.1-11...7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 14.1.0-14.1.2, 14.0.0-14.0.1, and 13.1.0-13.1.1, undisclosed HTTP requests may consume...7.5 High
- marvell 88w8688 firmwareAn issue was discovered in Marvell 88W8688 Wi-Fi firmware before version p52, as used on Tesla...9.8 Critical
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn version 14.0.0-14.1.0.1, BIG-IP virtual servers with TLSv1.3 enabled may experience a denial...7.5 High
- marvell 88w8688 firmwareAn issue was discovered in Marvell 88W8688 Wi-Fi firmware before version p52, as used on Tesla...9.8 Critical
- symantec endpoint protectionSymantec Endpoint Protection, prior to 14.2 RU2, may be susceptible to a privilege escalation...7.8 High
- symantec endpoint protection manager, mail security +1 moreSymantec Endpoint Protection Manager (SEPM) and Symantec Mail Security for MS Exchange (SMSMSE),...7.8 High
- symantec endpoint protectionSymantec Endpoint Protection, prior to 14.2 RU2, may be susceptible to an unsigned code execution...6.7 Medium
- symantec endpoint protectionSymantec Endpoint Protection (SEP), prior to 14.2 RU2 & 12.1 RU6 MP10 and Symantec Endpoint...7.8 High
- qtnxqtnx 0.9 stores non-custom SSH keys in a world-readable configuration file. If a user has a world...5.5 Medium
- symantec endpoint protection, symantec corporation endpoint protection (sep) +1 moreSymantec Endpoint Protection (SEP), prior to 14.2 RU2 may be susceptible to a password protection...2.3 Low
- symantec endpoint protection managerSymantec Endpoint Protection Manager (SEPM), prior to 14.2 RU1, may be susceptible to a privilege...7.8 High
- ax25-tools, debian linux +1 moreThe AX.25 daemon (ax25d) in ax25-tools before 0.0.8-13 does not check the return value of a...6.7 Medium
- drupal, debian linux, drupal core +2 more +4 moreAn access bypass issue was found in Drupal 7.x before version 7.5. If a Drupal site has the...7.5 High
- gksu-polkit, debian linux +1 moreIn gksu-polkit before 0.0.3, the source file for xauth may contain arbitrary commands that may...9.8 Critical
- openshiftOpenShift: Install script has temporary file creation vulnerability which can result in arbitrary...7.8 High
- clamav, debian linux, fedoraproject fedora +2 moreClamAV before 0.97.7: dbg_printhex possible information leak7.5 High
- clamav, debian linux, fedoraproject fedora +2 moreClamAV before 0.97.7 has buffer overflow in the libclamav component9.8 Critical
- clamav, debian linux, fedoraproject fedora +2 moreClamAV before 0.97.7 has WWPack corrupt heap memory9.8 Critical
- horms perdition, debian linux +1 morePerdition before 2.2 may have weak security when handling outbound connections, caused by an...5.9 Medium
- Show moreLoading…