CVEs published in November 2019
1,672 vulnerabilities, 196 critical, 11 exploited.
dpdkUbuntudpdk regressionNo score- kubernetes cri-o, fedoraproject fedora, redhat openshift container platform +2 moreA flaw was found in cri-o, as a result of all pod-related processes being placed in the same...5.0 Medium
- [unknown] infinispan, netapp active iq unified manager, redhat fuse +4 more +6 moreUse of Externally-Controlled Input to Select Classes or Code in Infinispan7.5 High
libxdmcpDebianlibxdmcp - security updateNo score- cisco clamav, canonical ubuntu linux, cisco email security appliance firmware +1 more +3 moreClam AntiVirus (ClamAV) Software Email Parsing Vulnerability7.5 High
- red hat katelloKatello cleartext password storage issue4.1 Medium
- mozilla firefox, firefox esr, thunderbird +12 more +14 moreWhen encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller...8.8 High
- red hat 389-ds-base, fedoraproject 389 directory server +1 moreA flaw has been found in 389-ds-base versions 1.4.x.x before 1.4.1.3. When executed in verbose...4.3 Medium
- pivotal rabbitmq, rabbitmq for pivotal platform, broadcom rabbitmq server +3 more +5 moreRabbitMQ Web Management Plugin DoS via heap overflow4.5 Medium
- pivotal rabbitmq, broadcom rabbitmq server, pivotal rabbitmq for pivotal platform +1 more +3 moreRabbitMQ XSS attack via federation and shovel endpoints3.1 Low
- gitlabGitLab 12.2.3 contains a security vulnerability that allows a user to affect the availability of...6.5 Medium
- hp thinpro linuxAn attacker may be able to bypass the OS application filter meant to restrict applications that...6.8 Medium
- hp thinpro linuxIf a local user has been configured and logged in, an unauthenticated attacker with physical...4.6 Medium
- hp thinpro, thinpro linux +1 moreThe VPN software within HP ThinPro does not safely handle user supplied input, which may be...8.0 High
- hp thinpro, thinpro linux +1 moreAn attacker may be able to leverage the application filter bypass vulnerability to gain...6.8 Medium
- hp thinpro, thinpro linux +1 moreThe Citrix Receiver wrapper function does not safely handle user supplied input, which may be...6.8 Medium
- phpmyadmin, fedoraproject fedora, opensuse backports sle +1 more +3 moreSQL injection in phpMyAdmin9.8 Critical
- ros ros-commAn issue was discovered in the ROS communications-related packages (aka ros_comm or ros-melodic...9.8 Critical
- mcafee client proxy (mcp), client proxy +1 moreClient Proxy (MCP) - Authentication Bypass vulnerability5.3 Medium
- boldgrid w3 total cache, w3 total cache +1 moreW3 Total Cache before 0.9.2.5 exposes sensitive cached database information which allows remote...7.5 High
- owncloud, owncloud server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in ownCloud 4.5.5, 4.0.10, and earlier allow...5.4 Medium
- kiteworks owncloud, owncloud server +1 moreCross-site scripting (XSS) vulnerability in ownCloud 4.5.5, 4.0.10, and earlier allows remote...6.1 Medium
- boldgrid w3 total cache, w3 total cache +1 moreW3 Total Cache before 0.9.2.5 generates hash keys insecurely which allows remote attackers to...7.5 High
- eng spagobiUnrestricted file upload vulnerability in the Worksheet designer in SpagoBI before 4.1 allows...8.0 High
- embedthis goaheadEmbedthis GoAhead before 5.0.1 mishandles redirected HTTP requests with a large Host header. The...5.3 Medium
- boldgrid w3 total cache, w3 total cache +1 moreW3 Total Cache before 0.9.2.5 allows remote attackers to retrieve password hash information due...7.5 High
- posh project poshMultiple cross-site scripting (XSS) vulnerabilities in POSH (aka Posh portal or Portaneo) 3.0...6.1 Medium
- posh project poshOpen redirect vulnerability in the password reset functionality in POSH 3.0 through 3.2.1 allows...6.1 Medium
- ideagen q-pulseCross-site scripting (XSS) vulnerability in ui/common/managedlistdialog.aspx in Gael Q-Pulse 0.6...6.1 Medium
- debian linux, vanderbilt adaptive communication environment +1 moregenerate_doygen.pl in ace before 6.2.7+dfsg-2 creates predictable file names in the /tmp...9.8 Critical
- miwisoft mijosearchCross-site scripting (XSS) vulnerability in the Mijosoft MijoSearch component 2.0.4 and earlier...6.1 Medium
- miwisoft mijosearchThe Mijosoft MijoSearch component 2.0.1 and earlier for Joomla! allows remote attackers to obtain...5.3 Medium
- mpetroff pannellumXSS in Pannellum from 2.5.0 through 2.5.44.8 Medium
- exis-ti exis contexisCross-site scripting (XSS) vulnerability in the photo gallery model in Exis Contexis before 2.0...6.1 Medium
- call-cc chicken, debian linux +1 moreBuffer overflow in CHICKEN 4.9.0 and 4.9.0.1 may allow remote attackers to execute arbitrary code...9.8 Critical
- d-link dsl6740u firmwareMultiple cross-site request forgery (CSRF) vulnerabilities in the D-Link DSL-6740U gateway (Rev....8.8 High
- apple iphone, iphone 3gs +1 moreApple iPhone 3GS bootrom malloc implementation returns a non-NULL pointer when unable to allocate...6.1 Medium
- elvedia flashcanvasOpen redirect in proxy.php in FlashCanvas before 1.6 allows remote attackers to redirect users to...6.1 Medium
- eracent epa agentAn issue was discovered in Eracent EPA Agent through 10.2.26. The agent executable, when...7.8 High
- digium asterisk, certified asterisk, debian linux +2 moreAn issue was discovered in manager.c in Sangoma Asterisk through 13.x, 16.x, 17.x and Certified...8.8 High
- nssglobal vmu softwareThe web interface for NSSLGlobal SatLink VSAT Modem Unit (VMU) devices before 18.1.0 doesn't...6.1 Medium
- eracent sum agent, eda agent, epa agent +3 more +5 moreAn issue was discovered in Eracent EDA, EPA, EPM, EUA, FLW, and SUM Agent through 10.2.26. The...5.5 Medium
- digium asterisk, certified asterisk, debian linux +2 moreAn issue was discovered in res_pjsip_t38.c in Sangoma Asterisk through 13.x and Certified...7.5 High
- digium asterisk, certified asterisk, debian linux +2 moreAn issue was discovered in channels/chan_sip.c in Sangoma Asterisk 13.x, 16.x, and 17.x, and...6.5 Medium
- python pyxml, redhat enterprise linux, enterprise virtualization hypervisor +2 morePyXML: Hash table collisions CPU usage Denial of Service7.5 High
- postfix admin project admin, postfixadmin, debian linux +2 morePostfixAdmin 2.3.4 has multiple XSS vulnerabilities6.1 Medium
- pagekitPagekit File Upload vulnerability8.8 High
- zte zxcdn iamweb, zxcdn iamweb firmware +1 moreThe version V6.01.03.01 of ZTE ZXCDN IAMWEB product is impacted by a configuration error...6.5 Medium
- zte zxcdn iamweb, zxcdn iamweb firmware +1 moreThe version V6.01.03.01 of ZTE ZXCDN IAMWEB product is impacted by a code injection vulnerability...7.2 High
- ibm tivoli netcool impact, tivoli netcool\/impact +1 moreIBM Tivoli Netcool Impact 7.1.0 through 7.1.0.16 generates an error message that includes...3.7 Low
- Show moreLoading…