CVEs published in November 2019
1,672 vulnerabilities, 196 critical, 11 exploited.
- polipo, debian linux +1 morePolipo before 1.0.4.1 suffers from a DoD vulnerability via specially-crafted HTTP POST / PUT...7.5 High
- guidestar wec discussion forum, typo3 core wec discussion +1 moreThe TYPO3 Core wec_discussion extension before 2.1.1 is vulnerable to SQL Injection due to...9.8 Critical
- omron cx-supervisor, teamviewer +1 moreIn Omron CX-Supervisor, Versions 3.5 (12) and prior, Omron CX-Supervisor ships with Teamviewer...8.8 High
- philips intellibridge ec40 firmware, intellibridge ec80 firmware +1 moreIn Philips IntelliBridge EC40 and EC80, IntelliBridge EC40 Hub all versions, and IntelliBridge...6.5 Medium
- typo3, typo3 core core +1 moreTypo3 SQL injection due to faulty prepared statements9.8 Critical
- ui unifi video controllerA privilege escalation exists in UniFi Video Controller =<3.10.6 that would allow an attacker on...8.8 High
- abb plant connect, power generation information manager +1 moreIn all versions of ABB Power Generation Information Manager (PGIM) and Plant Connect, the...9.8 Critical
- apt, debian advanced package tool, linux +2 moreIt was found that apt-key in apt, all versions, do not correctly validate gpg keys with the...3.7 Low
- drupal views builk operations, drupal6-views bulk operations bulk operations +1 moreDrupal Views Builk Operations (VBO) module 6.x-1.0 through 6.x-1.10 does not properly escape the...6.1 Medium
- iobroker iobroker.webCross-Site Scripting in iobroker.web6.1 Medium
- evolution-data-server3evolution-data-server3 3.0.3 through 3.2.1 used insecure (non-SSL) connection when attempting to...7.3 High
- eclipse jetty, the eclipse foundation eclipse jetty +1 moreUnescaped exception messages in error responses in Jetty6.1 Medium
- openvas openvas-scanneropenvas-scanner before 2011-09-11 creates a temporary file insecurely when generating OVAL system...7.1 High
- trendmicro password manager, trend micro password manager for android +1 moreTrend Micro Password Manager versions 3.x, 5.0, and 5.1 for Android is affected by a FLAG_MISUSE...7.5 High
- sqlite, canonical ubuntu linux, oracle mysql workbench +4 more +6 moresqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and...7.5 High
- microsoft codeql, github vscode-codeql +1 moreIf an attacker can get a user to open a specially prepared directory tree as a workspace in...7.4 High
- canonical cloud-init, debian linux, suse linux enterprise server +2 moreAn privilege elevation vulnerability exists in Cloud-init before 0.7.0 when requests to an...8.8 High
- linux kernelvcs_write in drivers/tty/vt/vc_screen.c in the Linux kernel through 5.3.13 does not prevent write...7.8 High
- powauth powassent, pow-auth pow assent +1 morePowAssent is susceptible to denial of service attacks6.5 Medium
- zope, zope zope2, zope3 +1 moreZope XSS Vulnerability6.1 Medium
- ibm spectrum protect backup-archive clientIBM Spectrum Protect Backup-Archive Client 7.1 and 8.1 may be vulnerable to a denial of service...4.4 Medium
- ibm spectrum protect backup-archive client, spectrum protect for virtual environments, spectrum protect +2 moreIBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments 7.1...5.1 Medium
- querytreeapp querytreeControllers/InvitationsController.cs in QueryTree before 3.0.99-beta mishandles invitations.9.8 Critical
- opentrade project opentradeOpenTrade before 2019-11-23 allows SQL injection, related to server/modules/api/v1.js and server...9.8 Critical
- opensuse leap 15.1, suse mailman, linux enterprise server 11 +2 more +4 moreLocal privilege escalation from user wwwrun to root in the packaging of mailman7.7 High
- broadcom symantec critical system protection, symantec critical system protection (csp) +1 moreSymantec Critical System Protection (CSP), versions 8.0, 8.0 HF1 & 8.0 MP1, may be susceptible to...9.8 Critical
- oniguruma project oniguruma, php, canonical ubuntu linux +2 more +4 moreOniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over...7.5 High
- google chrome, kaspersky protection, protection extension for google chrome +2 moreKaspersky Protection extension for web browser Google Chrome prior to 30.112.62.0 was vulnerable...4.3 Medium
- sqlite, canonical ubuntu linux, oracle mysql workbench +5 more +7 moreSQLite 3.30.1 mishandles pExpr->y.pTab, as demonstrated by the TK_COLUMN case in...5.9 Medium
- red hat ansibleExposure of Sensitive Information to an Unauthorized Actor in ansible5.7 Medium
- nokia impactNokia IMPACT < 18A has path traversal that may lead to RCE if chained with CVE-2019-17435.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreA stack-based buffer overflow was found in the Linux kernel, version kernel-2.6.32, in Marvell...6.6 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreA vulnerability was found in marvell wifi chip driver in Linux kernel. There is a heap-based...7.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreA heap-based buffer overflow was discovered in the Linux kernel, all versions 3.x.x and 4.x.x...8.0 High
- nokia impactNokia IMPACT < 18A: has Reflected self XSS6.1 Medium
- nokia impactNokia IMPACT < 18A: allows full path disclosure4.3 Medium
- nokia impactNokia IMPACT < 18A: An unrestricted File Upload vulnerability was found that may lead to Remote...8.8 High
- libuser, debian linux, fedoraproject fedora +1 more +3 morelibuser has information disclosure when moving user's home directory5.5 Medium
- red hat openshift, redhat openshift container platform +1 moreSensitive Data Exposure in Openshift Container Platform5.3 Medium
- acme thttpdthttpd has a local DoS vulnerability via specially-crafted .htpasswd files5.5 Medium
- ipa, freeipa +1 moreipa 3.0 does not properly check server identity before sending credential containing cookies8.8 High
- libuser, fedoraproject fedora, redhat enterprise linux +2 morelibuser 0.56 and 0.57 has a TOCTOU (time-of-check time-of-use) race condition when copying and...6.3 Medium
- linux kernelThe Linux kernel through 5.3.13 has a start_offset+size Integer Overflow in cpia2_remap_buffer in...7.8 High
- gksu-polkit, fedoraproject fedora +1 moregksu-polkit: permissive PolicyKit policy configuration file allows privilege escalation7.8 High
- opendnssecopendnssec misuses libcurl API9.8 Critical
- claws mail vcalendar plugin, claws-mail vcalendar +1 moreClaws Mail vCalendar plugin: credentials exposed on interface5.5 Medium
- quagga, debian linux, redhat enterprise linux +2 morequagga (ospf6d) 0.99.21 has a DoS flaw in the way the ospf6d daemon performs routes removal6.5 Medium
- gnome gnome-system-log, fedoraproject fedora +1 moregnome-system-log polkit policy allows arbitrary files on the system to be read7.5 High
- [unknown] vdsmvdsm: certificate generation upon node creation allowing vdsm to start and serve requests from...7.5 High
- python keyringIncorrect Default Permissions in keyring6.2 Medium
- Show moreLoading…