CVEs published in November 2019
1,672 vulnerabilities, 196 critical, 11 exploited.
- cloudera cdhCloudera CDH before 5.6.1 allows authorization bypass via direct internal API calls.6.5 Medium
- cloudera managerCloudera Manager 5.x before 5.7.1 places Sensitive Data in cleartext Readable Files.6.5 Medium
- cloudera cdhIn Cloudera CDH before 5.7.1, Impala REVOKE ALL ON SERVER commands do not revoke all privileges.8.8 High
- cloudera cdhCloudera CDH before 5.9 has Potentially Sensitive Information in Diagnostic Support Bundles.7.5 High
- cloudera cdhCloudera Search in CDH before 5.7.0 allows unauthorized document access because Solr Queries by...6.5 Medium
- [unknown] ansible, opensuse backports sle, leap +1 more +3 moreAnsible password prompts could expose passwords6.4 Medium
- [unknown] tower, redhat ansible tower +1 moreAn attacker with low privilege could retrieve usernames and passwords credentials from the new...8.4 High
- yaws, debian linux +1 moreYaws 1.91 has a directory traversal vulnerability in the way certain URLs are processed. A remote...6.5 Medium
- openssl extension of ruby (git trunk), ruby-lang ruby +1 moreThe OpenSSL extension of Ruby (Git trunk) versions after 2011-09-01 up to 2011-11-03 always...9.8 Critical
- yubico pam module, debian linux, yubico-pam +2 moreYubico PAM Module before 2.10 performed user authentication when 'use_first_pass' PAM...9.8 Critical
- s9y serendipitySerendipity before 1.6 has an XSS issue in the karma plugin which may allow privilege escalation.6.1 Medium
- phpldapadmin, debian linux +1 moreA local file inclusion flaw was found in the way the phpLDAPadmin before 0.9.8 processed certain...7.5 High
- novaOpenStack Nova Exposure of Sensitive Information to an Unauthorized Actor5.9 Medium
- cisco unified communications domain manager, hosted collaboration solution +1 moreCisco Unified Communications Domain Manager Persistent Cross-Site Scripting Vulnerability5.4 Medium
- cisco email security appliance (esa), email security appliance firmware +1 moreCisco Email Security Appliance MP3 Content Filter Bypass Vulnerability5.8 Medium
- cisco unified communications managerCisco Unified Communications Manager SQL Injection Vulnerability5.4 Medium
- cisco unity expressCisco Unity Express Command Injection Vulnerability6.7 Medium
- cisco webex event center, webex meeting center, webex support center +3 more +5 moreCisco WebEx Centers Username Enumeration Information Disclosure Vulnerability5.3 Medium
- cisco email security appliance (esa), email security appliance firmware +1 moreCisco Email Security Appliance URL Filtering Bypass Vulnerability5.8 Medium
- cisco small business rv series router firmware, rv016 multi-wan vpn firmware, rv042 dual wan vpn firmware +2 more +4 moreCisco Small Business Routers RV016, RV042, RV042G, and RV082 Information Disclosure Vulnerability5.3 Medium
- cisco stealthwatch enterpriseCisco Stealthwatch Enterprise Cross-Site Scripting Vulnerability5.4 Medium
- cisco dna spaces, dna spaces\ +1 moreCisco DNA Spaces: Connector SQL Injection Vulnerability6.5 Medium
- cisco dna spaces, dna spaces\ +1 moreCisco DNA Spaces: Connector Privilege Escalation Vulnerability6.7 Medium
- cisco dna spaces, dna spaces\ +1 moreCisco DNA Spaces: Connector Command Injection Vulnerability6.7 Medium
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software NETCONF Over Secure Shell ACL Bypass Vulnerability5.3 Medium
- cisco webex teams, webex meetings +1 moreCisco Webex Teams for Windows DLL Hijacking Vulnerability5.3 Medium
- cisco vmanage software, sd-wan firmware +1 moreCisco SD-WAN Solution vManage Cross-Site Request Forgery Vulnerability6.5 Medium
- hardlink, debian linux, redhat enterprise linux +2 moreHardlink before 0.1.2 operates on full file system objects path names which can allow a local...7.1 High
- proftpd, debian linux, fedoraproject fedora +2 moreAn issue was discovered in tls_verify_crl in ProFTPD through 1.3.6b. A dereference of a NULL...4.9 Medium
- proftpd, fedoraproject fedora +1 moreAn issue was discovered in tls_verify_crl in ProFTPD through 1.3.6b. Failure to check for the...7.5 High
- proftpdAn issue was discovered in tls_verify_crl in ProFTPD before 1.3.6. A wrong iteration variable,...7.5 High
- proftpdAn issue was discovered in tls_verify_crl in ProFTPD before 1.3.6. Direct dereference of a NULL...7.5 High
- hardlink, debian linux, redhat enterprise linux +2 moreHardlink before 0.1.2 has multiple integer overflows leading to heap-based buffer overflows...8.8 High
- cisco rv series routers, small business rv series router firmware, rv016 multi-wan vpn firmware +3 more +5 moreCisco Small Business RV016, RV042, RV042G, and RV082 Routers Arbitrary Command Execution Vulnerability8.8 High
- cisco wireless lan controller software, wireless lan controller (wlc) +1 moreCisco Wireless LAN Controller HTTP Parsing Engine Denial of Service Vulnerability7.7 High
- cisco webex wrf player, webex business suite, webex meetings online +1 more +3 moreCisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities7.8 High
- cisco webex wrf player, webex business suite, webex meetings online +1 more +3 moreCisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities7.8 High
- cisco roomos, telepresence codec, telepresence collaboration endpoint +1 more +3 moreCisco TelePresence Collaboration Endpoint, TelePresence Codec, and RoomOS Software Privilege Escalation Vulnerability8.8 High
- cisco asyncos, web security appliance (wsa), web security appliance +2 moreCisco Web Security Appliance Unauthorized Device Reset Vulnerability8.8 High
- cisco prime infrastructure, evolved programmable network manager +1 moreCisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerability8.1 High
- cisco webex meetingsCisco Webex Network Recording Admin Page Privilege Escalation Vulnerability5.4 Medium
- cisco roomos, telepresence collaboration endpoint, telepresence tc software +2 moreCisco TelePresence Collaboration Endpoint and RoomOS Audio Eavesdropping Vulnerability4.4 Medium
- cisco industrial network director, network level service +1 moreCisco Industrial Network Director Reflected Cross-Site Scripting Vulnerability6.1 Medium
- hardlink, debian linux, redhat enterprise linux +2 moreHardlink before 0.1.2 suffer from multiple stack-based buffer overflow flaws because of the way...8.8 High
- hackerone rubyVarious methods in WEBrick::HTTPRequest in Ruby 1.9.2 and 1.8.7 and earlier do not validate the X...5.3 Medium
- tahoe-lafs, debian linux +1 moreTahoe-LAFS v1.3.0 through v1.8.2 could allow unauthorized users to delete immutable files in some...6.5 Medium
- jboss application server application server, redhat jboss application server +1 moreA CSRF issue was found in JBoss Application Server 7 before 7.1.0. JBoss did not properly...6.5 Medium
- jboss application server application server, redhat jboss application server +1 moreA DOM based cross-site scripting flaw was found in the JBoss Application Server 7 before 7.1.0...5.4 Medium
- apache ofbizThe /webtools/control/xmlrpc endpoint in OFBiz XML-RPC event handler is exposed to External...7.5 High
- cloud foundry uaa release, cloudfoundry cf-deployment, user account and authentication +2 moreCloud Foundry UAA logs query parameters in tomcat access file8.8 High
- Show moreLoading…