CVEs published in November 2019
1,672 vulnerabilities, 196 critical, 11 exploited.
- pega platformPEGA Platform 7.x and 8.x is vulnerable to Information disclosure via a direct prweb/sso...4.3 Medium
- centreonCentreon before 2.8.30, 18.x before 18.10.8, and 19.x before 19.04.5 allows XSS via myAccount...6.1 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 8.15 through 12.4. It has...4.3 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 12.4. It has Insecure...4.3 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 12.4. It has Incorrect...6.5 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 12.4 in the...4.3 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 12.4 in the Project...4.3 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 10.7.4 through 12.4 in the...6.1 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 11.3 through 12.4 when moving...5.3 Medium
- dell emc storage monitoring and reporting, emc storage m&r +1 moreDell EMC Storage Monitoring and Reporting version 4.3.1 contains a Java RMI Deserialization of...9.8 Critical
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 11.6 through 12.4 in the add...4.3 Medium
- cloudera managerAn issue was discovered in Cloudera Manager 5.x before 5.16.2, 6.0.x before 6.0.2, and 6.1.x...5.4 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 10.5 through 12.4 in link...6.1 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 11 through 12.4 when building...7.5 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 8.17 through 12.4 in the...5.3 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.2.0 is vulnerable to SQL...6.3 Medium
- kaspersky anti-virus, internet security, anti-virus, kaspersky internet security, kaspersky total security, kaspersky free anti-virus, kaspersky small office security, kaspersky security cloud +3 more +5 moreKaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti...6.5 Medium
- kaspersky anti-virus, internet security, anti-virus, kaspersky internet security, kaspersky total security, kaspersky free anti-virus, kaspersky small office security, kaspersky security cloud +3 more +5 moreKaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti...4.3 Medium
- kaspersky anti-virus, internet security, anti-virus, kaspersky internet security, kaspersky total security, kaspersky free anti-virus, kaspersky small office security, kaspersky security cloud +3 more +5 moreKaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti...4.3 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 11.8 through 12.4 when...8.8 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition through 12.4. It has Insecure...2.7 Low
- alcatelmobile cingular flip 2 firmwareOn TCL Alcatel Cingular Flip 2 B9HUAH1 devices, PIN authentication can be bypassed by creating a...6.8 Medium
- kaspersky anti-virus, internet security, anti-virus, kaspersky internet security, kaspersky total security, kaspersky free anti-virus, kaspersky small office security, kaspersky security cloud +3 more +5 moreKaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti...6.1 Medium
- cloudera managerCloudera Manager 5.7.x before 5.7.6, 5.8.x before 5.8.4, and 5.9.x before 5.9.1 allows XSS in the...5.4 Medium
- alcatelmobile cingular flip 2 firmwareOn TCL Alcatel Cingular Flip 2 B9HUAH1 devices, there is an undocumented web API that allows...6.1 Medium
- alcatelmobile cingular flip 2 firmwareOn TCL Alcatel Cingular Flip 2 B9HUAH1 devices, there is an engineering application named omamock...6.8 Medium
- cloudera managerCloudera Manager 5.8.x before 5.8.5, 5.9.x before 5.9.2, and 5.10.x before 5.10.1 allows a read...8.8 High
- afterlogic aurora, webmail pro +1 moreAfterlogic WebMail Pro 8.3.11, and WebMail in Afterlogic Aurora 8.3.11, allows Remote Stored XSS...6.1 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 11.3 to 12.3 in the protected...5.3 Medium
- cloudera cdhAn issue was discovered in Cloudera Hue 6.0.0 through 6.1.0. When using one of following...8.3 High
- cloudera data science workbenchAn issue was discovered in Cloudera Data Science Workbench (CDSW) 1.4.0 through 1.4.2....8.3 High
- cesanta mongooseAn integer overflow in parse_mqtt in mongoose.c in Cesanta Mongoose 6.16 allows an attacker to...9.8 Critical
- [unknown] libnbdStructured reply is a feature of the newstyle NBD protocol allowing the server to send a reply in...7.3 High
- imagely nextgen galleryThe NextGEN Gallery plugin before 2.1.10 for WordPress has multiple XSS issues involving...5.4 Medium
- imagely nextgen galleryThe NextGEN Gallery plugin before 2.1.15 for WordPress allows ../ Directory Traversal in path...6.5 Medium
- fast secure contact form project secure contact formThe Fast Secure Contact Form plugin before 4.0.38 for WordPress allows fs_contact_form1[welcome]...6.1 Medium
- zoho lead magnetThe Zoho CRM Lead Magnet plugin 1.6.9.1 for WordPress allows XSS via module, EditShortcode, or...5.4 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreBIG-IP configurations using Active Directory, LDAP, or Client Certificate LDAP for management...9.8 Critical
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 8.15 through 12.4 in the...7.5 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 11.3 through 12.3 when a sub...4.3 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 11.3 through 12.4. It has...4.3 Medium
- fastweb askey rtv1907vw firmwareAn issue was discovered on Fastweb Askey RTV1907VW 0.00.81_FW_200_Askey 2018-10-02 18:08:18...9.8 Critical
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition through 12.4. It has Insecure...4.3 Medium
- dolibarr erp\/crmDolibarr ERP and CRM contain XSS Vulnerability5.4 Medium
- cloudera cdhCloudera CDH has Insecure Permissions because ALL cannot be revoked.This affects 5.x through 5.15...7.2 High
- python typed asttyped-ast Out-of-bounds Read7.5 High
- python typed asttyped-ast Out-of-bounds Read7.5 High
- cloudera managerMultiple cross-site scripting (XSS) vulnerabilities in the Cloudera Manager UI before 5.4.3 allow...5.4 Medium
- cloudera managerThere is Sensitive Information in Cloudera Manager before 5.4.6 Diagnostic Support Bundles.7.5 High
- cloudera cdhIn Cloudera Hue, there is privilege escalation by a read-only user when CDH 5.x brefore 5.4.9 is...8.8 High
- Show moreLoading…