CVEs published in November 2019
1,672 vulnerabilities, 196 critical, 11 exploited.
- linux kernel, opensuse leap, redhat enterprise linux +2 moreIn the Linux kernel 5.0.21, a setxattr operation, after a mount of a crafted ext4 image, can...6.5 Medium
- hitachi energy relion 670 series, hitachienergy relion 670 firmware +1 moreAn attacker could use specially crafted paths in a specific request to read or delete files from...10.0 Critical
- hitachienergy relion 650 firmware, relion 670 firmware +1 moreAn attacker may use a specially crafted message to force Relion 650 series (versions 1.3.0.5 and...7.5 High
- f5 big-ip asm, big-iq, enterprise manager +3 more +5 moreOn BIG-IP ASM 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, BIG-IQ 6.0.0 and...9.4 Critical
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, and 13.1.0-13.1.1.4, the TMM process...7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.1.0-13.1.1.5, 12.1.0-12.1.4.1, and...7.5 High
- f5 big-ip apm edge client, big-ip access policy manager +1 moreThe BIG-IP APM Edge Client for macOS bundled with BIG-IP APM 15.0.0-15.0.1, 14.1.0-14.1.0.5, 14.0...5.5 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.1...7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, under certain...7.5 High
- f5 big-ip afm, big-ip advanced firewall manager +1 moreOn BIG-IP AFM 15.0.0-15.0.1, 14.0.0-14.1.2, and 13.1.0-13.1.3.1, when bad-actor detection is...7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.1...4.4 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +6 more +8 moreOn versions 15.0.0-15.0.1 and 14.0.0-14.1.2, when the BIG-IP is configured in HTTP/2 Full Proxy...7.5 High
- f5 ssl orchestratorOn F5 SSL Orchestrator 15.0.0-15.0.1 and 14.0.0-14.1.2, TMM may crash when processing SSLO data...7.5 High
- dhcpv6 project dhcpv6, linux dhcp6c, redhat enterprise linux +2 moreThe DHCPv6 client (dhcp6c) as used in the dhcpv6 project through 2011-07-25 allows remote DHCP...9.8 Critical
- fortinet fortios, fortigate +1 moreAn Improper Input Validation vulnerability in the SSL VPN portal of FortiOS versions 6.2.1 and...7.5 High
- vsftpd, debian linux +1 morevsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on...9.8 Critical
- packagekit, debian linux, redhat enterprise linux server +2 morePackageKit 0.6.17 allows installation of unsigned RPM packages as though they were signed which...5.3 Medium
- linux kernel, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreThe Linux kernel through 5.3.13 on powerpc allows Information Exposure because the Spectre-RSB...4.7 Medium
- fusionpbxA cross-site scripting (XSS) vulnerability in app/xml_cdr/xml_cdr_search.php in FusionPBX 4.4.1...6.1 Medium
- fusionpbxA cross-site scripting (XSS) vulnerability in app/fax/fax_files.php in FusionPBX 4.4.1 allows...6.1 Medium
- freebsd, freebsd, netbsd netbsd +1 moreInformation Disclosure vulnerability in the 802.11 stack, as used in FreeBSD before 8.2 and...7.5 High
- otrs faq, help desk, itsm +2 more +4 moreAn Access Bypass issue exists in OTRS Help Desk before 3.2.4, 3.1.14, and 3.0.19, OTRS ITSM...6.5 Medium
- dirmngr, debian linux, gnupg +1 more +3 moredirmngr before 2.1.0 improperly handles certain system calls, which allows remote attackers to...5.3 Medium
- dhclient project dhclient, debian linux, isc-dhcp +2 moreAn issue was discovered in dhclient 4.3.1-6 due to an embedded path variable.8.1 High
- xscreensaver, debian linux +1 morexscreensaver before 5.14 crashes during activation and leaves the screen unlocked when in Blank...7.8 High
- accountsservice project accountsservice, debian linux, opensuse +1 more +3 moreAn issue exists AccountService 0.6.37 in the user_change_password_authorized_cb() function in...3.3 Low
- apache openoffice, openoffice.org +1 moreOpenOffice.org v3.3 allows execution of arbitrary code with the privileges of the user running...7.8 High
- crestron dmc-stro firmwareCrestron DMC-STRO 1.0 devices allow remote command execution as root via shell metacharacters to...9.8 Critical
- ethz xquest, fedoraproject fedora, redhat enterprise linux +1 more +3 moreA password generation weakness exists in xquest through 2016-06-13.2.5 Low
- mersive solstice firmwareInsufficient validation of user-supplied input for the Solstice Pod networking configuration...8.8 High
- haproxy, canonical ubuntu linux, debian linux +2 moreThe HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by...9.8 Critical
- wikimedia wikidata query guiui/ResultView.js in Wikibase Wikidata Query Service GUI before 0.3.6-SNAPSHOT 2019-11-07 allows...6.1 Medium
- wikimedia wikidata query guiui/editor/tooltip/Rdf.js in Wikibase Wikidata Query Service GUI before 0.3.6-SNAPSHOT 2019-11-07...6.1 Medium
- wikimedia wikidata query guiIn Wikibase Wikidata Query Service GUI before 0.3.6-SNAPSHOT 2019-11-07, when mathematical...6.1 Medium
- gnome gnome-font-viewerIn text_to_glyphs in sushi-font-widget.c in gnome-font-viewer 3.34.0, there is a NULL pointer...5.5 Medium
- centreon webA problem was found in Centreon Web through 19.04.3. An authenticated command injection is...8.8 High
- siemens polarionImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...3.5 Low
- siemens polarionImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...3.5 Low
- siemens polarionImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...3.5 Low
- centreon webA problem was found in Centreon Web through 19.04.3. An authenticated SQL injection is present in...8.8 High
- freeipa, red hat ipa, fedoraproject fedora +2 moreCode injection in FreeIPA8.8 High
- freeipa, red hat ipa, fedoraproject fedora +2 moreFreeIPA logs passwords embedded in commands in calls using batch5.7 Medium
- the cms made simple foundation cmsms, cmsmadesimple cms made simple +1 moreThe news module in CMSMS before 1.9.4.3 allows remote attackers to corrupt new articles.7.5 High
- php, zend framework, zendframework +1 more +3 moreZendframework Local file disclosure via XXE injection in Zend_XmlRpc9.8 Critical
- lilo, debian linux +1 morelilo-uuid-diskid causes lilo.conf to be world-readable in lilo 23.1.4.3 Medium
- jifty\ \, libjifty-dbi-perl +1 moreSQL injection vulnerability in Jifty::DBI before 0.68.9.8 Critical
- csrf magic project magicThe csrf_callback function in the CSRF Magic library through 2016-03-27 is vulnerable to CSRF...8.8 High
- progress sitefinityProgress Sitefinity 12.1 has a Weak Password Recovery Mechanism for a Forgotten Password because...9.8 Critical
- pega platformPEGA Platform 8.3.0 is vulnerable to Information disclosure via a direct prweb/sso/random_token/...4.3 Medium
- pega platformPEGA Platform 8.3.0 is vulnerable to a direct prweb/sso/random_token/!STANDARD?pyActivity=Data...8.1 High
- Show moreLoading…