CVEs published November 1, 2019
32 CVEs were published on November 1, 2019: 0 critical, 0 high.
- Published
- 32
- Critical
- 0
- High
- 0
- Medium
- 1
- Low
- 0
- Unrated
- 31
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- F5 BIG-IP
- 2
- Redis Labs Redis
- 2
- typo3/cms-backend
- 2
- Apache Struts · org.apache.struts:struts2-core
- 1
- gs-gpl
- 1
- INDEPNET Development Team GLPI
- 1
- ManageIQ EVM · Red Hat CloudForms
- 1
- Multiple, non-ISC dhcpd
- 1
- mutt
- 1
- Nexus Repository Manager
- 1
Medium, low and unrated 32
- CVE-2019-6470dhcpd: use-after-free error leads crash in IPv6 mode when using mismatched BIND librariesMultiple, non-ISC dhcpd
- CVE-2005-2352I race condition in Temp files was found in gs-gpl before 8.56 addons scripts.gs-gpl
- CVE-2013-4168Cross-site scripting (XSS) vulnerability in SmokePing 2.6.9 in the start and end time fields.SmokePing
- CVE-2005-2351Mutt before 1.5.20 patch 7 allows an attacker to cause a denial of service via a series of requests to mutt temporary files.mutt
- CVE-2013-0186Multiple cross-site scripting (XSS) vulnerabilities in ManageIQ EVM allows remote attackers to inject arbitrary web script or HTML via unspeManageIQ EVM · Red Hat CloudForms
- CVE-2013-2255HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate server-sideOpenStack Keystone · OpenStack Compute +4
- CVE-2019-18654A Cross Site Scripting (XSS) issue exists in AVG AntiVirus (Internet Security Edition) 19.3.3084 build 19.3.4241.440 in the Network Notifica
- CVE-2013-0180Insecure temporary file vulnerability in Redis 2.6 related to /tmp/redis.ds.Redis Labs Redis
- CVE-2013-0178Insecure temporary file vulnerability in Redis before 2.6 related to /tmp/redis-%p.vm.Redis Labs Redis
- CVE-2019-18653A Cross Site Scripting (XSS) issue exists in Avast AntiVirus (Free, Internet Security, and Premiere Edition) 19.3.2369 build 19.3.4241.440 i
- CVE-2013-0165cartridges/openshift-origin-cartridge-mongodb-2.2/info/bin/dump.sh in OpenShift does not properly create files in /tmp.OpenShift mongodb cartridge
- CVE-2005-2350Cross-site scripting (XSS) vulnerability in websieve v0.62 allows remote attackers to inject arbitrary web script or HTML code in the web uswebsieve
- CVE-2010-3661TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Open Redirection on the backend.typo3/cms-backend
- CVE-2013-4367ovirt-engine 3.2 running on Linux kernel 3.1 and newer creates certain files world-writeable due to an upstream kernel change which impactedovirt-engine
- CVE-2010-3660TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS on the backend.typo3/cms-backend
- CVE-2013-2227GLPI 0.83.7 has Local File Inclusion in common.tabs.php.INDEPNET Development Team GLPI
- CVE-2013-1666Foswiki before 1.1.8 contains a code injection vulnerability in the MAKETEXT macro.
- CVE-2019-12752The Symantec SONAR component, prior to 12.0.2, may be susceptible to a tamper protection bypass vulnerability which could potentially allow Symantec SONAR Component
- CVE-2019-6658On BIG-IP AFM 15.0.0-15.0.1, 14.0.0-14.1.2, 13.1.0-13.1.3.1, and 12.1.0-12.1.5, a vulnerability in the AFM configuration utility may allow aF5 BIG-IP
- CVE-2019-6657On BIG-IP 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, a reflected cross-site scripting (XSS) vulnerability exists in an undisclosedF5 BIG-IP
- CVE-2019-15588There is an OS Command Injection in Nexus Repository Manager <= 2.14.14 (bypass CVE-2019-5475) that could allow an attacker a Remote Code ExNexus Repository Manager
- CVE-2012-2979FreeBSD NSD before 3.2.13 allows remote attackers to crash a NSD child server process (SIGSEGV) and cause a denial of service in the NSD sernsd3
- CVE-2011-3923Apache Struts before 2.3.1.2 allows remote attackers to bypass security protections in the ParameterInterceptor class and execute arbitrary Apache Struts · org.apache.struts:struts2-core
- CVE-2005-3056TWiki allows arbitrary shell command execution via the Include function
- CVE-2013-4751php-symfony2-Validator has loss of information during serializationsymfony/validator · symfony/symfony
- CVE-2013-3718evince is missing a check on number of pages which can lead to a segmentation fault
- CVE-2013-2739MiniDLNA has heap-based buffer overflow
- CVE-2013-2738minidlna has SQL Injection that may allow retrieval of arbitrary files
- CVE-2013-2600MiniUPnPd has information disclosure use of snprintf()
- CVE-2019-18636A cross-site scripting (XSS) vulnerability in Jitbit .NET Forum (aka ASP.NET forum) 8.3.8 allows remote attackers to inject arbitrary web sc
- CVE-2019-16909An issue was discovered in the Infosysta "In-App & Desktop Notifications" app before 1.6.14_J8 for Jira.
- CVE-2019-16908An issue was discovered in the Infosysta "In-App & Desktop Notifications" app before 1.6.14_J8 for Jira.