CVEs published November 5, 2019

119 CVEs were published on November 5, 2019: 0 critical, 6 high.

Published: 119
Critical: 0
High: 6
Medium: 8
Low: 0
Unrated: 105
Now in CISA KEV: 0
Fix available: 65

Most affected products

Adobe Systems Incorporated Magento · magento/community-edit…: 44
Adobe Systems Incorporated Magento: 6
Cisco Firepower Threat Defense Software: 3
Adobe Systems Incorporated Magento · magento/core: 2
Adobe Systems Incorporated Magento 1 & · magento/community-…: 2
Cisco ClamAV: 2
Cryptocat: 2
Ruby Nokogiri gem · nokogiri: 2
Adobe Systems Incorporated Magento · magento/community-e… +1: 1
Adobe Systems Incorporated Magento 1 & · magento/communi… +1: 1

High 6

CVE-2019-5089An exploitable memory corruption vulnerability exists in Investintech Able2Extract Professional 4.0.7 x64.Investintech Able2Extract ProfessionalHigh · 8.8Nov 5, 2019
CVE-2019-5088An exploitable memory corruption vulnerability exists in Investintech Able2Extract Professional 14.0.7 x64.Investintech.com Able2Extract ProfessionalHigh · 8.8Nov 5, 2019
CVE-2019-15966A vulnerability in the web application of Cisco TelePresence Advanced Media Gateway could allow an authenticated, remote attacker to cause aCisco TelePresence Advanced Media GatewayHigh · 7.7Nov 5, 2019
CVE-2019-1789ClamAV Denial of Service VulnerabilityCisco ClamAVHigh · 7.5Fix availableNov 5, 2019
CVE-2019-12625ClamAV Zip Bomb VulnerabilityCisco ClamAVHigh · 7.5Fix availableNov 5, 2019
CVE-2019-3685Missing TLS certificate validation for HTTPS connections in oscOpen Build ServiceHigh · 7.4Fix availableNov 5, 2019

Medium, low and unrated 113

CVE-2019-8228in Magento prior to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with limited administrative privileges can inject arbitraryAdobe Systems Incorporated MagentoUnratedNov 5, 2019
CVE-2019-8229In Magento prior to 1.9.4.3, and Magento prior to 1.14.4.3, an authenticated user with administrative privileges to edit product attributes Adobe Systems Incorporated MagentoUnratedNov 5, 2019
CVE-2019-8230In Magentoprior to 1.9.4.3, and Magento prior to 1.14.4.3, an authenticated user with administrative privileges to edit configuration settinAdobe Systems Incorporated Magento · magento/coreUnratedFix availableNov 5, 2019
CVE-2019-8231In Magento to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with administrative privileges for editing attribute sets can exeAdobe Systems Incorporated Magento · magento/coreUnratedFix availableNov 5, 2019
CVE-2019-8232In Magento prior to 1.9.4.3, Magento prior to 1.14.4.3, Magento 2.2 prior to 2.2.10, and Magento 2.3 prior to 2.3.3 or 2.3.2-p1, an authentiAdobe Systems Incorporated Magento 1 & · magento/community-…UnratedFix availableNov 5, 2019
CVE-2019-8233In Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1, an unauthenticated user can inject arbitrary JavaScript code as a reAdobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2019-8155Magento prior to 1.9.4.3 and prior to 1.14.4.3 included a user's CSRF token in the URL of a GET request.Adobe Systems Incorporated MagentoUnratedNov 5, 2019
CVE-2019-8154A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1.Adobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2019-8153A mitigation bypass to prevent cross-site scripting (XSS) exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1.Adobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2019-8152A stored cross-site scripting (XSS) vulnerability exists in in Magento 1 prior to 1.9.4.3 and 1.14.4.3, Magento 2.2 prior to 2.2.10, MagentoAdobe Systems Incorporated Magento 1 & · magento/community-…UnratedFix availableNov 5, 2019
CVE-2019-8151A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1.Adobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2019-8150A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1.Adobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2019-8149Insecure authentication and session management vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1.Adobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2019-8148A stored cross-site scripting (XSS) vulnerability exists in Magento 2.3 prior to 2.3.3 or 2.3.2-p1.Adobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2019-8147A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1.Adobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2019-8146A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1.Adobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2019-8144A remote code execution vulnerability exists in Magento 2.3 prior to 2.3.3 or 2.3.2-p1.Adobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2019-8143A SQL injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1.Adobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2019-8142A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1.Adobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2019-8141A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3.Adobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2019-8140An unrestricted file upload vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1.Adobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2019-8139A stored cross-site scripting (XSS) vulnerability exists in Magento 2.3 prior to 2.3.3 or 2.3.2-p1.Adobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2019-8138A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1.Adobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2019-8137A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1.Adobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2019-8136An insecure component vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1.Adobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2019-8135A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1.Adobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2019-8134A SQL injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1.Adobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2019-8133A security bypass vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1.Adobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2019-8131A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1.Adobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2019-8130A SQL injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1.Adobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2019-8129A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1.Adobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2019-8128A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1.Adobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2019-8127A SQL injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1.Adobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2019-8126An XML entity injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1.Adobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2019-8125A remote code execution vulnerability exists in Magento 1 prior to 1.9.x and 1.14.x.Adobe Systems Incorporated MagentoUnratedNov 5, 2019
CVE-2019-8124An insufficient logging and monitoring vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior tAdobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2019-8123An insufficient logging and monitoring vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3, Magento 2.1 prior to 2.1.19, MagentoAdobe Systems Incorporated Magento 1& · magento/community-e…UnratedFix availableNov 5, 2019
CVE-2019-8122A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3.Adobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2019-8121An insecure component vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3.Adobe Systems Incorporated Magento · magento/community-e… +1UnratedFix availableNov 5, 2019
CVE-2019-8120A stored cross-site scripting (XSS) vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2Adobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2019-8119A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3.Adobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2019-8118Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 uses weak cryptographic function to store the failed loAdobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2019-8117A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1.Adobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2019-8116Insecure authentication and session management vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1.Adobe Systems Incorporated MagentoUnratedNov 5, 2019
CVE-2019-8115A reflected cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1.Adobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2019-8114A remote code execution vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2Adobe Systems Incorporated Magento 1 & · magento/communi… +1UnratedFix availableNov 5, 2019
CVE-2019-8113Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1 uses cryptographically weak random number generator to brute-force the cAdobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2019-8112A security bypass vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1.Adobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2019-8111A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1.Adobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2019-8110A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1.Adobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2011-1459The WebKit::WebPluginContainerImpl::handleEvent function in Google Chrome before Blink M11 allows an attacker to cause a denial of service (UnratedNov 5, 2019
CVE-2019-8109A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1.Adobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2019-8108Insecure authentication and session management vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1.Adobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2019-8107An arbitrary file deletion vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1.Adobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2019-8091A remote code execution vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3.Adobe Systems Incorporated MagentoUnratedNov 5, 2019
CVE-2019-8093An arbitrary file access vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1.Adobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2019-8092A reflected cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1.Adobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2011-1460WebKit in Google Chrome before Blink M11 contains a bad cast to RenderBlock when anonymous blocks are renderblocks.UnratedNov 5, 2019
CVE-2019-8090An arbitrary file deletion vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3.Adobe Systems Incorporated Magento · magento/community-edit…UnratedFix availableNov 5, 2019
CVE-2016-4983A postinstall script in the dovecot rpm allows local users to read the contents of newly created SSL/TLS key files.Fedora dovecot22UnratedNov 5, 2019
CVE-2013-5123The mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackerspipUnratedFix availableNov 5, 2019
CVE-2019-5068An exploitable shared memory permissions vulnerability exists in the functionality of X11 Mesa 3D Graphics Library 19.1.2.Mesa 3D X11 Graphics libraryMedium · 5.1Nov 5, 2019
CVE-2019-6142It has been reported that XSS is possible in Forcepoint Email Security, versions 8.5 and 8.5.3.Forcepoint Email SecurityUnratedNov 5, 2019
CVE-2019-16284A potential security vulnerability has been identified in multiple HP products and versions which involves possible execution of arbitrary cMultiple - See https://support.hp.com/rs-en/document/c06456…UnratedNov 5, 2019
CVE-2018-19167CloakCoin through 2.2.2.0 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acUnratedNov 5, 2019
CVE-2018-19166peercoin through 0.6.4 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquiUnratedNov 5, 2019
CVE-2018-19165neblio through 1.5.1 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquireUnratedNov 5, 2019
CVE-2018-19164reddcoin through 2.1.0.5 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acqUnratedNov 5, 2019
CVE-2018-19163stratisX through 2.0.0.5 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acqUnratedNov 5, 2019
CVE-2018-19162Divi through 4.0.5 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires UnratedNov 5, 2019
CVE-2011-1135Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code UnratedNov 5, 2019
CVE-2018-19161alqo through 4.1 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires evUnratedNov 5, 2019
CVE-2018-19160Diamond through 3.0.1.2 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquUnratedNov 5, 2019
CVE-2018-19159lux through 5.2.2 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires eUnratedNov 5, 2019
CVE-2018-19157Phore through 1.3.3.1 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquirUnratedNov 5, 2019
CVE-2018-19156PIVX through 3.1.03 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquiresUnratedNov 5, 2019
CVE-2011-1134Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code UnratedNov 5, 2019
CVE-2018-19155navcoin through 4.3.0 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service.UnratedNov 5, 2019
CVE-2018-19154HTMLCOIN through 2.12 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service.UnratedNov 5, 2019
CVE-2018-19153particl through 0.17 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service.UnratedNov 5, 2019
CVE-2018-19152emercoin through 0.7 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service.UnratedNov 5, 2019
CVE-2011-1133Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code UnratedNov 5, 2019
CVE-2019-1982Cisco Firepower Threat Defense Software HTTP Filtering Bypass VulnerabilityCisco Firepower Management CenterMedium · 5.8Nov 5, 2019
CVE-2019-1981Cisco Firepower Threat Defense Software NULL Character Obfuscation Detection Bypass VulnerabilityCisco Firepower Threat Defense SoftwareMedium · 5.8Nov 5, 2019
CVE-2019-1980Cisco Firepower Threat Defense Software Nonstandard Protocol Detection Bypass VulnerabilityCisco Firepower Threat Defense SoftwareMedium · 5.8Nov 5, 2019
CVE-2019-1978Cisco Firepower Threat Defense Software Stream Reassembly Bypass VulnerabilityCisco Firepower Threat Defense SoftwareMedium · 5.8Nov 5, 2019
CVE-2010-3674TYPO3 before 4.4.1 allows XSS in the frontend search box.UnratedNov 5, 2019
CVE-2010-3673TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows information disclosure in the mail header of the HTML mailing API.typo3/cms-coreUnratedFix availableNov 5, 2019
CVE-2019-10084In Apache Impala 2.7.0 to 3.2.0, an authenticated user with access to the IDs of active Impala queries or sessions can interact with those sApache Software Foundation ImpalaUnratedNov 5, 2019
CVE-2010-2222The _ger_parse_control function in Red Hat Directory Server 8 and the 389 Directory Server allows attackers to cause a denial of service (NURed Hat Directory ServerUnratedNov 5, 2019
CVE-2019-1877Cisco Enterprise Chat and Email Attachment Download VulnerabilityCisco Enterprise Chat and EmailMedium · 6.5Fix availableNov 5, 2019
CVE-2010-3672TYPO3 before 4.3.4 and 4.4.x before 4.4.1 allows XSS in the textarea view helper in an extbase extension.typo3/cms-fluidUnratedFix availableNov 5, 2019
CVE-2005-2354Nvu 0.99+1.0pre uses an old copy of Mozilla XPCOM which can result in multiple security issues.NvuUnratedNov 5, 2019
CVE-2010-3671TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 is open to a session fixation attack which allows remotetypo3/cms-installUnratedFix availableNov 5, 2019
CVE-2019-1734Cisco FXOS and NX-OS Software Sensitive File Read Information Disclosure VulnerabilityCisco NX-OS SoftwareMedium · 5.5Fix availableNov 5, 2019
CVE-2010-3670TYPO3 before 4.3.4 and 4.4.x before 4.4.1 contains insecure randomness during generation of a hash with the "forgot password" function.typo3/cms-frontendUnratedFix availableNov 5, 2019
CVE-2019-18780An arbitrary command injection vulnerability in the Cluster Server component of Veritas InfoScale allows an unauthenticated remote attacker UnratedNov 5, 2019
CVE-2013-6275Multiple CSRF issues in Horde Groupware Webmail Edition 5.1.2 and earlier in basic.php.UnratedNov 5, 2019
CVE-2013-5661Cache Poisoning issue exists in DNS Response Rate Limiting.UnratedNov 5, 2019
CVE-2019-18631The Windows component of Centrify Authentication and Privilege Elevation Services 3.4.0, 3.4.1, 3.4.2, 3.4.3, 3.5.0, 3.5.1 (18.8), 3.5.2 (18UnratedNov 5, 2019
CVE-2019-17062An issue was discovered in OXID eShop 6.x before 6.0.6 and 6.1.x before 6.1.5, OXID eShop Enterprise Edition Version 5.2.x-5.3.x, OXID eShopUnratedNov 5, 2019
CVE-2019-17211An integer overflow was discovered in the CoAP library in Arm Mbed OS 5.14.0.UnratedNov 5, 2019
CVE-2019-17212Buffer overflows were discovered in the CoAP library in Arm Mbed OS 5.14.0.UnratedNov 5, 2019
CVE-2019-17598An issue was discovered in Lightbend Play Framework 2.5.x through 2.6.23.com.typesafe.play:play-ws_2.12UnratedFix availableNov 5, 2019
CVE-2013-6461Nokogiri gem 1.5.x and 1.6.x has DoS while parsing XML entities by failing to apply limitsRuby Nokogiri gem · nokogiriUnratedFix availableNov 5, 2019
CVE-2013-6460Nokogiri gem 1.5.x has Denial of Service via infinite loop when parsing XML documentsRuby Nokogiri gem · nokogiriUnratedFix availableNov 5, 2019
CVE-2013-6365Horde Groupware Web mail 5.1.2 has CSRF with requests to change permissionsUnratedNov 5, 2019
CVE-2013-6364Horde Groupware Webmail Edition has CSRF and XSS when saving search as a virtual address bookUnratedNov 5, 2019
CVE-2019-17221PhantomJS through 2.1.1 has an arbitrary file read vulnerability, as demonstrated by an XMLHttpRequest for a file:// URI.phantomjsUnratedNov 5, 2019
CVE-2016-1000002gdm3 3.14.2 and possibly later has an information leak before screen lockUnratedNov 5, 2019
CVE-2013-4110Cryptocat has an Unspecified Chat Participant User List DisclosureCryptocatUnratedNov 5, 2019
CVE-2013-4107Cryptocat before 2.0.22: cryptocat.js handlePresence() has cross site scriptingCryptocatUnratedNov 5, 2019
CVE-2019-10223A security issue was discovered in the kube-state-metrics versions v1.7.0 and v1.7.1.Red Hat kube-state-metrics · k8s.io/kube-state-metricsMedium · 5.3Fix availableNov 5, 2019