CVEs published in September 2020
1,908 vulnerabilities, 200 critical, 8 exploited.
- os4ed opensisSQL injection vulnerabilities exist in the course_period_id parameters used in OS4Ed openSIS 7.3...6.4 Medium
- os4ed opensisSQL injection vulnerabilities exist in the course_period_id parameters used in OS4Ed openSIS 7.3...6.4 Medium
net-snmpUbuntunet-snmp regressionNo score- opensuse open build serviceobs-service-download_files allows downloading from localhost or intranet hosts6.5 Medium
- djangoproject django, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreDjango Incorrect Default Permissions7.5 High
- djangoproject django, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreDjango Incorrect Default Permissions7.5 High
- guidesmiths worksmithPrototype Pollution9.8 Critical
- safe-object2 project safe-object2Prototype Pollution9.8 Critical
- gedi project gediPrototype Pollution9.8 Critical
- yola promisehelpersPrototype Pollution9.8 Critical
- tiny-conf project tiny-confPrototype Pollution9.8 Critical
- node-oojs project node-oojsPrototype Pollution9.8 Critical
- nodee-utils project nodee-utilsPrototype Pollution9.8 Critical
- digital bazaar node-forge, digitalbazaar forge +1 morePrototype Pollution9.8 Critical
- locutusPrototype Pollution9.8 Critical
- dot-notes project dot-notesPrototype Pollution9.8 Critical
- gammautils project gammautilsPrototype Pollution9.8 Critical
- realseriousgames confuciousPrototype Pollution9.8 Critical
- deep-get-set project deep-get-setPrototype Pollution9.8 Critical
- invertase deepsPrototype Pollution9.8 Critical
- arr-flatten-unflatten project arr-flatten-unflattenPrototype Pollution9.8 Critical
- openfind mail2000Openfind Mail2000 - Broken Access Control6.6 Medium
- atlassian jira, jira server, jira data center +1 more +3 moreAffected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate...7.5 High
- netgear r8300 firmwareNETGEAR R8300 devices before 1.0.2.134 are affected by command injection by an unauthenticated...9.6 Critical
phpOSS-FuzzUNKNOWN READ in zend_gc_delrefNo scorearrowOSS-FuzzHeap-buffer-overflow in void arrow::internal::TransferBitmap<No score- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, kamorta firmware +26 more +28 moreu'Out of bound access can happen in MHI command process due to lack of check of command channel...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9607 firmware, nicobar firmware +15 more +17 moreu'Possible use-after-free while accessing diag client map table since list can be reallocated due...7.8 High
- google androidIn various functions in fscrypt_ice.c and related files in some implementations of f2fs...4.4 Medium
- google android, oracle communications cloud native core binding support function, communications cloud native core network exposure function +1 more +3 moreIn uvc_scan_chain_forward of uvc_driver.c, there is a possible linked list corruption due to an...5.5 Medium
- google androidIn setInstallerPackageName of PackageManagerService.java, there is a missing permission check....7.8 High
- google androidIn showLimitedSimFunctionWarningNotification of NotificationMgr.java, there is a possible...5.5 Medium
- google androidIn getNotificationBuilder of CarrierServiceStateTracker.java, there is a possible permission...5.5 Medium
- google androidIn various places in Telephony, there is a possible permission bypass due to an unsafe...5.5 Medium
- google androidIn showNotification of EmergencyCallbackModeService.java, there is a possible permission bypass...5.5 Medium
- google androidIn onCreate of BluetoothPairingDialog.java, there is a possible tapjacking vector due to an...7.8 High
- google androidIn decrypt and decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to a...5.5 Medium
- google androidIn getLayerDebugInfo of SurfaceFlinger.cpp, there is a possible code execution due to a double...7.8 High
- google androidIn applyPolicy of PackageManagerService.java, there is possible arbitrary command execution as...7.8 High
- google androidIn the app zygote SE Policy, there is a possible permissions bypass. This could lead to local...5.5 Medium
- google androidIn createSaveNotification of RecordingService.java, there is a possible permission bypass due to...5.5 Medium
- google androidIn createEmergencyLocationUserNotification of GnssVisibilityControl.java, there is a possible...7.8 High
- google androidIn onCreate of RequestPermissionActivity.java, there is a possible tapjacking vector due to an...5.5 Medium
- google androidIn Parse_insh of eas_mdls.c, there is a possible out of bounds write due to an incorrect bounds...5.5 Medium
- google androidIn Parse_art of eas_mdls.c, there is a possible out of bounds write due to an incorrect bounds...5.5 Medium
- google androidIn Parse_ins of eas_mdls.c, there is a possible out of bounds write due to a missing bounds check...5.5 Medium
- google androidIn RunInternal of dumpstate.cpp, there is a possible user consent bypass due to an uncaught...2.3 Low
- google androidIn Parse_wave of eas_mdls.c, there is a possible out of bounds write due to an integer overflow....7.5 High
- google androidIn allocExcessBits of bitalloc.c, there is a possible out of bounds write due to an incorrect...9.8 Critical
- google androidIn the Bluetooth service, there is a possible spoofing attack due to a logic error. This could...5.7 Medium
- Show moreLoading…