CVEs published in September 2020
1,908 vulnerabilities, 200 critical, 8 exploited.
emojionenpmCross-Site Scripting in emojioneNo scorerendrnpmXSS in client rendered block templates in rendrNo scoregmail-jsnpmDOM-based XSS in gmail-jsNo scorebootstrap-tagsinputnpmCross-Site Scripting in bootstrap-tagsinputNo scoreswagger-uinpmCross-Site Scripting in swagger-uiNo scoresequelizenpmSQL Injection via GeoJSON in sequelize9.8 Criticalezseed-transmissionnpmInsecure Defaults Leads to Potential MITM in ezseed-transmission4.2 MediumjsrendernpmTemplate Injection in jsrender6.3 Mediumjwsnpm,@rootio/jwsRoot +1 moreForgeable Public/Private Tokens in jws8.7 HighgmnpmCommand Injection in gmNo scorebleachnpmRegular Expression Denial of Service in bleach5.3 MediumyarnpmDenial of Service in yar7.5 High- spiceworksSpiceworks Version <= 7.5.00107 is affected by XSS. Any name typed on Custom Groups function is...5.4 Medium
- gmapfpgmapfp.org Joomla Component GMapFP J3.30pro is affected by Insecure Permissions. An attacker can...7.5 High
- rapid7 metasploit, metasploit framework +1 moreRapid7 Metasploit HTTP Handler Denial of Service7.5 High
- os4ed opensisSQL injection vulnerabilities exist in the ID parameters of OS4Ed openSIS 7.3 pages. The id...6.4 Medium
- os4ed opensisSQL injection vulnerabilities exist in the ID parameters of OS4Ed openSIS 7.3 pages. The id...6.4 Medium
- os4ed opensisSQL injection vulnerability exists in the ID parameters of OS4Ed openSIS 7.3 pages. The id...6.4 Medium
- os4ed opensisSQL injection vulnerability exists in the CoursePeriodModal.php page of OS4Ed openSIS 7.3. A...6.4 Medium
- os4ed opensisSQL injection vulnerability exists in the CoursePeriodModal.php page of OS4Ed openSIS 7.3. The id...6.4 Medium
- os4ed opensisSQL injection vulnerability exists in the CoursePeriodModal.php page of OS4Ed openSIS 7.3. The...6.4 Medium
- os4ed opensisAn exploitable SQL injection vulnerability exists in the GetSchool.php functionality of OS4Ed...6.4 Medium
- os4ed opensisAn exploitable sql injection vulnerability exists in the email parameter functionality of OS4Ed...6.4 Medium
- os4ed opensisAn exploitable sql injection vulnerability exists in the email parameter functionality of OS4Ed...6.4 Medium
- multiple vendors all trailer power line communications are affected. trailer power line communications, nmfc power line communications +1 moreTrailer Power Line Communications vulnerability4.3 Medium
- os4ed opensisSQL injection vulnerability exists in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3....6.4 Medium
- os4ed opensisSQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3....6.4 Medium
- os4ed opensisSQL injection vulnerability exists in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3....6.4 Medium
- u-rootArbitrary File Write via Archive Extraction (Zip Slip)7.5 High
- u-rootArbitrary File Write via Archive Extraction (Zip Slip)7.5 High
- u-rootArbitrary File Write via Archive Extraction (Zip Slip)7.5 High
- os4ed opensisSQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3....6.4 Medium
- os4ed opensisSQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3....6.4 Medium
- os4ed opensisSQL injection vulnerabilities exist in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3....6.4 Medium
- jenkins, jenkins soapui pro functional testing, jenkins project soapui pro functional testing plugin +2 morePasswords transmitted in plain text by Jenkins ReadyAPI Functional Testing Plugin4.3 Medium
- jenkins soapui pro functional testing, jenkins project soapui pro functional testing plugin +1 morePasswords stored in plain text by Jenkins ReadyAPI Functional Testing Plugin6.5 Medium
- jenkins team foundation server, jenkins project team foundation server plugin +1 moreCredentials stored in plain text by Jenkins tfs Plugin3.3 Low
- jenkins jsgames, jenkins project jsgames plugin +1 moreReflected XSS vulnerability in Jenkins JSGames Plugin6.1 Medium
- jenkins klocwork analysis, jenkins project klocwork analysis plugin +1 moreXXE vulnerability in Jenkins Klocwork Analysis Plugin6.5 Medium
- jenkins valgrind, jenkins project valgrind plugin +1 moreStored XSS vulnerability in Jenkins Valgrind Plugin5.4 Medium
- jenkins valgrind, jenkins project valgrind plugin +1 moreXXE vulnerability in Jenkins Valgrind Plugin7.1 High
- jenkins build failure analyzer, jenkins project build failure analyzer plugin +1 moreXSS vulnerability in Jenkins Build Failure Analyzer Plugin5.4 Medium
- jenkins cadence vmanager, jenkins project cadence vmanager plugin +1 moreStored XSS vulnerability in Jenkins Cadence vManager Plugin5.4 Medium
- jenkins database, jenkins project database plugin +1 moreMissing permission checks in Jenkins Database Plugin6.5 Medium
- jenkins database, jenkins project database plugin +1 moreCSRF vulnerability in Jenkins Database Plugin8.8 High
- jenkins database, jenkins project database plugin +1 moreCSRF vulnerability in Jenkins Database Plugin8.8 High
- jenkins parameterized remote trigger, jenkins project parameterized remote trigger plugin +1 moreSecret stored in plain text by Jenkins Parameterized Remote Trigger Plugin4.3 Medium
- jenkins git parameter, jenkins project git parameter plugin +1 moreStored XSS vulnerability in Jenkins Git Parameter Plugin5.4 Medium
- liferay portalOpen Redirect in Liferay Portal7.5 High
- os4ed opensisSQL injection vulnerabilities exist in the course_period_id parameters used in OS4Ed openSIS 7.3...6.4 Medium
- Show moreLoading…