CVEs published in September 2020
1,908 vulnerabilities, 200 critical, 8 exploited.
- os4ed opensisA remote code execution vulnerability exists in the install functionality of OS4Ed openSIS 7.4....10.0 Critical
- os4ed opensisA remote code execution vulnerability exists in the install functionality of OS4Ed openSIS 7.4....10.0 Critical
- usvnUSVN (aka User-friendly SVN) before 1.0.10 allows attackers to execute arbitrary code in the...9.8 Critical
- usvnUSVN (aka User-friendly SVN) before 1.0.10 allows CSRF, related to the lack of the SameSite...8.8 High
- os4ed opensisA remote code execution vulnerability exists in the Modules.php functionality of OS4Ed openSIS 7...9.9 Critical
- os4ed opensisSQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The...9.8 Critical
- os4ed opensisSQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The...9.8 Critical
- os4ed opensisSQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The...9.8 Critical
- os4ed opensisSQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The...9.8 Critical
openwhisknpmRemote Memory Exposure in openwhiskNo scoremongoosenpmRemote Memory Exposure in mongoose5.1 MediumservenpmByass due to validation before canonicalization in serveNo scoremrk.jsnpmCross-Site Scripting in mrk.jsNo scoreredis-commandernpmReflected Cross-Site Scripting in redis-commanderNo score@vivaxy/herenpmDirectory Traversal in @vivaxy/hereNo scorefeaturebooknpmDirectory Traversal in featurebookNo scorehooka-toolsnpmSilently Runs Cryptocoin Miner in hooka-toolsNo score- trend micro apex one, worry-free business security, trendmicro worry-free business security services +2 more +4 moreA vulnerability in Trend Micro Apex One on macOS may allow an attacker to manipulate a certain...7.8 High
- trend micro apex one, worry-free business security, trendmicro worry-free business security services +1 more +3 moreA vulnerability in an Trend Micro Apex One dll may allow an attacker to manipulate it to cause an...7.1 High
- trend micro apex one, worry-free business security, apex one, officescan, and worry-free business security +1 more +3 moreA vulnerability in Trend Micro Apex One on Microsoft Windows may allow an attacker to manipulate...7.8 High
- trend micro apex one, officescan, worry-free business security +2 more +4 moreA vulnerability in Trend Micro Apex One and OfficeScan XG SP1 on Microsoft Windows may allow an...7.8 High
yjmyjmyjmnpmDirectory Traversal in yjmyjmyjmNo score- senstar symphonyThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected...8.8 High
nodeload-nmickulinpmDirectory Traversal in nodeload-nmickuliNo scorewenluhong1npmDirectory Traversal in wenluhong17.5 High- os4ed opensisAn exploitable SQL injection vulnerability exists in the login functionality of OS4Ed openSIS 7.3...9.8 Critical
- sagemcom f\@st 5280 router firmwareSagemcom F@ST 5280 routers using firmware version 1.150.61 have insecure deserialization that...8.8 High
- os4ed opensisAn exploitable SQL injection vulnerability exists in the DownloadWindow.php functionality of...6.4 Medium
pidusagenpmCommand Injection in pidusageNo score- librehealth ehrinterface/new/new_comprehensive_save.php in LibreHealth EHR 2.0.0 suffers from an authenticated...8.8 High
- stock management system project management systemA Reflected Cross-Site Scripting (XSS) vulnerability in the index.php login-portal webpage of...6.4 Medium
- oswapp warehouse inventory systemA Cross-Site Request Forgery (CSRF) vulnerability in edit_user.php in OSWAPP Warehouse Inventory...8.8 High
- tailor management system project management systemA Reflected Cross-Site Scripting (XSS) vulnerability in the index.php login-portal webpage of...6.4 Medium
- get-simple getsimple cmsA Reflected Cross-Site Scripting (XSS) vulnerability in GetSimple CMS v3.3.16, in the admin/index...6.1 Medium
fury-adapter-swaggernpmfury-adapter-swagger allows arbitrary file read from system7.3 High- duffel paginatorRemote Code Execution in paginator(hex)9.0 Critical
- os4ed opensisAn exploitable SQL injection vulnerability exists in the Validator.php functionality of OS4Ed...6.4 Medium
- ibm infosphere guardiumIBM InfoSphere Guardium 7.0, 8.0, 8.01, and 8.2 is vulnerable to cross-site scripting, caused by...6.4 Medium
- ibm infosphere guardiumIBM InfoSphere Guardium 8.0, 8.01, and 8.2 is vulnerable to XML external entity injection, caused...4.3 Medium
- ibm infosphere guardiumIBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a remote attacker to bypass security...3.7 Low
mqttnpmDenial of Service in mqtt7.5 HighpivottablenpmCross-Site Scripting (XSS) in pivottableNo scorec3npmCross-Site Scripting in c3No scoreswagger-uinpmCross-Site Scripting in swagger-uiNo scorenode-krb5npmSpoofing attack due to unvalidated KDC in node-krb5No scorefueluxnpmfuelux vulnerable to Cross-Site Scripting in Pillbox featureNo score- ibm infosphere guardiumIBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a remote attacker to traverse directories...5.3 Medium
- ibm infosphere guardiumIBM InfoSphere Guardium 8.0, 8.01, and 8.2 is vulnerable to SQL injection. A remote authenticated...6.3 Medium
swagger-uinpmCross-Site Scripting in swagger-uiNo scorejqtreenpmCross-Site Scripting in jqtreeNo score- Show moreLoading…