CVEs published in September 2020
1,908 vulnerabilities, 200 critical, 8 exploited.
loopbacknpmImproper Authorization in loopbackNo scorebootstrap-vuenpmCross-Site Scripting in bootstrap-vueNo scoreloopback-connector-mongodbnpmNoSQL Injection in loopback-connector-mongodbNo scoresandboxnpmSandbox Breakout / Arbitrary Code Execution in sandboxNo scoresemantic-ui-searchnpmCross-Site Scripting in semantic-ui-searchNo scorestatic-evalnpmSandbox Breakout / Arbitrary Code Execution in static-eval7.3 Highoffice-converternpmRemote Code Execution in office-converterNo scorepomelo-monitornpmRemote Code Execution in pomelo-monitorNo scorerails-session-decodernpmSensitive Data Exposure in rails-session-decoderNo scoremermaidnpmCross-Site Scripting in mermaidNo score- d-link dcs-2530l and dcs-2670l devices, dlink dcs-2530l firmware, dcs-2670l firmware +7 more +9 moreAn issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02...7.5 High
- d-link dcs-2530l and dcs-2670l devices, dlink dcs-2530l firmware, dcs-2670l firmware +7 more +9 moreAn issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02...8.8 High
bestzipnpmCommand Injection in bestzipNo score- igniterealtime openfireIn Ignite Realtime Openfire 4.5.1 a Stored Cross-site Vulnerability allows an attacker to execute...6.1 Medium
- igniterealtime openfireA Reflected XSS vulnerability was discovered in Ignite Realtime Openfire version 4.5.1. The XSS...6.1 Medium
- igniterealtime openfireIgnite Realtime Openfire 4.5.1 has a reflected Cross-site scripting vulnerability which allows an...6.1 Medium
- fabbricadigitale multiuxA post-authenticated stored XSS was found in MultiUx v.3.1.12.0 via the /multiux/SaveMailbox...5.4 Medium
- razer chroma sdkRazer Chroma SDK Rest Server through 3.12.17 allows remote attackers to execute arbitrary...8.1 High
- zyxel vmg5313-b30b firmwareZyxel VMG5313-B30B router on firmware 5.13(ABCJ.6)b3_1127, and possibly older versions of...9.8 Critical
- cyber security cloud , inc. shadankun server security type (excluding normal blocking method types), shadan-kun server security type +1 moreShadankun Server Security Type (excluding normal blocking method types) Ver.1.5.3 and earlier...7.5 High
- debian freedomboxFreedomBox through 20.13 allows remote attackers to obtain sensitive information from the /server...5.3 Medium
pcapplusplusOSS-FuzzBad-cast to pcpp::Layer from invalid vptrNo score- arm mbed tls, debian linux, fedoraproject fedora +2 moreA Lucky 13 timing side channel in mbedtls_ssl_decrypt_buf in library/ssl_msg.c in Trusted...5.5 Medium
- superantispyware professional xSUPERAntiSyware Professional X Trial 10.0.1206 is vulnerable to local privilege escalation...7.8 High
- lenovo thinkpad, thinkpad t490 \(20nx\) firmware, thinkpad t490 \(20qx\) firmware +8 more +10 moreIn Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this...2.4 Low
- lenovo thinkpad a285 bios, thinkpad a485 bios, thinkpad t495 bios +9 more +11 moreThe BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad A285, BIOS versions up...6.1 Medium
markdown-it-toc-and-anchornpmDenial of Service in markdown-it-toc-and-anchor7.5 HighjingonpmCross-Site Scripting in jingoNo scoremd-data-tablenpmCross-Site Scripting in md-data-tableNo scorebuefynpmCross-Site Scripting in buefyNo scoretext-qrcodenpmEntropy Backdoor in text-qrcode9.8 Criticalsamsung-remotenpmCommand Injection in samsung-remoteNo scoreascii-artnpmCommand Injection in ascii-artNo scoreexpress-cartnpmNoSQL injection in express-cartNo scoremerge-objectsnpmPrototype Pollution in merge-objectsNo scorenjwtnpmOut-of-bounds Read in njwtNo scoreexpress-cartnpmPath Traversal in express-cartNo score- accusoft imagegearA code execution vulnerability exists in the DICOM parse_dicom_meta_info functionality of...9.8 Critical
- accusoft imagegearA memory corruption vulnerability exists in the TIFF handle_COMPRESSION_PACKBITS functionality of...8.1 High
- apache cassandra, netapp oncommand insight +1 moreMan-in-the-middle attack in Apache Cassandra5.9 Medium
- redlion n-tron 702-w firmware, n-tron 702m12-w firmware +1 moreThe affected product is vulnerable due to an undocumented interface found on the device, which...9.8 Critical
- redlion n-tron 702-w firmware, n-tron 702m12-w firmware +1 moreThe affected product is vulnerable to reflected cross-site scripting, which may allow an attacker...9.0 Critical
react-marked-markdownnpmCross-Site Scripting in react-marked-markdownNo scorebase64urlnpm,@rootio/base64urlRoot +1 moreOut-of-bounds Read in base64urlNo score- redlion n-tron 702-w firmware, n-tron 702m12-w firmware +1 moreThe affected product is vulnerable to cross-site request forgery, which may allow an attacker to...8.8 High
- redlion n-tron 702-w firmware, n-tron 702m12-w firmware +1 moreThe affected product is vulnerable to stored cross-site scripting, which may allow an attacker to...9.0 Critical
- magmi project magmiCross-Site Request Forgery in MAGMI8.8 High
- magmi project magmiAuthentication bypass in MAGMI9.8 Critical
- zte zxr10 2800-4 almpufb\(low\) firmwareA ZTE product has a DoS vulnerability. Because the equipment couldn’t distinguish the attack...5.3 Medium
- zte zxiptv firmwareA ZTE product is impacted by the cryptographic issues vulnerability. The encryption algorithm is...9.1 Critical
- Show moreLoading…