CVEs published in September 2020
1,908 vulnerabilities, 200 critical, 8 exploited.
- cryptsetup project cryptsetup, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreA vulnerability was found in upstream release cryptsetup-2.2.0 where, there's a bug in LUKS2...7.8 High
ipfs-bitswapnpmDenial of Service in ipfs-bitswap5.9 MediumloopbacknpmSensitive Data Exposure in loopbackNo scoreag-gridnpmag-grid Cross-Site Scripting vulnerabilityNo scorevalue-censorshipnpmSandbox Breakout / Arbitrary Code Execution in value-censorshipNo scorefomantic-uinpmCross-Site Scripting in fomantic-uiNo scorejquery-mobilenpmCross-Site Scripting in jquery-mobileNo scoregoogle-closure-librarynpmCross-Site Scripting in google-closure-libraryNo scorewangeditornpmCross-Site Scripting in wangeditorNo score- dell elastic cloud storage, emc elastic cloud storage +1 moreDell EMC ECS, versions prior to 3.5, contains an Exposure of Resource vulnerability. A remote...8.1 High
- dell inspiron 7352 bios, cpg bios +1 moreDell Inspiron 7352 BIOS versions prior to A12 contain a UEFI BIOS Boot Services overwrite...6.8 Medium
- dell g7 17 7790 bios, cpg bios +1 moreDell G7 17 7790 BIOS versions prior to 1.13.2 contain a UEFI BIOS Boot Services overwrite...6.8 Medium
- dell inspiron 7347 bios, cpg bios +1 moreDell Inspiron 7347 BIOS versions prior to A13 contain a UEFI BIOS Boot Services overwrite...6.8 Medium
- dell emc isilon onefs, emc powerscale onefs, isilon onefs +2 moreDell EMC Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale OneFS version 9.0.0...8.8 High
- kaspersky virus removal toolKaspersky Virus Removal Tool (KVRT) prior to 15.0.23.0 was vulnerable to arbitrary file...7.1 High
- kaspersky vpn secure connectionThe installer of Kaspersky VPN Secure Connection prior to 5.0 was vulnerable to arbitrary file...7.1 High
- kaspersky security center, security center web console +1 moreInstallers of Kaspersky Security Center and Kaspersky Security Center Web Console prior to 12 &...7.8 High
- tradingtechnologies trading technologies messagingA flaw in Trading Technologies Messaging 7.1.28.3 (ttmd.exe) relates to invalid parameter...7.5 High
- tradingtechnologies trading technologies messagingA flaw exists in Trading Technologies Messaging 7.1.28.3 (ttmd.exe) due to improper validation of...7.5 High
- netapp clustered data ontapClustered Data ONTAP versions prior to 9.3P19, 9.5P14, 9.6P9 and 9.7 are susceptible to a...5.4 Medium
- raonwiz raon kuploadRAONWIZ v2018.0.2.50 and earlier versions contains a vulnerability that could allow remote files...7.8 High
preactnpmHTML Injection in preactNo scoregraphql-code-generatornpmInsecure Default Configuration in graphql-code-generatorNo scorecocos-utilsnpmCommand Injection in cocos-utilsNo score- ibm spectrum protect operations centerIBM Spectrum Protect Operations Center 7.1.0.000 through 7.1.10 and 8.1.0.000 through 8.1.9 may...9.1 Critical
- ibm doors next, engineering workflow management, engineering requirements management doors next +8 more +10 moreIBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This...5.4 Medium
- ibm doors next, engineering workflow management, engineering requirements management doors next +8 more +10 moreIBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This...5.4 Medium
- ibm doors next, engineering workflow management, engineering requirements management doors next +8 more +10 moreIBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This...5.4 Medium
glancenpmUnauthorized File Access in glanceNo scorebuttlenpmCross-Site Scripting in buttleNo scoreexpress-cartnpmCross-Site Scripting in express-cartNo score- johnkerl millerArbitrary code execution via configuration file in Miller8.2 High
- sensiolabs httpclient, symfony, fedoraproject fedora +2 moreRCE in Symfony8.0 High
- dolibarrDolibarr Unrestricted Upload of File with Dangerous Type8.8 High
- erlang rebar3The rebar3 tool 3.0.0-beta.3 through 3.13.2 for Erlang allows remote code execution.9.8 Critical
- teamwireThe Teamwire application 5.3.0 for Android allows physically proximate attackers to exploit a...6.1 Medium
- golang go, fedoraproject fedora, opensuse leap +1 more +3 moreGo before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI...6.1 Medium
- localization manager project managerIncorrect Authorization in TYPO3 extension4.3 Medium
- derhansen event management and registrationInformation Disclosure in TYPO3 extension sf_event_mgt4.3 Medium
- forlogic qualiexForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege escalation via...8.8 High
- forlogic qualiexBecause of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin...9.8 Critical
- forlogic qualiexForLogic Qualiex v1 and v3 has weak token expiration. This allows remote unauthenticated...9.8 Critical
- stock management system project management systemA Cross-Site Request Forgery (CSRF) vulnerability in changeUsername.php in SourceCodester Stock...7.1 High
smart-extendnpmPrototype Pollution in smart-extendNo scoretomatonpmCommand Injection in tomatoNo scoregoogleapisnpmImproper Authorization in googleapisNo scoreserialize-to-jsnpmDenial of Service in serialize-to-jsNo score- raszi tmp, node-tmp +1 moretmp does not restrict arbitrary temporary file / directory write via symbolic link `dir` parameter2.5 Low
- auth0 jsonwebtoken, node-jsonwebtoken +1 morejsonwebtoken vulnerable to signature validation bypass due to insecure default algorithm in jwt.verify()6.4 Medium
pi_video_recordingnpmRemote Code Execution in pi_video_recordingNo score- Show moreLoading…