CVEs published in September 2020
1,908 vulnerabilities, 200 critical, 8 exploited.
hexo-adminnpmCross-Site Scripting in hexo-adminNo scoremongodbnpmDenial of Service in mongodbNo score- facebook whatsapp business for android, whatsapp business for iphone, whatsapp +3 more +5 moreA stack write overflow in WhatsApp for Android prior to v2.20.35, WhatsApp Business for Android...8.8 High
- facebook whatsapp business for android, whatsapp business for iphone, whatsapp +3 more +5 moreA user controlled parameter used in video call in WhatsApp for Android prior to v2.20.17,...9.8 Critical
- facebook whatsapp business for android, whatsapp for android, whatsapp +1 more +3 moreA URL validation issue in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for...7.5 High
- facebook whatsapp desktop, whatsapp desktop +1 moreA security feature bypass issue in WhatsApp Desktop versions prior to v0.3.4932 could have...10.0 Critical
- facebook whatsapp business for android, whatsapp for android, whatsapp +1 more +3 moreA buffer overflow in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android...8.8 High
- facebook whatsapp desktop, whatsapp desktop +1 moreAn input validation issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed...6.1 Medium
- heybbs project heybbsHeybbs v1.2 has a SQL injection vulnerability in user.php file via the ID parameter which may...9.8 Critical
- heybbs project heybbsHeybbs v1.2 has a SQL injection vulnerability in msg.php file via the ID parameter which may...9.8 Critical
- heybbs project heybbsHeybbs v1.2 has a SQL injection vulnerability in login.php file via the username parameter which...9.8 Critical
http-live-simulatornpmDenial of Service in http-live-simulatorNo scoreibm_dbnpmSensitive Data Exposure in ibm_db5.0 MediumapostrophenpmDenial of Service in apostropheNo scorehelmet-cspnpmConfiguration Override in helmet-csp6.5 Medium@wturyn/swagger-injectornpmPath Traversal in @wturyn/swagger-injectorNo scoreswagger-injectornpmPath Traversal in swagger-injectorNo scoremavon-editornpmCross-Site Scripting in mavon-editor6.5 MediumsubtextnpmDenial of Service in subtextNo scoresnekservenpmCross-Site Scripting in snekserveNo score@commercial/subtextnpmDenial of Service in @commercial/subtextNo score@hapi/subtextnpmDenial of Service in @hapi/subtextNo scoresql-injectionnpmRegular Expression Denial of Service in sql-injectionNo scorelarvitbase-wwwnpmUnintended Require in larvitbase-wwwNo scorepublicnpmPath Traversal in publicNo scoresequelizenpmDenial of Service in sequelizeNo scoremarsdbnpmCommand Injection in marsdbNo scoregraphql-shieldnpmAuthorization Bypass in graphql-shieldNo scoregrpc-ts-health-checknpmDenial of Service in grpc-ts-health-checkNo scoremithrilnpmPrototype Pollution in mithrilNo scorenotevilnpmSandbox Breakout / Arbitrary Code Execution in notevilNo scoref-servnpmPath Traversal in f-servNo scoreconsole-feednpmCross-Site Scripting in console-feedNo scorefirefoxUbuntufirefox regressionsNo scoreotpauthnpmAuthentication Bypass in otpauthNo scoredmn-js-properties-panelnpmCross-Site Scripting in dmn-js-properties-panelNo scorecmmn-js-properties-panelnpmCross-Site Scripting in cmmn-js-properties-panelNo scorebpmn-js-properties-panelnpmCross-Site Scripting in bpmn-js-properties-panelNo scoremarkednpmRegular Expression Denial of Service in markedNo scoredomokeepernpmLocal File Inclusion in domokeeperNo scorelodash.mergewithnpmPrototype Pollution in lodash.mergewithNo scorelodash.defaultsdeepnpmPrototype Pollution in lodash.defaultsdeepNo scorelodash.mergewithnpmPrototype Pollution in lodash.mergewithNo score- huawei mate 20, mate 20 firmware +1 moreHUAWEI Mate 20 smart phones with Versions earlier than 10.1.0.163(C00E160R3P8) have a denial of...2.4 Low
lodash.defaultsdeepnpmPrototype Pollution in lodash.defaultsdeepNo scorelodash.mergenpm,@rootio/lodash.mergeRoot +1 morePrototype Pollution in lodash.mergeNo score- huawei honor 20 pro firmware, honor view 20 firmware, oxfords-an00a firmware +7 more +9 moreHuawei smartphones HONOR 20 PRO Versions earlier than 10.1.0.230(C432E9R5P1),Versions earlier...5.5 Medium
- daily tracker system project tracker systemA SQL injection vulnerability in login in Sourcecodetester Daily Tracker System 1.0 allows...9.8 Critical
- huawei b2368-22 firmware, b2368-57 firmware, b2368-66 firmware +2 moreB2368-22 V100R001C00;B2368-57 V100R001C00;B2368-66 V100R001C00 have a command injection...6.8 Medium
- artifex ghostscript, redhat enterprise linux +1 moreA use after free was found in igc_reloc_struct_ptr() of psi/igc.c of ghostscript-9.25. A local...5.5 Medium
- Show moreLoading…