CVEs published in September 2020
1,908 vulnerabilities, 200 critical, 8 exploited.
personnummercrates.iopersonnummer/rust vulnerable to Improper Input ValidationNo score- rust-lang futures-taskfutures_task::waker may cause a use-after-free if used on a type that isn't 'static7.8 High
- bestzip project bestzipCommand Injection9.8 Critical
- realtimelogic barracudadriveInsecure Service File Permissions in the bd service in Real Time Logic BarracudaDrive v6.5 allow...8.8 High
- noise-java project noise-javaAn issue was discovered in Noise-Java through 2020-08-27. AESGCMOnCtrCipherState.encryptWithAd()...9.8 Critical
- noise-java project noise-javaAn issue was discovered in Noise-Java through 2020-08-27. AESGCMFallbackCipherState.encryptWithAd...9.8 Critical
- noise-java project noise-javaAn issue was discovered in Noise-Java through 2020-08-27. ChaChaPolyCipherState.encryptWithAd()...9.8 Critical
- foxitsoftware phantompdf, reader +1 moreIn Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can execute...8.8 High
- foxitsoftware phantompdf, reader +1 moreIn Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain...7.1 High
- foxitsoftware phantompdf, reader +1 moreIn Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain...8.1 High
- facebook hermesAccess of Resource Using Incompatible Type in Facebook Hermes9.8 Critical
- cisco asyncos, web security appliance (wsa) +1 moreCisco Email Security Appliance, Cisco Content Security Management Appliance, and Cisco Web Security Appliance Information Disclosure Vulnerability4.3 Medium
- cisco enterprise nfv infrastructure softwareCisco Enterprise NFV Infrastructure Software Path Traversal Vulnerability4.3 Medium
- cisco jabberCisco Jabber for Windows Protocol Handler Command Injection Vulnerability8.8 High
- cisco small business rv series router firmware, rv340 firmware, rv340w firmware +2 more +4 moreCisco Small Business RV340 Series Routers Command Injection and Remote Code Execution Vulnerabilities4.7 Medium
- cisco small business rv series router firmware, rv340 firmware, rv340w firmware +2 more +4 moreCisco Small Business RV340 Series Routers Command Injection and Remote Code Execution Vulnerabilities4.7 Medium
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software Authenticated User Privilege Escalation Vulnerability7.8 High
- cisco enterprise nfv infrastructure softwareCisco Enterprise NFV Infrastructure Software File Overwrite Vulnerability8.1 High
- cisco jabberCisco Jabber for Windows Message Handling Arbitrary Code Execution Vulnerability9.9 Critical
- cisco jabberCisco Jabber for Windows Information Disclosure Vulnerability6.5 Medium
- cisco ios xr software, ios xr +1 moreCisco IOS XR Authenticated User Privilege Escalation Vulnerability8.4 High
- cisco jabberCisco Jabber for Windows Universal Naming Convention Link Handling Vulnerability5.7 Medium
- cisco webex meetings, webex teams +1 moreCisco Webex Meetings Client for Windows, Webex Meetings Desktop App, and Webex Teams Information Disclosure Vulnerability4.4 Medium
- cisco webex training, webex meetings +1 moreCisco Webex Training Unauthorized Meeting Join Vulnerability5.3 Medium
- cisco firepower extensible operating system (fxos), firepower extensible operating system +1 moreCisco FXOS Software Buffer Overflow Vulnerability6.0 Medium
- cisco asyncos, email security appliance (esa) +1 moreCisco Email Security Appliance Information Disclosure Vulnerability5.3 Medium
- laravelGuard bypass in Eloquent models affecting Laravel illuminate database component7.5 High
- laravelSQL Server LIMIT / OFFSET SQL Injection in laravel/framework and illuminate/database7.5 High
rnpOSS-FuzzHeap-buffer-overflow in mem_src_readNo scorephpOSS-FuzzUNKNOWN READ in zend_gc_delrefNo scorernpOSS-FuzzHeap-buffer-overflow in rnp_key_store_kbx_from_srcNo scoreyaraOSS-FuzzHeap-buffer-overflow in macho_handle_segmentNo scoreuwebsocketsOSS-FuzzStack-buffer-overflow in uWS::TopicTree::trimTreeNo scoreuwebsocketsOSS-FuzzSegv on unknown address in std::__1::__tree<std::__1::__value_type<unsigned int, std::__1::pair<std::__1::bNo scoresquid3Debiansquid3 - regression updateNo score- debian linux, linux kernel, fedoraproject fedora +1 more +3 moreCVE-2020-14386 does not affect BellSoft software6.7 Medium
airtablenpmMachine-In-The-Middle in airtableNo scoreshowdownnpmReverse Tabnabbing in showdown3.1 Low- xmlsoft libxml2, debian linux, fedoraproject fedora +18 more +20 moreGNOME project libxml2 v2.9.10 and earlier have a global Buffer Overflow vulnerability in...6.5 Medium
- nasm netwide assemblerIn NASM 2.15.04rc3, there is a double-free vulnerability in pp_tokline asm/preproc.c. This is...9.8 Critical
handlebarsnpmDenial of Service in handlebarsNo score- xpdfreader xpdfThere is an invalid memory access in the function TextString::~TextString() located in Catalog.cc...7.8 High
- xpdfreader xpdfThere is an invalid memory access in the function fprintf located in Error.cc in Xpdf 4.0.2. It...7.8 High
dompurifynpmCross-Site Scripting in dompurifyNo scoresaml2-jsnpmAuthentication Bypass in saml2-js6.8 Mediumsimple-crypto-jsnpmInsecure Cryptography Algorithm in simple-crypto-js5.9 Mediumsafer-evalnpmSandbox Breakout / Arbitrary Code Execution in safer-evalNo scoremarkdown-to-jsxnpmCross-Site Scripting in markdown-to-jsxNo scorenode-git-servernpmUnauthorized File Access in node-git-server7.5 Highexpress-fileuploadnpmDenial of Service in express-fileuploadNo score- Show moreLoading…