CVEs published in September 2020
1,908 vulnerabilities, 200 critical, 8 exploited.
traceroutenpmCommand Injection in tracerouteNo scoreparselnpmInsufficient Entropy in parselNo scoreparselnpmInsecure Cryptography Algorithm in parselNo scoreparselnpmHardcoded Initialization Vector in parselNo score@hapi/boomnpmCross-Site Scripting in @hapi/boom6.5 Mediumnpm-git-publishnpmCommand Injection in npm-git-publishNo scoremeta-gitnpmCommand Injection in meta-gitNo scoreexpress-laravel-passportnpmAuthentication Bypass in express-laravel-passportNo scoreatlasboard-atlassian-packagenpmCross-Site Scripting in atlasboard-atlassian-packageNo scoremongodb-query-parsernpmRemote Code Execution in mongodb-query-parserNo scoregitingnpmCommand Injection in gitingNo scoreftp-srvnpmServer-Side Request Forgery in ftp-srvNo scoretype-graphqlnpmInformation Exposure in type-graphqlNo scorepassport-cognitonpmImproper Authorization in passport-cognitoNo scorenextcloud-vue-collectionsnpmCross-Site Scripting in nextcloud-vue-collectionsNo scoreplotternpmCommand Injection in plotterNo scoregnuplotnpmCommand Injection in gnuplotNo scorebin-linksnpmGlobal node_modules Binary Overwrite in bin-linksNo scorebin-linksnpmSymlink reference outside of node_modules in bin-linksNo scoretreekillnpmCommand Injection in treekillNo scorebin-linksnpmArbitrary File Write in bin-linksNo scorevue-momentnpmOutdated Static Dependency in vue-moment5.3 MediumreactnpmCross-Site Scripting in react6.5 Medium- mozilla firefox, firefox esr, thunderbird +2 moreIf Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would...8.8 High
- appsbd best support systemAn Authenticated Persistent XSS vulnerability was discovered in the Best Support System, tested...5.4 Medium
reactnpmCross-Site Scripting in reactNo scorelocalevalnpmSandbox Breakout / Arbitrary Code Execution in localevalNo scorehtml-pdf-chromenpmServer-Side Request Forgery in html-pdf-chromeNo scorenotevilnpmSandbox Breakout / Prototype Pollution in notevilNo scoresahmatnpmPrototype Pollution in sahmatNo scoresafe-object2npmPrototype Pollution in safe-object2No scoregetsetdeepnpmPrototype Pollution in getsetdeepNo scoredeep-setternpmPrototype Pollution in deep-setterNo scoreget-setternpmPrototype Pollution in get-setterNo scorereggaenpmPrototype Pollution in reggaeNo scoremarkdownnpmRegular Expression Denial of Service in markdownNo scoreunflattennpmPrototype Pollution in unflattenNo scoreflat-wrapnpmPrototype Pollution in flat-wrapNo scorevevalnpmSandbox Breakout / Arbitrary Code Execution in vevalNo score@zhaoyao91/eval-in-vmnpmSandbox Breakout / Arbitrary Code Execution in @zhaoyao91/eval-in-vmNo scorepitboss-ngnpmSandbox Breakout / Arbitrary Code Execution in pitboss-ngNo scoresandboxnpmSandbox Breakout / Arbitrary Code Execution in sandboxNo scorelighter-vmnpmSandbox Breakout / Arbitrary Code Execution in lighter-vmNo score- zohocorp manageengine applications managerZoho ManageEngine Applications Manager 14710 and before allows an authenticated admin user to...7.2 High
- mcafee true key, mcafee,llc mcafee true key windows client +1 moreSensitive Data Exposure vulnerability in McAfee True Key Windows Client5.0 Medium
- gnu gnutls, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreAn issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference...7.5 High
- ibm infosphere information serverIBM InfoSphere Information Server 11.7 is vulnerable to stored cross-site scripting. This...6.4 Medium
- ibm infosphere metadata asset manager, infosphere information server +1 moreIBM InfoSphere Metadata Asset Manager 11.7 is vulnerable to server-side request forgery. By...5.7 Medium
- ibm aspera connectIBM Aspera Connect 3.9.9 could allow a remote attacker to execute arbitrary code on the system,...7.8 High
- arubanetworks analytics and location engineA vulnerability exists in the Aruba ClearPass C1000 S-1200 R4 HW-Based Appliance Analytics and...4.9 Medium
- Show moreLoading…