CVEs published in September 2020
1,908 vulnerabilities, 200 critical, 8 exploited.
- palo alto networks pan-osPAN-OS: Reflected Cross-Site Scripting (XSS) vulnerability in management web interface8.8 High
- health covidsafeIn the COVIDSafe application through 1.0.21 for Android, unsafe use of the Bluetooth transport...5.7 Medium
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreA TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local...7.0 High
- debian linux, linux kernel, fedoraproject fedora +2 moreIn the Linux kernel through 5.8.7, local attackers able to inject conntrack netlink configuration...6.0 Medium
- octopus deployIn Octopus Deploy 2020.3.x before 2020.3.4 and 2020.4.x before 2020.4.1, if an authenticated user...7.5 High
- apache netbeansTo be able to analyze gradle projects, the build scripts need to be executed. Apache NetBeans...9.8 Critical
- kentico xperienceCross Site Scripting (XSS) vulnerability in Kentico before 12.0.75.6.1 Medium
- online bike rental project bike rentalAn Arbitrary File Upload in the Upload Image component in Sourcecodester Online Bike Rental v1.0...9.1 Critical
- projectworlds car rental projectArbitrary File Upload in the Vehicle Image Upload component in Project Worlds Car Rental...9.8 Critical
- stock management system project management systemA persistent cross-site scripting vulnerability in Sourcecodester Stock Management System v1.0...6.1 Medium
- silk-v3-decoder project silk-v3-decoderThe decode program in silk-v3-decoder Version:20160922 Build By kn007 does not strictly check...9.8 Critical
- stock management system project management systemA SQL injection vulnerability in the login component in Stock Management System v1.0 allows...9.8 Critical
- daily tracker system project tracker systemA Cross-site scripting (XSS) vulnerability in 'user-profile.php' in SourceCodester Daily Tracker...6.1 Medium
avahiSUSE,avahi-glib2SUSE +1 moreSecurity update for avahiNo score- redhat jbossweb, jboss enterprise application platform +1 moreA flaw was found in JBossWeb in versions before 7.5.31.Final-redhat-3. The fix for CVE-2020-13935...7.5 High
- sap bank analyzer, s\/4hana for financial products subledger, sap se banking services from sap 9.0(bank analyzer) +1 more +3 moreBanking services from SAP 9.0 (Bank Analyzer), version - 500, and SAP S/4HANA for financial...6.5 Medium
- sap netweaver as abap business server pages, sap se netweaver as abap (bsp test application) +1 moreSAP Netweaver AS ABAP(BSP Test Application sbspext_table), version-700,701,720,730,731,740,750...6.1 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PLT file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated FBX file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated TGA file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated RLE files...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated U3D file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SKP file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SKP file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated FBX file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated FBX file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HDR file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received...4.3 Medium
- sap se business objects business intelligence platform (web intelligence html interface), sap businessobjects business intelligence platform +1 moreSAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface) allows an...4.6 Medium
- sap commerceSAP Commerce versions 6.7, 1808, 1811, 1905, 2005 contains the jSession ID in the backoffice URL...6.4 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated TGA file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PDF file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SKP file received...4.3 Medium
- sap fiori launchpad, sap se fiori(launchpad) +1 moreSAP Fiori Launchpad does not sufficiently encode user controlled inputs, and hence allowing the...4.8 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated 3DM file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated 3DM file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HPGL file...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated CGM file received...4.3 Medium
- sap se netweaver (knowledge management), sap netweaver knowledge management +1 moreSAP NetWeaver (Knowledge Management), version-7.30,7.31,7.40,7.50, allows an authenticated...5.4 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated U3D file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated 3DM file received...4.3 Medium
- sap abap platform, sap se netweaver (abap server) and abap platform +1 moreA Remote Code Execution vulnerability exists in the SAP NetWeaver (ABAP Server, up to release 7...9.1 Critical
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received...4.3 Medium
- sap marketing, sap se marketing (mobile channel servlet) +1 moreSAP Marketing (Servlet), version-130,140,150, allows an authenticated attacker to invoke certain...9.6 Critical
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated EPS file received...4.3 Medium
- Show moreLoading…