CVEs published in September 2020
1,908 vulnerabilities, 200 critical, 8 exploited.
- mcafee agent, mcafee llc ma for windows +1 moreDLL Injection vulnerability in MA for Windows6.0 Medium
- mcafee agent, mcafee llc dxl for mac shipped with ma +1 morePrivilege Escalation vulnerability in McAfee DXL for Mac8.2 High
- mcafee agent, mcafee llc ma for windows +1 morePrivilege Escalation vulnerability in MA for Windows7.8 High
- mcafee agent, mcafee llc ma for windows +1 moreDLL Search Order Hijacking in MA for Windows7.8 High
- atop technology 3g/4g lte cellular to ethernet and serial secure industrial gateway se5901, 3g/4g lte cellular to ethernet and serial secure industrial gateway se5901b, 3g/4g lte cellular to ethernet and serial secure industrial gateway se5904d +11 more +13 moreAtop Technology 3G/4G LTE Cellular to Ethernet and Serial Secure Industrial Gateway - Command Injection5.5 Medium
- twilio authy 2-factor authenticationA race condition in the Twilio Authy 2-Factor Authentication application before 24.3.7 for...5.1 Medium
- linux kernelThe Linux kernel 4.9.x before 4.9.233, 4.14.x before 4.14.194, and 4.19.x before 4.19.140 has a...7.8 High
- apache activemq, debian linux, oracle communications diameter signaling router +1 more +3 moreImproper Authentication in Apache ActiveMQ5.9 Medium
- accel-pppHeap buffer overflow in ACCEL-PPP8.2 High
- libproxy project libproxy, canonical ubuntu linux, debian linux +2 more +4 moreurl::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger...7.5 High
- nagios xiAn issue was found in Nagios XI before 5.7.3. There is a privilege escalation vulnerability in...9.8 Critical
- facebook hermesSigned to Unsigned Conversion Error in Facebook Hermes8.1 High
- ingenico telium 2 firmwareIngenico Telium 2 POS terminals have an insecure NTPT3 protocol. This is fixed in Telium 2 SDK v9...6.8 Medium
- ingenico telium 2 firmwareIngenico Telium 2 POS terminals have a buffer overflow via SOCKET_TASK in the NTPT3 protocol....6.8 Medium
- ingenico telium 2 firmwareIngenico Telium 2 POS terminals allow arbitrary code execution via the TRACE protocol. This is...6.8 Medium
- ingenico telium 2 firmwareIngenico Telium 2 POS terminals have hardcoded FTP credentials. This is fixed in Telium 2 SDK v9...6.6 Medium
- ingenico telium 2 firmwareIngenico Telium 2 POS terminals have a buffer overflow via the RemotePutFile command of the NTPT3...6.6 Medium
- ingenico telium 2 firmwareIngenico Telium 2 POS terminals have a buffer overflow via the 0x26 command of the NTPT3 protocol...6.6 Medium
- ingenico telium 2 firmwareIngenico Telium 2 POS terminals have an insecure TRACE protocol. This is fixed in Telium 2 SDK v9...6.8 Medium
- ingenico telium 2 firmwareIngenico Telium 2 POS terminals have hardcoded PPP credentials. This is fixed in Telium 2 SDK v9...6.8 Medium
- ingenico telium 2 firmwareIngenico Telium 2 POS Telium2 OS allow bypass of file-reading restrictions via the NTPT3 protocol...4.6 Medium
- ingenico telium 2 firmwareIngenico Telium 2 POS terminals have undeclared TRACE protocol commands. This is fixed in Telium...6.8 Medium
- facebook hermesOut-of-bounds Read and Out-of-bounds Write in Facebook Hermes8.1 High
- siemens simatic s7-300 cpu family (incl. related et200 cpus and siplus variants), simatic s7-400 cpu family (incl. siplus variants), simatic winac rtx (f) 2010 +15 more +17 moreA vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and...6.5 Medium
- siemens spectrum power 4A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP8). If configured...5.3 Medium
- siemens polarion subversion webclientA vulnerability has been identified in Polarion Subversion Webclient (All versions). The web...8.1 High
- siemens polarion subversion webclientA vulnerability has been identified in Polarion Subversion Webclient (All versions). The Polarion...6.1 Medium
- siemens simatic hmi unified comfort panels, simatic hmi united comfort panels firmware +1 moreA vulnerability has been identified in SIMATIC HMI United Comfort Panels (All versions). Affected...9.8 Critical
- siemens simatic hmi basic panels 2nd generation (incl. siplus variants), simatic hmi comfort panels (incl. siplus variants), simatic hmi mobile panels +5 more +7 moreA vulnerability has been identified in SIMATIC HMI Basic Panels 2nd Generation (incl. SIPLUS...9.8 Critical
- siemens siveillance video clientA vulnerability has been identified in Siveillance Video Client (All versions). In environments...5.3 Medium
- siemens spectrum power 4A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP8). Insecure...5.3 Medium
- siemens license management utility, siemens ag license management utility (lmu) +1 moreA vulnerability has been identified in License Management Utility (LMU) (All versions < V2.4)....7.8 High
- yaws, canonical ubuntu linux, debian linux +2 moreCGI implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to OS command injection.9.8 Critical
- yaws, canonical ubuntu linux, debian linux +2 moreWebDAV implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to XXE injection.9.8 Critical
- siemens simatic rtls locating managerA vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.10.2)....7.8 High
- siemens simatic rtls locating managerA vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.10.2)....7.8 High
- siemens simatic rtls locating managerA vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.10.2)....7.3 High
personnummerPyPIpersonnummer/python vulnerable to Improper Input ValidationNo scorepersonnummerNuGetpersonnummer/csharp vulnerable to Improper Input ValidationNo scorepersonnummer/personnummerPackagistpersonnummer/php vulnerable to Improper Input ValidationNo score- linuxfoundation the update framework, theupdateframework tuf +1 moreInvalid root may become trusted root in The Update Framework (TUF)8.7 High
- loway queuemetricsA SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.04.1 allows remote...8.8 High
- palo alto networks pan-osPAN-OS: Passwords may be logged in clear text while storing operational command (op command) history3.3 Low
- palo alto networks pan-osPAN-OS: Passwords may be logged in clear text when using after-change-detail custom syslog field for config logs3.3 Low
- palo alto networks pan-osPAN-OS: Buffer overflow in the management web interface7.2 High
- palo alto networks pan-osPAN-OS: Management web interface denial-of-service (DoS)7.5 High
- palo alto networks pan-osPAN-OS: Buffer overflow when Captive Portal or Multi-Factor Authentication (MFA) is enabled9.8 Critical
- palo alto networks pan-osPAN-OS: Management web interface denial-of-service (DoS) through unauthenticated file upload5.3 Medium
- palo alto networks pan-osPAN-OS: OS command injection vulnerability in the management web interface7.2 High
- palo alto networks pan-osPAN-OS: OS command injection vulnerability in the management web interface7.2 High
- Show moreLoading…