CVEs published in September 2020
1,908 vulnerabilities, 200 critical, 8 exploited.
- hyland onbaseAn issue was discovered in Hyland OnBase through 18.0.0.32. It allows SQL injection, as...9.8 Critical
- hyland onbaseAn issue was discovered in Hyland OnBase through 18.0.0.32 and 19.x through 19.8.9.1000. It...9.8 Critical
- hyland onbaseAn issue was discovered in Hyland OnBase through 18.0.0.32 and 19.x through 19.8.9.1000. It...7.5 High
- hyland onbaseAn issue was discovered in Hyland OnBase through 18.0.0.32 and 19.x through 19.8.9.1000. PKI...9.1 Critical
- hyland onbaseAn issue was discovered in Hyland OnBase through 18.0.0.32 and 19.x through 19.8.9.1000. It...9.8 Critical
- hyland onbaseAn issue was discovered in Hyland OnBase through 18.0.0.32 and 19.x through 19.8.9.1000. It uses...9.8 Critical
- hyland onbaseAn issue was discovered in Hyland OnBase through 18.0.0.32 and 19.x through 19.8.9.1000. It uses...9.8 Critical
- hyland onbaseAn issue was discovered in Hyland OnBase through 18.0.0.32 and 19.x through 19.8.9.1000. It...9.8 Critical
htslibOSS-FuzzHeap-buffer-overflow in le_to_u32No scorerdkitOSS-FuzzBad-cast to RDKit::AtomNo scorendpiOSS-FuzzUse-of-uninitialized-value in ndpi_check_dga_nameNo scorecryptofuzzOSS-FuzzHeap-buffer-overflow in mbedtls_nist_kw_wrapNo scorelibxml2OSS-FuzzHeap-use-after-free in xmlXPathNodeSetAddNo score- microsoft perl-dbi, canonical ubuntu linux, debian linux +3 more +5 moreAn untrusted pointer dereference flaw was found in Perl-DBI < 1.643. A local attacker who is able...5.5 Medium
- red hat ansible, debian linux, redhat ansible engine +2 moreImproper Output Neutralization and Improper Encoding or Escaping of Output for Logs in ansible5.0 Medium
- microsoft asp.net core, fedoraproject fedora, microsoft asp.net core 2.1 +5 more +7 moreMicrosoft ASP.NET Core Security Feature Bypass Vulnerability7.5 High
- canonical ubuntu-ui-toolkitInsecure temp file usage in Ubuntu UI toolkit3.8 Low
- xwiki, xwiki xwiki-platform +1 moreUsers with SCRIPT rights can execute arbitrary code in XWiki6.6 Medium
- ctrip apolloMissing access control in apollo-adminservice7.0 High
- adobe framemakerFrameMaker File Parsing Out-Of-Bounds Read Vulnerability6.1 Medium
- adobe framemakerFrameMaker File Parsing Stack-based Buffer Overflow7.8 High
- adobe indesignOut-of-bounds memory access could lead to code execution7.8 High
- adobe indesignOut-of-bounds memory access could lead to code execution7.8 High
- adobe indesignOut-of-bounds memory access could lead to code execution7.8 High
- adobe indesignOut-of-bounds memory access could lead to code execution7.8 High
- adobe indesignOut-of-bounds memory access could lead to code execution7.8 High
- apache activemq, oracle communications diameter signaling router, communications element manager +4 more +6 moreRemote code execution in Apache ActiveMQ9.8 Critical
- node-fetchFile size limit bypass in node-fetch2.6 Low
- avast antivirusAn issue was discovered in the Login Password feature of the Password Manager component in Avast...5.5 Medium
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting....5.4 Medium
- bitcoin coreBitcoin Core 0.20.0 allows remote denial of service.7.5 High
- adobe experience managerHTML injection in AEM's content editor component5.3 Medium
- adobe experience managerStored XSS in AEM Forms component9.0 Critical
- adobe experience managerReflected XSS in AEM Inbox module9.0 Critical
- adobe experience managerStored XSS in AEM Forms Components9.0 Critical
- adobe experience managerStored XSS in AEM's Content Repository Development Environment6.8 Medium
- nec expresscluster, expresscluster x +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...7.5 High
- adobe experience managerStored XSS in AEM's Content Repository Development Environment6.8 Medium
- adobe experience manager, experience manager forms +1 moreStored XSS in AEM Sites Components9.0 Critical
- adobe experience managerStored XSS in AEM's Content Repository Development Environment6.8 Medium
- adobe experience managerStored XSS in AEM's Content Repository Development Environment6.8 Medium
- adobe experience manager, experience manager forms +1 moreSensitive information disclosure possible in AEM7.5 High
- adobe experience managerStored XSS in AEM Design Importer Component9.0 Critical
- bitcoin core, bitcoinknots bitcoin knots, bcoin +3 more +5 moreBitcoin Inventory Out-of-Memory Denial-of-Service Attack (CVE-2018-17145)7.5 High
- zulipchat zulip desktopZulip Desktop before 5.4.3 allows XSS because string escaping is mishandled during composition of the HTML for the user interface.6.1 Medium
- intel active management technology firmware, standard manageability, netapp steelstore cloud integrated storage +2 moreImproper buffer restrictions in network subsystem in provisioned Intel(R) AMT and Intel(R) ISM...9.8 Critical
- atftp project atftp, debian linux, opensuse leap +2 moreAn exploitable denial of service vulnerability exists in the atftpd daemon functionality of atftp...7.5 High
- icegram email subscribers \& newslettersMissing Authentication for Critical Function in Icegram Email Subscribers & Newsletters Plugin...5.3 Medium
- linux kernel, netapp cloud backup, hci compute node +3 more +5 moreget_gate_page in mm/gup.c in the Linux kernel 5.7.x and 5.8.x before 5.8.7 allows privilege...7.8 High
- idreamsoft icmsA CSRF vulnerability was found in iCMS v7.0.0 in the background deletion administrator account....6.5 Medium
- Show moreLoading…