CVEs published in September 2020
1,908 vulnerabilities, 200 critical, 8 exploited.
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....3.8 Low
- oracle mysql, oracle corporation mysql server, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security:...4.9 Medium
- thinkadminThinkAdmin directory traversal vulnerability7.5 High
- lg ipsfullhd, ultrawide, lgpcsuite setup +2 more +4 moreDLL Hijacking Vulnerabilities During Installation of LG Electronics Software5.6 Medium
- sagemcom f\@st 3686 firmwareSagemcom F@ST3686 v1.0 HUN 3.97.0 has XSS via RgDiagnostics.asp, RgDdns.asp, RgFirewallEL.asp,...6.1 Medium
- rukovoditelRukovoditel Project Management app 2.6 is affected by: Cross Site Scripting (XSS). An attacker...6.1 Medium
- gazie project gazieGazie 7.29 is affected by: Cross Site Scripting (XSS) via http://192.168.100.7/gazie/modules...6.1 Medium
- avast secureline vpnThe VPN service in AVAST SecureLine before 5.6.4982.470 allows local users to write to arbitrary...5.5 Medium
- kingsoft wps officeGdiDrawHoriLineIAlt in Kingsoft WPS Office before 11.2.0.9403 allows remote heap corruption via a...7.8 High
- pligg project pliggPligg 2.0.3 allows remote authenticated users to execute arbitrary commands because the template...7.2 High
- debian linux, linux kernel, opensuse leap +2 moreThe rbd block device driver in drivers/block/rbd.c in the Linux kernel through 5.8.9 used...4.1 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreA race condition between hugetlb sysctl handlers in mm/hugetlb.c in the Linux kernel before 5.8.8...6.4 Medium
phpOSS-FuzzHeap-use-after-free in zend_assign_to_variableNo scorephpOSS-FuzzHeap-use-after-free in zend_gc_delrefNo scoreuntitled-modelnpmSQL Injection in untitled-modelNo scoreswagger-uinpmCross-Site Scripting in swagger-uiNo scoreentitlementsnpmCommand Injection in entitlementsNo scoremergifynpmPrototype Pollution in mergifyNo scoreswagger-uinpmCross-Site Scripting in swagger-uiNo scoreswagger-uinpmCross-Site Scripting in swagger-uiNo scorenode-rednpmCross-Site Scripting in node-redNo scoreservenpmCross-Site Scripting in serveNo scorediagram-js-direct-editingnpmCross-Site Scripting in diagram-js-direct-editingNo score- google androidAn issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 software...7.5 High
- google androidAn issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. BT...9.8 Critical
diagram-jsnpmCross-Site Scripting in diagram-jsNo score- google androidAn issue was discovered on LG mobile devices with Android OS 10 software. The lguicc software ...9.8 Critical
servenpmCross-Site Scripting in serveNo scorewizard-syncronizernpmCommand Injection in wizard-syncronizerNo scoreservenpmPath Traversal in serveNo scoreresquelnpmSQL Injection in resquelNo scorenode-sassnpmDenial of Service in node-sass5.9 MediumwxchangbanpmCommand Injection in wxchangbaNo scorebigint-moneynpmIncorrect Calculation in bigint-moneyNo scoreatompmnpmUnauthorized File Access in atompmNo scoresoletta-dev-appnpmCommand Injection in soletta-dev-appNo score- google androidAn issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. The...9.8 Critical
- google androidAn issue was discovered on Samsung mobile devices with Q(10.0) (Exynos and MediaTek chipsets)...6.8 Medium
- google androidAn issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos...9.8 Critical
- argosoft mail serverArGo Soft Mail Server 1.8.8.9 is affected by Cross Site Request Forgery (CSRF) for perform remote...8.8 High
- perl dbiAn issue was discovered in the DBI module before 1.632 for Perl. DBD::File drivers can open files...6.1 Medium
- perl dbi, canonical ubuntu linux +1 moreAn issue was discovered in the DBI module before 1.632 for Perl. Using many arguments to methods...5.3 Medium
- perl dbiAn issue was discovered in the DBI module before 1.628 for Perl. Stack corruption occurs when a...5.3 Medium
- red hat ansible, redhat ansible engine, debian linux +2 moreInsertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansible5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +30 more +32 moreWindows UPnP Service Elevation of Privilege Vulnerability6.1 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +30 more +32 moreTLS Information Disclosure Vulnerability5.4 Medium
- microsoft sharepoint server, sharepoint enterprise server 2013 service pack 1, sharepoint enterprise server 2016 +4 more +6 moreMicrosoft SharePoint Remote Code Execution Vulnerability9.9 Critical
- microsoft excel, 365 apps, 365 apps for enterprise +5 more +7 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +30 more +32 moreWindows Media Audio Decoder Remote Code Execution Vulnerability7.6 High
- microsoft windows 10 version 1803, windows 10 version 1809, windows 10 version 1903 for 32-bit systems +11 more +13 moreWindows Kernel Information Disclosure Vulnerability4.4 Medium
- Show moreLoading…