CVEs published in September 2020
1,908 vulnerabilities, 200 critical, 8 exploited.
- gitlabA vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. When 2...3.8 Low
- gitlabA vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Same 2...3.8 Low
- privateinternetaccess private internet access vpn clientA vulnerability in the Private Internet Access (PIA) VPN Client for Linux 1.5 through 2.3+ allows...7.5 High
- mikrotik routerosAn array index error in MikroTik RouterOS 6.41.3 through 6.46.5, and 7.x through 7.0 Beta5,...7.5 High
- vtenextA cross-site scripting (XSS) vulnerability in the messages module of vtecrm vtenext 19 CE allows...6.1 Medium
- vtenextA file upload vulnerability in vtecrm vtenext 19 CE allows authenticated users to upload files...8.8 High
- vtenextA CSRF issue in vtecrm vtenext 19 CE allows attackers to carry out unwanted actions on an...8.8 High
- gitlabA vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab...3.7 Low
- gitlabA vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Wiki was...4.3 Medium
- gitlabA vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab OAuth...6.5 Medium
- gitlabA vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. An...4.3 Medium
- gitlabA vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8, and 13.3.4. An...6.5 Medium
- kaiostech kaiosAn issue was discovered in KaiOS 2.5. The pre-installed Note application is vulnerable to HTML...4.4 Medium
- kaiostech kaiosAn issue was discovered in KaiOS 2.5. The pre-installed Recorder application is vulnerable to...4.4 Medium
- kaiostech kaiosAn issue was discovered in KaiOS 1.0, 2.5, and 2.5.1. The pre-installed Radio application is...4.4 Medium
- kaiostech kaiosAn issue was discovered in KaiOS 2.5 and 2.5.1. The pre-installed File Manager application is...6.1 Medium
- kaiostech kaiosAn issue was discovered in KaiOS 2.5 and 2.5.1. The pre-installed Contacts application is...6.1 Medium
- gitlabA vulnerability was discovered in GitLab versions before 13.0.12, 13.1.10, 13.2.8 and 13.3.4....6.4 Medium
- gitlabA vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. API...6.5 Medium
- gitlabA vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. In certain...5.4 Medium
- gitlabA vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Project...4.3 Medium
- gitlabA vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was...5.4 Medium
- gitlabA vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. The...8.1 High
- gitlabGitLab before version 13.3.4 was vulnerable to an OAuth authorization scope change without user...8.0 High
- kaiostech kaiosAn issue was discovered in KaiOS 1.0, 2.5, and 2.5.12.5. The pre-installed Email application is...6.1 Medium
- intel bios, core i7-10510u firmware, core i7-10510y firmware +48 more +50 moreLogic error in BIOS firmware for 8th, 9th and 10th Generation Intel(R) Core(TM) Processors may...7.6 High
- codoforumCodoforum 4.8.3 allows HTML Injection in the 'admin dashboard Manage users Section.'6.1 Medium
- apache struts, oracle communications policy management, financial services data integration hub +2 more +4 moreImproper Preservation of Permissions in Apache Struts7.5 High
- apache struts, oracle communications policy management, financial services data integration hub +2 more +4 moreImproperly Controlled Modification of Dynamically-Determined Object Attributes in Apache Struts9.8 Critical
- renovatebot renovateRenovate 19.180.0 before 23.25.1 Token Leakage via Logs8.7 High
- recall-products project recall-productsWordpress Plugin Store / Mike Rooijackers Recall Products V0.8 is affected by: Cross Site...5.4 Medium
- recall-products project recall-productsWordpress Plugin Store / Mike Rooijackers Recall Products V0.8 fails to sanitize input from the ...8.8 High
- accesspressthemes wp floating menuWordpress Plugin Store / AccessPress Themes WP Floating Menu V1.3.0 is affected by: Cross Site...6.1 Medium
- mediakind rx8200 firmwareEricsson RX8200 5.13.3 devices are vulnerable to multiple reflected and stored XSS. An attacker...6.1 Medium
- softrade wp smart crm \& invoicesWordpress Plugin Store / SoftradeWeb SNC WP SMART CRM V1.8.7 is affected by: Cross Site Scripting...5.4 Medium
- dataiku data science studioDataiku DSS before 6.0.5 allows attackers write access to the project to modify the "Created by"...8.1 High
- dlink covr-2600r firmware, covr-3902 firmware +1 moreD-Link COVR-2600R and COVR-3902 Kit before 1.01b05Beta01 use hardcoded credentials for telnet...9.8 Critical
- linux4sam at91bootstrapAT91bootstrap before 3.9.2 does not properly wipe encryption and authentication keys from memory...9.1 Critical
- linux4sam at91bootstrapA timing side channel was discovered in AT91bootstrap before 3.9.2. It can be exploited by...6.8 Medium
- microchip atsama5d21c-cu firmware, atsama5d21c-cur firmware, atsama5d225c-d1m-cur firmware +73 more +75 moreThe Secure Monitor in Microchip Atmel ATSAMA5 products use a hardcoded key to encrypt and...7.5 High
- microchip atsama5d21c-cu firmware, atsama5d21c-cur firmware, atsama5d225c-d1m-cur firmware +73 more +75 moreCMAC verification functionality in Microchip Atmel ATSAMA5 products is vulnerable to vulnerable...7.5 High
- microchip atsama5d21c-cu firmware, atsama5d21c-cur firmware, atsama5d225c-d1m-cur firmware +73 more +75 moreMicrochip Atmel ATSAMA5 products in Secure Mode allow an attacker to bypass existing security...7.5 High
- oracle mysql, oracle corporation mysql server, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....4.9 Medium
- oracle mysql, oracle corporation mysql server, mariadb +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported...7.2 High
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....6.5 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security:...2.7 Low
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....4.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security:...4.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles)....4.9 Medium
- oracle mysql, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions...5.3 Medium
- Show moreLoading…