CVEs published in September 2020
1,908 vulnerabilities, 200 critical, 8 exploited.
- mcafee web gateway (mwg), web gateway, mcafee,llc mcafee web gateway (mwg) +2 moreWeb Gateway (MWG) - Privilege Escalation vulnerability3.5 Low
- mcafee web gateway (mwg), web gateway, mcafee,llc mcafee web gateway (mwg) +2 moreWeb Gateway (MWG) - Privilege Escalation vulnerability4.6 Medium
- mcafee web gateway (mwg), web gateway, mcafee,llc mcafee web gateway (mwg) +2 moreWeb Gateway (MWG) - Privilege Escalation vulnerability9.0 Critical
- blackcat-cms blackcat cmsAn issue was discovered in BlackCat CMS v.1.3.6. There is a CSRF vulnerability (bypass csrf_token...8.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreA flaw was found in the Linux kernel before 5.9-rc4. A failure of the file system metadata...5.5 Medium
- projectworlds house rentalProjectworlds House Rental v1.0 suffers from an unauthenticated SQL Injection vulnerability,...9.8 Critical
- online course registration project course registrationA File Upload vulnerability in SourceCodester Online Course Registration v1.0 allows remote...9.8 Critical
- trend micro serverprotect for linux, trendmicro serverprotect +1 moreA command injection vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow an...9.1 Critical
- linux kernelA memory disclosure flaw was found in the Linux kernel's ethernet drivers, in the way it read...4.4 Medium
- apache syncopeShell command injection in Apache Syncope7.2 High
- tibco spotfire analyst, spotfire analytics platform, spotfire desktop +2 more +4 moreTIBCO Spotfire Stored Cross Site Scripting Vulnerability8.2 High
- fluffycogs project fluffycogsRemote Code Execution in Act module8.7 High
- yiiframework yii, yiisoft yii2 +1 moreUnsafe deserialization in Yii 28.9 High
- scratch-wiki scratchsig, internationalscratchwiki wiki-scratchsig +1 moreHTML Injection in ScratchSig8.0 High
- prestashop contactformPotential XSS in PrestaShop contactform8.0 High
- niftypm niftyNifty Project Management Web Application 2020-08-26 allows XSS, via Add Task, that is rendered...5.4 Medium
- lenovo system interface foundationA denial of service vulnerability was reported in the Lenovo Vantage component called Lenovo...5.5 Medium
- dell system updateA race condition vulnerability was reported in Lenovo System Update prior to version 5.07.0106...7.3 High
- lenovo integrated management module 2, ibm system x imm2 firmware, lenovo system x imm2 firmware for x240 m5, machine types: 9532, 2591 +1 more +3 moreA cross-site scripting (XSS) vulnerability was discovered in the legacy IBM and Lenovo System x...6.3 Medium
- ibm bladecenter amm firmware, bladecenter advanced management module firmware +1 moreA cross-site scripting inclusion (XSSI) vulnerability was reported in the legacy IBM BladeCenter...4.3 Medium
- ibm spectrum protect plusIBM Spectrum Protect Plus 10.1.0 through 10.1.6 could allow a remote attacker to traverse...6.5 Medium
- ibm spectrum protect plusIBM Spectrum Protect Plus 10.1.0 through 10.1.6 Administrative Console could allow an...8.0 High
- ibm business automation workflow, business process manager +1 moreIBM Business Automation Workflow C.D.0 and IBM Business Process Manager 8.0, 8.5, and 8.6 are...5.4 Medium
- ibm maximo asset managementIBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site request forgery which...4.3 Medium
- ibm maximo asset managementIBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote authenticated attacker to...8.8 High
- ibm tivoli business service managerIBM Tivoli Business Service Manager 6.2.0.0 - 6.2.0.2 IF 1 allows web pages to be stored locally...4.0 Medium
- ibm maximo asset managementIBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to SQL injection. A remote attacker...6.3 Medium
- vr cam p1 firmwareVR CAM P1 Model P1 v1 has an incorrect access control vulnerability where an attacker can obtain...9.8 Critical
- gallagher command centreIt is possible for an unauthenticated remote DCOM websocket connection to crash the Command...7.5 High
- gallagher command centreIn Gallagher Command Centre versions 8.10 prior to 8.10.1134(MR4), 8.00 prior to 8.00.1161(MR5),...9.9 Critical
- gallagher command centreIt is possible to enumerate access card credentials via an unauthenticated network connection to...9.8 Critical
- gallagher command centreIt is possible for an unauthenticated remote DCOM websocket connection to crash the Command...7.5 High
- gallagher command centreOn controllers running versions of v8.20 prior to vCR8.20.200221b (distributed in v8.20.1093(MR2)...7.3 High
- gallagher command centreIn Gallagher Command Centre v8.20 prior to v8.20.1093(MR2) it is possible to create Guard Tour...4.3 Medium
- spiceworksSpiceworks Version <= 7.5.00107 is affected by CSRF which can lead to privilege escalation via "...8.8 High
- elkarbackupA Sensitive Source Code Path Disclosure vulnerability is found in ElkarBackup v1.3.3. An attacker...7.5 High
- elkarbackupA Persistent Cross-site Scripting vulnerability is found in ElkarBackup v1.3.3, where an attacker...5.4 Medium
- gitlabA vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was...3.8 Low
- gitlabA vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. A user...2.7 Low
- gitlabA vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Due to...7.1 High
- timlegge io::compress::brotliIO::Compress::Brotli versions prior to 0.007 for Perl have an integer overflow in the bundled Brotli C library9.8 Critical
- google brotli, canonical ubuntu linux, debian linux +7 more +9 moreBuffer overflow in Brotli library5.3 Medium
- gitlabA vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Conan...7.2 High
- gitlabA vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was...3.5 Low
- gitlabA vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was...5.4 Medium
- gitlabA vulnerability was discovered in GitLab runner versions before 13.1.3, 13.2.3 and 13.3.1. It was...6.5 Medium
- gitlabA vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. The profile...3.7 Low
- gitlabA vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab...3.7 Low
- gitlabA vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was...5.5 Medium
- gitlabA vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Under...3.8 Low
- Show moreLoading…