CVEs published in September 2020
1,908 vulnerabilities, 200 critical, 8 exploited.
- schneider-electric scadapack 7x remote connectA CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack 7x Remote Connect ...7.8 High
- red hat wildfly, redhat wildfly elytron, decision manager +1 more +3 moreIncorrect Authorization in WildFly Elytron7.5 High
- keycloak, redhat openshift application runtimes, single sign-on +2 moreAllocation of Resources Without Limits or Throttling in Keycloak7.5 High
- postgresqlThe Windows installer for PostgreSQL 9.5 - 12 invokes system-provided executables that do not...7.3 High
- librawA buffer overflow vulnerability in LibRaw version < 20.0 LibRaw::GetNormalizedModel in src...7.8 High
- xmlquery project xmlqueryxmlquery lacks check for whether LoadURL response is in XML format, causing denial of service9.8 Critical
- librawlibraw 20.0 has a null pointer dereference vulnerability in parse_tiff_ifd in src/metadata/tiff...5.5 Medium
- red hat, inc. jboss enterprise application platform, redhat jboss data grid, openshift application runtimes +1 more +3 moreThe issue appears to be that JBoss EAP 6.4.21 does not parse the field-name in accordance to...5.3 Medium
- ua-parser-js project ua-parser-js, oracle communications cloud native core network function cloud native environment +1 moreRegular Expression Denial of Service (ReDoS)7.5 High
- gnuplotgnuplot 5.4 is affected by a segmentation fault in com_line () at command.c, which may result in...9.8 Critical
- daemonology bsdiffA memory corruption vulnerability is present in bspatch as shipped in Colin Percival’s bsdiff...9.8 Critical
- jenkins storable configs, jenkins project storable configs plugin +1 moreArbitrary file write vulnerability in Jenkins Storable Configs Plugin6.5 Medium
- jenkins storable configs, jenkins project storable configs plugin +1 moreArbitrary file read vulnerability in Jenkins Storable Configs Plugin6.5 Medium
- jenkins selection tasks, jenkins project selection tasks plugin +1 moreSystem command execution vulnerability in Selection tasks Jenkins Plugin8.8 High
- jenkins copy data to workspace, jenkins project copy data to workspace plugin +1 moreArbitrary file read vulnerability in Copy data to workspace Jenkins Plugin6.5 Medium
- jenkins elastest, jenkins project elastest plugin +1 morePasswords stored in plain text by ElasTest Plugin5.5 Medium
- jenkins elastest, jenkins project elastest plugin +1 moreCSRF vulnerability in Jenkins ElasTest Plugin4.3 Medium
- jenkins elastest, jenkins project elastest plugin +1 moreMissing permission checks in Jenkins ElasTest Plugin4.3 Medium
- jenkins locked files report, jenkins project locked files report plugin +1 moreStored XSS vulnerability in Locked Files Report Plugin5.4 Medium
- jenkins clearcase release, jenkins project clearcase release plugin +1 moreStored XSS vulnerability in ClearCase Release Plugin5.4 Medium
- jenkins chosen-views-tabbar, jenkins project chosen-views-tabbar plugin +1 moreStored XSS vulnerability in chosen-views-tabbar Plugin5.4 Medium
- jenkins mongodb, jenkins project mongodb plugin +1 moreCSRF vulnerability in MongoDB Plugin8.8 High
- jenkins mongodb, jenkins project mongodb plugin +1 moreMissing permission checks in MongoDB Plugin4.3 Medium
- jenkins description column, jenkins project description column plugin +1 moreStored XSS vulnerability in Description Column Plugin5.4 Medium
- jenkins project coverage/complexity scatter plot plugin, jenkins coverage\/complexity scatter plot +1 moreStored XSS vulnerability in Coverage/Complexity Scatter Plot Plugin5.4 Medium
- jenkins custom job icon, jenkins project custom job icon plugin +1 moreStored XSS vulnerability in Custom Job Icon Plugin5.4 Medium
- jenkins radiator view, jenkins project radiator view plugin +1 moreStored XSS vulnerability in Radiator View Plugin5.4 Medium
- jenkins android lint, jenkins project android lint plugin +1 moreStored XSS vulnerability in android-lint Plugin5.4 Medium
- jenkins perfecto, jenkins project perfecto plugin +1 moreOS command execution vulnerability in Perfecto Plugin8.8 High
- jenkins perfecto, jenkins project perfecto plugin +1 moreMissing permission check in Perfecto Plugin4.3 Medium
- jenkins project computer-queue-plugin plugin, jenkins computer queue +1 moreStored XSS vulnerability in computer-queue-plugin Plugin5.4 Medium
- jenkins health advisor by cloudbees, jenkins project health advisor by cloudbees plugin +1 moreIncorrect permission check in Health Advisor by CloudBees Plugin4.3 Medium
- jenkins validating string parameter, jenkins project validating string parameter plugin +1 moreStored XSS vulnerability in Validating String Parameter Plugin5.4 Medium
- jenkins pipeline maven integration, jenkins project pipeline maven integration plugin +1 moreStored XSS vulnerability in Pipeline Maven Integration Plugin via unescaped display name5.4 Medium
- jenkins blue ocean, jenkins project blue ocean plugin +1 moreMissing permission check in Blue Ocean Plugin4.3 Medium
- jenkins blue ocean, jenkins project blue ocean plugin +1 morePath traversal vulnerability in Blue Ocean Plugin6.5 Medium
- jenkins email extension, jenkins project email extension plugin +1 moreMissing hostname validation in Email Extension Plugin4.8 Medium
- jenkins mailer, jenkins project mailer plugin +1 moreImproper Validation of Certificate with Host Mismatch in Jenkins Mailer Plugin4.8 Medium
- gnuplotgnuplot 5.5 is affected by double free when executing print_set_output. This may result in...7.8 High
- suse salt-netapi-client, linux enterprise module for suse manager server 4.1, manager server 3.2 +1 more +3 moresalt-api is accessible to every user on SUSE Manager Server9.3 Critical
mumbleSUSESecurity update for mumbleNo scoremumbleSUSESecurity update for mumbleNo score- microsoft perl-dbi, debian linux, fedoraproject fedora +2 more +4 moreA buffer overflow was found in perl-DBI < 1.643 in DBI.xs. A local attacker who is able to supply...7.1 High
- mcafee email gateway, email gateway (meg) +1 moreMcAfee Email Gateway (MEG) - Path Traversal vulnerability4.3 Medium
phpOSS-FuzzHeap-buffer-overflow in exif_process_IFD_in_MAKERNOTENo scorephpOSS-FuzzMemcpy-param-overlap in zend_lex_tstringNo scorephpOSS-FuzzHeap-use-after-free in gc_mark_greyNo score- istio-operator project istio-operatorRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1 servicemesh-operator security update8.8 High
- mcafee web gateway (mwg), web gateway, mcafee,llc mcafee web gateway (mwg) +2 moreWeb Gateway (MWG) - Privilege Escalation vulnerability5.7 Medium
- mcafee web gateway (mwg), web gateway, mcafee,llc mcafee web gateway (mwg) +2 moreWeb Gateway (MWG) - Privilege Escalation vulnerability5.7 Medium
- Show moreLoading…