CVEs published in September 2020
1,908 vulnerabilities, 200 critical, 8 exploited.
- gonitro nitro pro, nitro pro +1 moreAn exploitable code execution vulnerability exists in the JPEG2000 Stripe Decoding functionality...8.8 High
- gonitro nitro pro, nitro pro +1 moreAn exploitable vulnerability exists in the cross-reference table repairing functionality of Nitro...8.8 High
- gonitro nitro pro, nitro pro +1 moreAn arbitrary code execution vulnerability exists in the rendering functionality of Nitro Software...8.8 High
- atlassian data center, jira, jira server +2 moreAffected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to...5.3 Medium
phpOSS-FuzzHeap-use-after-free in zend_gc_addrefNo score- yworks yedyWorks yEd Desktop before 3.20.1 allows code execution via an XSL Transformation when using an...9.8 Critical
- yworks yedyWorks yEd Desktop before 3.20.1 allows XXE attacks via an XML or GraphML document.9.8 Critical
- canonical pulseaudioPotential double-free in pulseaudio5.3 Medium
- google android, debian linux, opensuse leap +1 more +3 moreIn create_pinctrl of core.c, there is a possible out of bounds read due to a use after free. This...5.5 Medium
- free freebox delta firmware, freebox mini firmware, freebox one firmware +2 more +4 moreA DNS rebinding vulnerability in the Freebox OS web interface in Freebox Server before 4.2.3.9.6 Critical
- free freebox delta firmware, freebox mini firmware, freebox one firmware +2 more +4 moreA DNS rebinding vulnerability in the UPnP IGD implementations in Freebox Server before 4.2.3.9.6 Critical
- free freebox delta firmware, freebox mini firmware, freebox one firmware +2 more +4 moreA CSRF vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3.8.8 High
- free freebox hd firmwareA DNS rebinding vulnerability in Freebox HD before 1.5.29.9.6 Critical
- elementor page builderA stored XSS vulnerability exists in the Custom Link Attributes control Affect function in...5.4 Medium
- wibu codemeterAn attacker could send a specially crafted packet that could have CodeMeter (All versions prior...7.5 High
- wibu codemeterCodeMeter (All versions prior to 6.81) and the software using it may crash while processing a...7.5 High
- wibu codemeterCodeMeter (All versions prior to 6.90 when using CmActLicense update files with CmActLicense Firm...7.5 High
- wibu codemeterThis vulnerability allows an attacker to use the internal WebSockets API for CodeMeter (All...7.5 High
- wibu codemeterProtocol encryption can be easily broken for CodeMeter (All versions prior to 6.90 are affected,...9.8 Critical
- wibu codemeterMultiple memory corruption vulnerabilities exist in CodeMeter (All versions prior to 7.10) where...9.8 Critical
- gonitro nitro pro, nitro pro +1 moreAn exploitable code execution vulnerability exists in the rendering functionality of Nitro Pro 13...8.8 High
- rad secflow-1v firmwareA vulnerability in the web-based management interface of RAD SecFlow-1v os-image SF_0290_2.3.01...8.8 High
- bosch smart homeImproper Certificate Validation in Bosch Smart Home System App for iOS6.8 Medium
- red hat wildfly, redhat jboss fuse +1 moreA flaw was found in Wildfly before wildfly-embedded-13.0.0.Final, where the embedded managed...7.5 High
- keycloakIncorrect Permission Assignment for Critical Resource and Permissive List of Allowed Inputs in Keycloak4.9 Medium
- redhat openshiftA content spoofing vulnerability was found in the openshift/console 3.11 and 4.x. This flaw...4.3 Medium
- keycloak, redhat single sign-on +1 moreCross-site Scripting in Keycloak6.1 Medium
- sylabs singularity, opensuse leap +1 moreInsecure permissions on build temporary rootfs in Singularity8.8 High
- redhat amq onlineIt was found in AMQ Online before 1.5.2 that injecting an invalid field to a user's AddressSpace...4.3 Medium
- sylabs singularity, opensuse leap +1 moreInsecure permissions on user namespace / fakeroot temporary rootfs in Singularity8.1 High
- apache atlasCross-site scripting in Apache Atlas6.1 Medium
- genexis platinum 4410 firmwareA specific router allows changing the Wi-Fi password remotely. Genexis Platinum 4410 V2-1.28, a...6.5 Medium
- drupal core, drupal +1 moreExposure of Resource to Wrong Sphere in Drupal Core7.5 High
- drupal, drupal core +1 moreDrupal Core Access bypass vulnerability5.3 Medium
- drupal core, drupal +1 moreDrupal core Cross-site Scripting (XSS) vulnerability in ckeditor6.1 Medium
- vmware horizon client, workstation player, workstation pro +2 moreVMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an...6.5 Medium
- vmware horizon client, workstation player, workstation pro +2 moreVMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain a denial of...3.3 Low
- vmware horizon client, workstation player, workstation pro +2 moreVMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of...6.1 Medium
- vmware horizon client, workstation player, workstation pro +2 moreVMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of...6.1 Medium
- vmware horizon client, workstation player, workstation pro +2 moreVMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of...6.1 Medium
- vmware fusionVMware Fusion (11.x) contains a privilege escalation vulnerability due to the way it allows...6.7 Medium
- drupal, drupal core +1 moreDrupal Core Cross-site scripting vulnerability6.1 Medium
- perl dbiAn issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open...6.1 Medium
- ibm security trusteer pinpoint detectIBM Security Trusteer Pinpoint Detect 11.6.5 could disclose some information due to using a...3.7 Low
- ibm maximo asset management, control desk, maximo asset configuration manager +17 more +19 moreIBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote attacker to conduct phishing...6.8 Medium
- drupal, drupal core +1 moreDrupal Core Cross-site scripting vulnerability6.1 Medium
- schneider-electric scadapack x70 security administratorA CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack x70 Security...7.8 High
- schneider-electric scadapack 7x remote connectA CWE-284 Improper Access Control vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574...7.8 High
- schneider-electric scadapack 7x remote connectA CWE-285 Improper Authorization vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574...8.8 High
- schneider-electric scadapack 7x remote connectA CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Transversal')...5.5 Medium
- Show moreLoading…