CVEs published in September 2020
1,908 vulnerabilities, 200 critical, 8 exploited.
- google androidIn devicepolicy service, there is a possible permission bypass due to an unsafe PendingIntent....5.5 Medium
- google androidIn ADB server and USB server, there is a possible permission bypass due to an unsafe...5.5 Medium
- google androidIn Java network APIs, there is possible access to sensitive network state due to a missing...5.5 Medium
- google androidIn PackageManager, there is a missing permission check. This could lead to local information...5.5 Medium
- google androidIn PackageManager, there is a missing permission check. This could lead to local information...5.5 Medium
- google androidIn PackageManager, there is a missing permission check. This could lead to local information...5.5 Medium
- google androidIn PackageInstaller, there is a possible permissions bypass due to a tapjacking vulnerability....7.8 High
- google androidIn DocumentsUI, there is a possible permission bypass due to a confused deputy. This could lead...7.8 High
- google androidIn DisplayManager, there is a possible permission bypass due to a missing permission check. This...7.8 High
- google androidIn NetworkPolicyManagerService, there is a possible permissions bypass due to a missing...7.8 High
- google androidIn screencap, there is a possible command injection due to improper input validation. This could...7.8 High
- google androidIn UrlQuerySanitizer, there is a possible improper input validation. This could lead to remote...9.8 Critical
- google androidIn AccountManager, there is a possible bypass of a permissions check due to a confused deputy....5.0 Medium
- google androidIn MediaProvider, there is a possible bypass of a permissions check due to a confused deputy....5.5 Medium
- google androidIn MediaProvider, there is a possible way to access ContentResolver and MediaStore entries the...7.8 High
- google androidIn WindowManager, there is a possible launch of an unexpected app due to a confused deputy. This...7.8 High
- google androidIn iorap, there is a possible memory corruption due to a use after free. This could lead to local...6.7 Medium
- helmAliases are never checked in Helm3.7 Low
- inunosinsi soycmsReflected XSS leading to RCE in SoyCMS8.4 High
- rad secflow-1v firmwareA vulnerability in the web-based management interface of RAD SecFlow-1v through 2020-05-21 could...6.1 Medium
- soy cms project cms, soy inquiry project inquiry, inunosinsi soycms +2 moreCross-site Request Forgery leading to RCE in SOY CMS8.4 High
- google androidIn Pixel's use of the Catpipe library, there is possible memory corruption due to a use after...7.8 High
- google androidIn blk_mq_queue_tag_busy_iter of blk-mq-tag.c, there is a possible use after free due to improper...7.8 High
- google android, opensuse leap +1 moreIn skb_to_mamac of networking.c, there is a possible out of bounds write due to an integer...7.8 High
- google android, opensuse leap +1 moreIn kbd_keycode of keyboard.c, there is a possible out of bounds write due to a missing bounds...6.7 Medium
- google androidIn skb_headlen of /include/linux/skbuff.h, there is a possible out of bounds read due to memory...7.8 High
- google androidIn l2tp_session_delete and related functions of l2tp_core.c, there is possible memory corruption...6.7 Medium
- google androidIn CamX code, there is a possible use after free due to a race condition. This could lead to...6.4 Medium
- fasterxml jackson-databind, debian linux, oracle agile product lifecycle management +23 more +25 moreUnsafe Deserialization in jackson-databind8.1 High
- google androidIn the FPC TrustZone fingerprint App, there is a possible invalid command handler due to an...6.7 Medium
- google androidIn manifest files of the SmartSpace package, there is a possible tapjacking vector due to a...7.8 High
- objective open cbor run-time project open cbor run-timeA memory corruption vulnerability in Objective Open CBOR Run-time (oocborrt) in versions before...9.8 Critical
- solarwinds orion platformStored XSS (Cross-Site Scripting) exists in the SolarWinds Orion Platform before before 2020.2.1...9.0 Critical
- perl dbi, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in the DBI module before 1.643 for Perl. The hv_fetch() documentation...4.7 Medium
- zoneminderZoneMinder before 1.34.21 has XSS via the connkey parameter to download.php or export.php.6.1 Medium
- sqreen python mini racerHeap Overflow in PyMiniRacer9.8 Critical
- sqreen php microagentLack of cryptographic signature verification in the Sqreen PHP agent daemon before 1.16.0 makes...7.3 High
- titanhq spamtitanA sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07. It limits the admin user...7.2 High
- titanhq spamtitanA sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07. It limits the admin user...7.2 High
- flexsolution reset passwordThe Reset Password add-on before 1.2.0 for Alfresco suffers from CMIS-SQL Injection, which allows...7.5 High
- alfresco reset passwordThe Reset Password add-on before 1.2.0 for Alfresco has a broken algorithm (involving an...8.8 High
- titanhq spamtitanAn issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter fname,...6.5 Medium
- titanhq spamtitanAn issue was discovered in Titan SpamTitan 7.07. Improper validation of the parameter fname on...8.8 High
- titanhq spamtitanAn issue was discovered in Titan SpamTitan 7.07. Improper input sanitization of the parameter...9.8 Critical
- titanhq spamtitanAn issue was discovered in Titan SpamTitan 7.07. Due to improper sanitization of the parameter...8.8 High
- titanhq spamtitanAn issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter jaction...8.8 High
- red hat wildfly, redhat xerces +1 moreImproper Input Validation in Xerces5.3 Medium
- apache airflowApache Airflow Cross-site Scripting6.1 Medium
- apache supersetApache Superset OS Command Injection8.8 High
- gonitro nitro pro, nitro pro +1 moreAn exploitable vulnerability exists in the object stream parsing functionality of Nitro Software,...8.8 High
- Show moreLoading…