CVEs published in September 2020
1,908 vulnerabilities, 200 critical, 8 exploited.
- google androidIn NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to...6.7 Medium
- google androidIn NFC, there is a possible out of bounds write due to uninitialized data. This could lead to...6.7 Medium
- google androidIn NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to...7.8 High
- google androidIn the Bluetooth server, there is a possible out of bounds write due to an integer overflow. This...6.7 Medium
- google androidIn Bluetooth, there is a possible spoofing of bluetooth device metadata due to a missing...7.8 High
- google androidIn Bluetooth, there is a possible control over Bluetooth enabled state due to a missing...7.8 High
- google androidIn hwservicemanager, there is a possible out of bounds write due to freeing a wild pointer. This...7.8 High
- google androidIn the Settings app, there is an insecure default value. This could lead to local escalation of...7.3 High
- google androidIn NFC, there is a possible use-after-free due to a race condition. This could lead to local...6.4 Medium
- google androidIn WiFi tethering, there is a possible attacker controlled intent due to an unsafe PendingIntent....7.8 High
- rapid7 appspiderCode Injection in Rapid7 AppSpider Pro Installer5.8 Medium
- google androidIn the audio server, there is a missing permission check. This could lead to local escalation of...7.8 High
- google androidIn Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could...9.8 Critical
- google androidIn the System UI, there is a possible system crash due to an uncaught exception. This could lead...5.5 Medium
- nvidia geforce now, geforce now application +1 moreNVIDIA GeForce NOW, versions prior to 2.0.23 on Windows and macOS, contains a vulnerability in...7.5 High
- 1crmAn issue was discovered in 1CRM System through 8.6.7. An insecure direct object reference to...8.6 High
- adobe media encoderAdobe Media Encoder PSD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability6.1 Medium
- adobe media encoderAdobe Media Encoder WMV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability6.1 Medium
- adobe media encoderAdobe Media Encoder FLV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability6.1 Medium
- gradle enterpriseAn issue was discovered in Gradle Enterprise before 2020.2.4. Because of unrestricted cross...6.5 Medium
- gradle enterpriseAn issue was discovered in Gradle Enterprise before 2020.2.5. Lack of the secure attribute on the...5.3 Medium
- gradle enterpriseAn issue was discovered in Gradle Enterprise 2018.5. There is a lack of lock-out after excessive...5.5 Medium
- gradle enterprise, enterprise cache node +1 moreAn issue was discovered in Gradle Enterprise 2018.2 and Gradle Enterprise Build Cache Node 4.1....7.5 High
- gradle enterpriseAn issue was discovered in Gradle Enterprise 2018.5 - 2020.2.4. There is XXE with resultant SSRF...4.9 Medium
- gradle enterpriseAn issue was discovered in Gradle Enterprise 2018.5 - 2020.2.4. Because of implicitly remembered...6.8 Medium
- gradle enterpriseAn issue was discovered in Gradle Enterprise 2017.1 - 2020.2.4. Unrestricted access to a high...7.5 High
- gradle enterpriseAn issue was discovered in Gradle Enterprise 2018.2 - 2020.2.4. CSRF mitigation can be bypassed...8.8 High
- gradle enterprise, enterprise cache node +1 moreAn issue was discovered in Gradle Enterprise 2017.3 - 2020.2.4 and Gradle Enterprise Build Cache...7.5 High
- gradle enterpriseAn issue was discovered in Gradle Enterprise 2020.2 - 2020.2.4. An XSS issue exists via the...6.1 Medium
- uniqlo, uniqlo co., ltd. app for android +1 moreUNIQLO App for Android versions 7.3.3 and earlier allows remote attackers to lead a user to...6.5 Medium
- uniqlo, uniqlo co., ltd. app for android +1 moreUNIQLO App for Android versions 7.3.3 and earlier allows remote attackers to lead a user to...6.5 Medium
- buffalo inc. whr-g54s, buffalo airstation whr-g54s firmware +1 moreCross-site scripting vulnerability in WHR-G54S firmware 1.43 and earlier allows remote attackers...6.1 Medium
- buffalo inc. whr-g54s, buffalo airstation whr-g54s firmware +1 moreDirectory traversal vulnerability in WHR-G54S firmware 1.43 and earlier allows an attacker to...4.3 Medium
- cesanta mongoose** DISPUTED ** A buffer overflow vulnerability exists in the mg_get_http_header function in...9.8 Critical
- corephp pago commerceThe paGO Commerce plugin 2.5.9.0 for Joomla! allows SQL Injection via the administrator/index.php...8.8 High
- dotplant dotplant2DotPlant2 Improper Restriction of XML External Entity Reference7.5 High
- safervpnSaferVPN before 5.0.3.3 on Windows could allow low-privileged users to create or overwrite...8.1 High
- webtareas project webtareaswebTareas through 2.1 allows XSS in clients/editclient.php, extensions/addextension.php,...6.1 Medium
- webtareas project webtareaswebTareas through 2.1 allows files/Default/ Directory Listing.5.3 Medium
- webtareas project webtareaswebTareas through 2.1 allows upload of the dangerous .exe and .shtml file types.7.5 High
pcapplusplusOSS-FuzzUNKNOWN READ in __libcpp_memchrNo scoreclamavOSS-FuzzStack-buffer-overflow in rijndaelSetupEncryptNo scoreclamavOSS-FuzzHeap-buffer-overflow in text_normalize_bufferNo scoreclamavOSS-FuzzHeap-buffer-overflow in cli_codepage_to_utf8No scoreclamavOSS-FuzzHeap-buffer-overflow in text_normalize_bufferNo scorephpOSS-FuzzUse-of-uninitialized-value in zend_generator_search_multi_children_nodeNo scoreclamavOSS-FuzzHeap-buffer-overflow in cli_codepage_to_utf8No score- owasp modsecurity, debian linux +1 more** DISPUTED ** Trustwave ModSecurity 3.x through 3.0.4 allows denial of service via a special...7.5 High
- helmDuplicate plugin entries in Helm3.0 Low
- helmImproper sanitization of plugin names in Helm3.4 Low
- Show moreLoading…