CVEs published in September 2020
1,908 vulnerabilities, 200 critical, 8 exploited.
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreRace in Mojo in Google Chrome prior to 85.0.4183.102 allowed a remote attacker who had...8.3 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in installer in Google Chrome on OS X prior to 85.0.4183.102...7.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in video in Google Chrome on Android prior to 85.0.4183.102 allowed a remote...9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreType confusion in V8 in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient data validation in media in Google Chrome prior to 85.0.4183.121 allowed a remote...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an...9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy validation in serial in Google Chrome prior to 85.0.4183.121 allowed a remote...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy validation in extensions in Google Chrome prior to 85.0.4183.121 allowed an...9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreHeap buffer overflow in storage in Google Chrome prior to 85.0.4183.121 allowed a remote attacker...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in networking in Google Chrome prior to 85.0.4183.102 allowed an...4.3 Medium
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity...7.5 High
- ibm aspera sharesIBM Aspera Web Application 1.9.14 PL1 is vulnerable to cross-site scripting. This vulnerability...6.1 Medium
- ibm websphere application server liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty 17.0.0.3 through 20.0.0.9 running oauth-2.0 or...5.3 Medium
- ibm datapower gatewayIBM DataPower Gateway 2018.4.1.0 through 2018.4.1.12 could allow a remote attacker to cause a...7.5 High
- ibm datapower gatewayIBM DataPower Gateway 2018.4.1.0 through 2018.4.1.12 could allow a remote attacker to cause a...7.5 High
- ibm datapower gatewayIBM DataPower Gateway 2018.4.1.0 through 2018.4.1.12 could allow a remote attacker to cause a...7.5 High
- ibm business automation content analyzer on cloudIBM Business Automation Content Analyzer on Cloud 1.0 does not set the secure attribute on...4.3 Medium
- acronis cyber backupAn issue was discovered in Acronis Cyber Backup before 12.5 Build 16342. Some API endpoints on...6.5 Medium
- atom project atomData races in atom4.7 Medium
- debian linux, extensible firmware interface development kit (edk ii) firmware interface development kit (edk ii), tianocore edk2 +2 moreInteger overflow in DxeImageVerificationHandler() EDK II may allow an authenticated user to...5.5 Medium
- atlassian jira serverAffected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the...6.5 Medium
- atlassian jira service desk server, jira service desk +1 moreAffected versions of Atlassian Jira Service Desk Server and Data Center allow remote attackers...4.3 Medium
- atlassian jira server, jira data center +1 moreAffected versions of Atlassian Jira Server and Data Center allow remote, unauthenticated...5.3 Medium
hermesOSS-FuzzStack-buffer-overflow in hermes::regex::Parser<hermes::regex::Regex<hermes::regex::UTF16RegexTraits>, chaNo scoreopencvOSS-FuzzHeap-buffer-overflow in void cv::copyToMat<int>No scorefluent-bitOSS-FuzzHeap-buffer-overflow in encoded_to_bufNo scorefluent-bitOSS-FuzzHeap-buffer-overflow in flb_msgpack_to_gelfNo score- typesettercms typesetter** DISPUTED ** Typesetter CMS 5.x through 5.1 allows admins to upload and execute arbitrary PHP...7.2 High
- tt-rss tiny tiny rssAn issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. It does not validate all...9.8 Critical
- tt-rss tiny tiny rssAn issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. imgproxy in plugins...8.1 High
- tt-rss tiny tiny rssAn issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. The cached_url feature...6.1 Medium
- dlink dir-645 firmware, dir-803 firmware, dir-815 firmware +3 more +5 more** UNSUPPORTED WHEN ASSIGNED ** webinc/js/info.php on D-Link DIR-816L 2.06.B09_BETA and DIR-803 1...6.1 Medium
- spring by vmware framework, vmware spring framework, netapp oncommand insight +36 more +38 moreRFD Protection Bypass via jsessionid8.7 High
openexrOSS-FuzzUNKNOWN WRITE in Imf_2_5::copyIntoFrameBufferNo score- citrix storefront server, cloud software group citrix storefront +1 moreImproper authentication in Citrix StoreFront Server < 1912.0.1000 allows an attacker who is...6.5 Medium
- json-bigint project json-bigintUncontrolled Resource Consumption in json-bigint7.5 High
- nodejs node, node.js, fedoraproject fedora +1 more +3 moreNode.js < 12.18.4 and < 14.11 can be exploited to perform HTTP desync attacks and deliver...7.4 High
- citrix gateway, netscaler gateway, sd-wan wanop +1 more +3 moreCitrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1...8.8 High
- citrix gateway, netscaler gateway, sd-wan wanop +1 more +3 moreCitrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1...7.5 High
- typeormTypeORM vulnerable to MAID and Prototype Pollution9.8 Critical
- citrix gateway, netscaler gateway, application delivery controller firmware +2 moreImproper Input Validation on Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and...6.1 Medium
- citrix xenmobile serverImproper authentication in Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10...7.5 High
- nodejs node, node.js, fedoraproject fedora +1 more +3 moreThe implementation of realpath in libuv < 10.22.1, < 12.18.4, and < 14.9.0 used within Node.js...7.8 High
- nodejs node, node.js, fedoraproject fedora +2 moreNode.js < 14.11.0 is vulnerable to HTTP denial of service (DoS) attacks based on delayed requests...7.5 High
- nextcloud desktopA cleartext storage of sensitive information in Nextcloud Desktop Client 2.6.4 gave away...7.5 High
- microfocus operations agentUnauthorized escalation of local privileges vulnerability on Micro Focus Operation Agent,...7.8 High
- redhat resteasy, quarkus, red hat resteasy-client +2 moreGeneration of Error Message Containing Sensitive Information in RESTEasy client5.3 Medium
- huawei taurus-an00b firmwareTaurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a use-after-free (UAF)...6.5 Medium
- hms-networks ewon cosy firmware, ewon flexy firmware +1 moreAll version of Ewon Flexy and Cosy prior to 14.1 use wildcards such as (*) under which domains...2.3 Low
- Show moreLoading…