CVEs published in September 2020
1,908 vulnerabilities, 200 critical, 8 exploited.
- cisco unified contact center express, unified ip interactive voice response +1 moreCisco Unified Contact Center Express Privilege Escalation Vulnerability7.2 High
- cisco asyncos, email security appliance (esa), email security appliance +2 moreCisco Email Security Appliance Denial of Service Vulnerability8.6 High
- cisco asyncos, email security appliance (esa), content security management appliance +1 more +3 moreCisco Email Security Appliance and Cisco Content Security Management Appliance Denial of Service Vulnerability7.5 High
- cisco webex event center, webex meetings online, webex meetings server +2 moreCisco Webex Centers Denial of Service Vulnerability5.5 Medium
- cisco web security appliance (wsa), content security management appliance, web security appliance +2 moreCisco Web Security Appliance and Cisco Content Security Management Appliance HTTP Header Injection Vulnerability4.7 Medium
- cisco hosted collaboration mediation fulfillmentCisco Hosted Collaboration Mediation Fulfillment Cross-Site Request Forgery Vulnerability6.5 Medium
- cisco unity connectionCisco Unity Connection Directory Traversal Vulnerability5.9 Medium
- cisco email security appliance (esa), email security appliance +1 moreCisco Email Security Appliance Content Filter Bypass Vulnerability5.8 Medium
- cisco unified communications managerCisco Unified Communications Manager Cross-Site Request Forgery Vulnerability6.5 Medium
- cisco email security appliance (esa), email security appliance +1 moreCisco Email Security Appliance Cross-Site Scripting Vulnerability6.1 Medium
- cisco telepresence tc software, ex60 firmware, ex90 firmware +19 more +21 moreCisco TelePresence Collaboration Endpoint, TelePresence Codec, and RoomOS Software Path Traversal Vulnerability8.8 High
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software DVMRP Memory Exhaustion Vulnerabilities8.6 High
ndpiOSS-FuzzHeap-buffer-overflow in http_process_user_agentNo score- containers podman, fedoraproject fedora, redhat enterprise linux +1 more +3 moreInformation disclosure in podman5.3 Medium
ldmUbuntuldm vulnerabilitiesNo score- simple library management system project library management systemSourcecodester Simple Library Management System 1.0 is affected by Insecure Permissions via Books...7.8 High
- simple library management system project library management systemSourcecodester Simple Library Management System 1.0 is affected by Incorrect Access Control via...8.4 High
- ozeki ng sms gatewayOzeki NG SMS Gateway 4.17.1 through 4.17.6 does not check the file type when bulk importing new...8.8 High
- ozeki ng sms gatewayOzeki NG SMS Gateway through 4.17.6 has multiple CSRF vulnerabilities. For example, an...8.8 High
- ozeki ng sms gatewayOzeki NG SMS Gateway through 4.17.6 has multiple authenticated stored and/or reflected XSS...6.1 Medium
- ozeki ng sms gatewayOzeki NG SMS Gateway through 4.17.6 allows SSRF via SMS WCF or RSS To SMS.4.9 Medium
- ozeki ng sms gatewayCSV Injection (aka Excel Macro Injection or Formula Injection) exists in the Export Of Contacts...8.8 High
- liferay portal, digital experience platform +1 moreUnrestricted Upload of File with Dangerous Type in Liferay Portal and Liferay DXP6.5 Medium
- ozeki ng sms gatewayAn issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The database connection strings...5.3 Medium
- ozeki ng sms gatewayAn issue was discovered in Ozeki NG SMS Gateway through 4.17.6. By leveraging a path traversal...7.2 High
- ozeki ng sms gatewayAn issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The outbox functionality of the...7.2 High
- phpgurukul zoo management systemPHPGURUKUL Zoo Management System Using PHP and MySQL version 1.0 is affected by: SQL Injection...7.8 High
- arista cloudvision portalA vulnerability in Arista’s CloudVision Portal (CVP) prior to 2020.2 allows users with “read-only...6.5 Medium
- advantech webaccess, webaccess node +1 moreWebAccess Node (All versions prior to 9.0.1) has incorrect permissions set for resources used by...7.8 High
- microfocus operation bridge reporterArbitrary code execution vulnerability on Micro Focus Operation Bridge Reporter, affecting...9.8 Critical
- microfocus operation bridge reporterAn Authorization Bypass vulnerability on Micro Focus Operation Bridge Reporter, affecting version...9.8 Critical
- ibm data risk managerIBM Data Risk Manager (iDNA) 2.0.6 contains hard-coded credentials, such as a password or...5.9 Medium
- ibm data risk managerIBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to escalate their privileges...8.8 High
- ibm data risk managerIBM Data Risk Manager (iDNA) 2.0.6 could allow a remote authenticated attacker to upload...8.8 High
- ibm data risk managerIBM Data Risk Manager (iDNA) 2.0.6 stores user credentials in plain in clear text which can be...5.3 Medium
- ibm data risk managerIBM Data Risk Manager (iDNA) 2.0.6 could allow a privileged user to cause a denial of service due...5.5 Medium
- ibm data risk managerIBM Data Risk Manager (iDNA) 2.0.6 is vulnerable to cross-site request forgery which could allow...7.1 High
- ibm data risk managerIBM Data Risk Manager (iDNA) 2.0.6 could disclose sensitive username information to an attacker...5.3 Medium
- ibm data risk managerIBM Data Risk Manager (iDNA) 2.0.6 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- ibm data risk managerIBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could...3.7 Low
- ibm data risk managerIBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could...5.9 Medium
- ibm data risk managerIBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to obtain sensitive...4.3 Medium
- ibm data risk managerIBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to bypass security and...8.8 High
- microfocus operation bridge reporterAn Authorization Bypass vulnerability on Micro Focus Operation Bridge Reporter, affecting version...7.8 High
- vmware horizon daasVMware Horizon DaaS (7.x and 8.x before 8.0.1 Update 1) contains a broken authentication...6.5 Medium
- verint workforce optimizationVerint Workforce Optimization suite 15.1 (15.1.0.37634) has Unauthenticated Information...5.3 Medium
- telestream medius, sentry +1 moreTelestream Tektronix Medius before 10.7.5 and Sentry before 10.7.5 have a SQL injection vulnerability allowing an unauthenticated attacker to dump database contents via the page parameter in a page=lo…7.5 High
- meltytech shotcutIn mainwindow.cpp in Shotcut before 20.09.13, the upgrade check misuses TLS because of...5.9 Medium
- arachnys cabotCross-site Scripting (XSS)8.2 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in offscreen canvas in Google Chrome prior to 85.0.4183.102 allowed a remote...8.8 High
- Show moreLoading…