CVEs published in September 2020
1,908 vulnerabilities, 200 critical, 8 exploited.
personnummerRubyGemspersonnummer/ruby vulnerable to Improper Input ValidationNo score- ignitenet helios glinqIn IgniteNet HeliOS GLinq v2.2.1 r2961, the langSelection parameter is stored in the luci...4.3 Medium
- ignitenet helios glinqIn IgniteNet HeliOS GLinq v2.2.1 r2961, if a user logs in and sets the ‘wan_type’ parameter, the...6.5 Medium
- ignitenet helios glinqIn IgniteNet HeliOS GLinq v2.2.1 r2961, the login functionality does not contain any CSRF...5.4 Medium
- glpi-project glpiInsecure encryption algorithm in GLPI7.8 High
- ygopro ygocoreAn integer overflow was discovered in YGOPro ygocore v13.51. Attackers can use it to leak the...7.5 High
- gon project gon, canonical ubuntu linux, debian linux +2 moreGon gem lack of escaping certain input when outputting as JSON6.1 Medium
- ibm security secret serverIBM Security Secret Server prior to 10.9 could allow an attacker to bypass SSL security due to...3.1 Low
- ibm security secret serverIBM Security Secret Server proir to 10.9 could allow a remote attacker to bypass security...3.5 Low
- jenkins liquibase runner, jenkins project liquibase runner plugin +1 moreMissing permission check in Jenkins Liquibase Runner Plugin allows enumerating credentials IDs4.3 Medium
- jenkins liquibase runner, jenkins project liquibase runner plugin +1 moreXXE vulnerability in Jenkins Liquibase Runner Plugin7.1 High
- jenkins liquibase runner, jenkins project liquibase runner plugin +1 moreStored XSS vulnerability in Jenkins Liquibase Runner Plugin5.4 Medium
- jenkins implied labels, jenkins project implied labels plugin +1 moreMissing permission check in Jenkins Implied Labels Plugin allows reconfiguring the plugin4.3 Medium
- jenkins lockable resources, jenkins project lockable resources plugin +1 moreCSRF vulnerability in Jenkins Lockable Resources Plugin5.4 Medium
- jenkins warnings, jenkins project warnings plugin +1 moreCSRF vulnerability in Jenkins warnings Plugin allows remote code execution8.8 High
- jenkins script security, jenkins project script security plugin +1 moreSandbox bypass vulnerability in Jenkins Script Security Plugin9.9 Critical
- ge asset performance management classicGE Digital APM Classic, Versions 4.4 and prior. An insecure direct object reference (IDOR)...5.3 Medium
- ge asset performance management classicGE Digital APM Classic, Versions 4.4 and prior. Salt is not used for hash calculation of...7.2 High
- hpe utility computing service meterUnathenticated directory traversal in the ReceiverServlet class doPost() method can lead to...9.8 Critical
- hpe utility computing service meterUnathenticated directory traversal in the ReceiverServlet class doGet() method can lead to...7.5 High
- hpe utility computing service meterUnathenticated directory traversal in the DownloadServlet class execute() method can lead to...7.5 High
- arubanetworks cx 6200f firmware, cx 6300 firmware, cx 6400 firmware +3 more +5 moreTwo memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320,...7.5 High
- arubanetworks cx 6200f firmware, cx 6300 firmware, cx 6400 firmware +3 more +5 moreTwo memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320,...7.5 High
- red hat undertow, redhat jboss enterprise application platform, single sign-on +2 moreHTTP Request Smuggling in Undertow4.8 Medium
- redhat wildfly elytron, netapp oncommand insight, redhat codeready studio +4 more +6 moreSession Fixation in WildFly Elytron7.5 High
- powerdns authoritativeAn issue has been found in PowerDNS Authoritative Server before 4.3.1 where an authorized user...4.3 Medium
- pingidentity pingid integration for windows loginPingID Integration for Windows Login before 2.4.2 allows local users to gain privileges by...7.8 High
- peg-markdown project peg-markdown** UNSUPPORTED WHEN ASSIGNED ** peg-markdown 0.4.14 has a NULL pointer dereference in...7.5 High
- cisco webex wrf player, webex meetings, webex meetings online +1 more +3 moreCisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities7.8 High
- cisco webex wrf player, webex meetings, webex meetings online +1 more +3 moreCisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities7.8 High
- cisco webex wrf player, webex meetings, webex meetings online +1 more +3 moreCisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities7.8 High
- cisco roomos, telepresence collaboration endpoint, telepresence tc software +2 moreCisco TelePresence Collaboration Endpoint and RoomOS Software Denial of Service Vulnerabilities7.5 High
- cisco small business rv series router firmware, rv016 multi-wan vpn firmware, rv042 dual wan vpn +4 more +6 moreCisco Small Business Routers RV016, RV042, RV042G, RV082, RV320, and RV325 Command Injection Vulnerability7.2 High
- cisco spa525g2 5-line ip phone, spa500 series ip phones firmware +1 moreCisco Small Business SPA500 Series IP Phones Local Script Execution Vulnerability6.6 Medium
- cisco unified communications manager, unity connection +1 moreCisco Unified Communications Manager Information Disclosure Vulnerability4.3 Medium
- cisco web security appliance (wsa), web security appliance +1 moreCisco Web Security Appliance Management Interface Cross-Site Scripting Vulnerability6.1 Medium
- cisco managed services acceleratorCisco Managed Services Accelerator Open Redirect Vulnerability4.7 Medium
- cisco adaptive security appliance, adaptive security appliance software, adaptive security appliance (asa) software +2 more +4 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Remote Code Execution Vulnerability7.2 High
- cisco small business 250 series smart switches software, sf200-24 firmware, sf200-24fp firmware +112 more +114 moreCisco Small Business Switches Information Disclosure Vulnerability7.5 High
- cisco umbrella roaming client, umbrella enterprise roaming client for windows +1 moreCisco Umbrella Roaming Client for Windows Install Vulnerability4.4 Medium
- cisco vision dynamic signage directorCisco Vision Dynamic Signage Director Authentication Bypass Vulnerability6.5 Medium
- cisco anyconnect secure mobility clientCisco AnyConnect Secure Mobility Client for Android Service Hijack Vulnerability5.9 Medium
- cisco ios, ios xe, ios 12.2(15)b +2 moreCisco IOS and Cisco IOS XE Software Web UI Cross-Site Request Forgery Vulnerability8.8 High
- cisco unified customer voice portal (cvp), unified customer voice portal +1 moreCisco Unified Customer Voice Portal Insecure Direct Object Reference Vulnerability6.8 Medium
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software BGP EVPN Denial of Service Vulnerabilities8.6 High
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software BGP EVPN Denial of Service Vulnerabilities8.6 High
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software BGP EVPN Denial of Service Vulnerabilities8.6 High
- cisco emergency responderCisco Emergency Responder Stored Cross-Site Scripting Vulnerability5.5 Medium
- cisco firepower management center, secure firewall management center +1 moreCisco Firepower Management Center Lightweight Directory Access Protocol Authentication Bypass Vulnerability9.8 Critical
- cisco identity services engine software, fmc1000-k9 bios, fmc1000-k9 firmware +20 more +22 moreMultiple Cisco UCS-Based Products UEFI Secure Boot Bypass Vulnerability6.2 Medium
- Show moreLoading…