CVEs published in September 2020
1,908 vulnerabilities, 200 critical, 8 exploited.
- ory fositeReplay of private_key_jwt possible in ORY Fosite8.1 High
- ory fositeIgnored storage errors on token revokation in ORY Fosite8.0 High
- gogogate ismartgate pro firmwareismartgate PRO 1.5.9 is vulnerable to clickjacking.8.1 High
- gogogate ismartgate pro firmwareismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading sounds to...9.8 Critical
- gogogate ismartgate pro firmwareismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron...9.8 Critical
- gogogate ismartgate pro firmwareismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron...9.8 Critical
- gogogate ismartgate pro firmwareismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron...9.8 Critical
- gogogate ismartgate pro firmwareismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading images to...7.5 High
- gogogate ismartgate pro firmwareismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload sound files via...6.5 Medium
- gogogate ismartgate pro firmwareismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload imae files via ...6.5 Medium
- gogogate ismartgate pro firmwareiSmartgate PRO 1.5.9 is vulnerable to CSRF via the busca parameter in the form used for searching...8.8 High
- gogogate ismartgate pro firmwareiSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to create a new user via ...6.5 Medium
- gogogate ismartgate pro firmwareiSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to open/close a specified...6.5 Medium
- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP Bypass via Double Encoded URL5.3 Medium
- aveva edna enterprise data historianAn SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA...9.8 Critical
- gemteks wrtm-127acn firmware, wrtm-127x9 firmware +1 moreAn issue was discovered on Gemtek WRTM-127ACN 01.01.02.141 and WRTM-127x9 01.01.02.127 devices....8.8 High
- aveva edna enterprise data historianSQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise...9.8 Critical
- aveva edna enterprise data historianAn SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA...9.8 Critical
- aveva edna enterprise data historianParameter psClass in ednareporting.asmx is vulnerable to unauthenticated SQL injection attacks....9.8 Critical
- aveva edna enterprise data historianParameter AttFilterValue in ednareporting.asmx is vulnerable to unauthenticated SQL injection...9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreA missing CAP_NET_RAW check in NFC socket creation in net/nfc/rawsock.c in the Linux kernel...5.5 Medium
- telmat accesslog firmware, educ\@box firmware, git\@box firmware +2 moreThe login page in Telmat AccessLog <= 6.0 (TAL_20180415) allows an attacker to get root shell...9.8 Critical
- telmat accesslog firmware, educ\@box firmware, git\@box firmware +2 moreThe ping page of the administration panel in Telmat AccessLog <= 6.0 (TAL_20180415) allows an...7.2 High
- fortinet fortimanager, fortianalyzer +1 moreAn improper neutralization of script-related HTML tags in a web page in FortiManager 6.2.0, 6.2.1...4.9 Medium
- fortinet fortitester, fortianalyzer +1 moreAn improper neutralization of input vulnerability in FortiTester before 3.9.0 may allow a remote...5.4 Medium
- fortinet fortianalyzer, fortitester +1 moreAn improper neutralization of input vulnerability in FortiAnalyzer before 6.4.1 and 6.2.5 may...8.8 High
- fortinet fortiosAn insufficient logging vulnerability in FortiGate before 6.4.1 may allow the traffic from an...5.3 Medium
- fortinet fortinacAn improper neutralization of input vulnerability in FortiNAC before 8.7.2 may allow a remote...6.1 Medium
- untis webuntisUntis WebUntis before 2020.9.6 allows XSS in multiple functions that store information.6.1 Medium
- checkpoint ica management portalCheck Point Security Management's Internal CA web management before Jumbo HFAs R80.20 Take 160,...6.4 Medium
- stack project stackOut-of-bounds write in stack9.8 Critical
bcm43xx-firmwareSUSESecurity update for bcm43xx-firmwareNo score- trend micro security (consumer), trend micro, inc. micro security (consumer), trendmicro antivirus\+ 2019 +4 more +6 moreAn incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 ...7.5 High
- trend micro security (consumer), trend micro, inc. micro security (consumer), trendmicro antivirus\+ 2019 +4 more +6 moreAn incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 ...7.5 High
- pexip infinityThe client API authentication mechanism in Pexip Infinity before 10 allows remote attackers to...9.8 Critical
- packagekit, canonical ubuntu linux +1 morePackageKit error messages leak presence and mimetype of files to unprivileged users3.3 Low
- aptdaemon project aptdaemonaptdaemon allows unprivileged users to test for the presence of local files via the transaction Locale property4.0 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.14.x. There are missing memory barriers when accessing...7.8 High
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.14.x. x86 PV guest kernels can experience denial of...5.5 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.14.x. There is a race condition when migrating timers...4.7 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.14.x. An x86 PV guest can trigger a host OS crash when...6.0 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.14.x. There is a lack of preemption in evtchn_reset() /...5.5 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.14.x. Out of bounds event channels are available to 32...5.5 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.14.x. There are evtchn_reset() race conditions. Uses of...7.0 High
- xen, fedoraproject fedora, opensuse leap +2 moreAn issue was discovered in Xen 4.14.x. There is a missing unlock in the XENMEM_acquire_resource...5.5 Medium
- xen, fedoraproject fedora +1 moreAn issue was discovered in Xen through 4.14.x. There is mishandling of the constraint that once...6.5 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.14.x. The PCI passthrough code improperly uses register...7.8 High
shopware/corePackagist,shopware/platformPackagist +1 moreNon-persistent XSS in the Storefront in ShopwareNo scoreshopware/corePackagist,shopware/platformPackagist +1 moreRCE in Third Party Library in ShopwareNo scoredev.personnummer:personnummerMavenpersonnummer/java vulnerable to Improper Input ValidationNo score- Show moreLoading…