CVEs published in September 2020
1,908 vulnerabilities, 200 critical, 8 exploited.
- pexip infinityPexip Infinity before 24.1 has Improper Input Validation, leading to temporary denial of service...5.3 Medium
- pexip infinityPexip Infinity before 23.4 has a lack of input validation, leading to temporary denial of service...7.5 High
- pexip infinityPexip Infinity 23.x before 23.3 has improper input validation, leading to a temporary software...7.5 High
- pexip reverse proxy and turn server, infinity +1 morePexip Reverse Proxy and TURN Server before 6.1.0 has Incorrect UDP Access Control via TURN.9.8 Critical
- pexip infinityPexip Infinity before 17 allows an unauthenticated remote attacker to achieve stored XSS via...6.1 Medium
- pexip infinityPexip Infinity before 20.1 allows privilege escalation by restoring a system backup.7.2 High
- pexip infinityPexip Infinity before 20.1 allows Code Injection onto nodes via an admin.7.2 High
- pexip infinityPexip Infinity before 18 allows remote Denial of Service (XML parsing).7.5 High
- pexip infinityPexip Infinity before 18 allows Remote Denial of Service (TLS handshakes in RTMP).7.5 High
- rubetek rv-3406 firmware, rv-3409 firmware, rv-3411 firmware +2 moreThe Telnet service of Rubetek cameras RV-3406, RV-3409, and RV-3411 cameras (firmware versions...9.8 Critical
- rubetek rv-3406 firmware, rv-3409 firmware, rv-3411 firmware +2 moreA Cleartext Transmission issue was discovered on Rubetek RV-3406, RV-3409, and RV-3411 cameras ...8.1 High
- rubetek rv-3406 firmware, rv-3409 firmware, rv-3411 firmware +2 moreThe Telnet service of Rubetek RV-3406, RV-3409, and RV-3411 cameras (firmware versions v342, v339...9.4 Critical
libavifOSS-FuzzUNKNOWN READ in avifRWDataSetNo scorelibavifOSS-FuzzHeap-use-after-free in avifFileTypeIsCompatibleNo scorefluent-bitOSS-FuzzUNKNOWN READ in flb_sds_catNo scoreopenscOSS-FuzzHeap-buffer-overflow in hextointNo scorelibfmtOSS-FuzzStack-buffer-overflow in fmt::v7::detail::buffer<char>::push_backNo scoreonigurumaOSS-FuzzStack-buffer-overflow in onigenc_unicode_get_case_fold_codes_by_strNo scorelibavifOSS-FuzzHeap-buffer-overflow in avifROStreamReadNo score- mediawiki, fedoraproject fedora +1 moreMediaWiki Cross-site Scripting (XSS) vulnerability6.1 Medium
- mediawiki, fedoraproject fedora +1 moreOATHAuth extension in MediaWiki is not implementing rate limit7.5 High
- mediawiki, fedoraproject fedora +1 moreMediaWiki Cross-site Scripting (XSS) vulnerability6.1 Medium
- mediawiki, fedoraproject fedora +1 moreMediaWiki Special:UserRights exposes the existence of hidden users5.3 Medium
- mediawiki, fedoraproject fedora +1 moreMediaWiki Cross-site Scripting (XSS) vulnerability6.1 Medium
- qemu, debian linux +1 morehw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer over-read via values obtained from the...5.0 Medium
- sophos sg utm, unified threat management +1 moreA remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM before v9.705 MR5,...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreWhen recursing through graphical layers while scrolling, an iterator may have become invalid,...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreBy exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the...6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreFirefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to...6.1 Medium
- mozilla firefoxWhen processing surfaces, the lifetime may outlive a persistent buffer leading to memory...8.8 High
- mozilla firefoxMozilla developers reported memory safety bugs present in Firefox 80. Some of these bugs showed...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreMozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some...8.8 High
- debian linux, linux kernel, redhat enterprise linux +2 moreA flaw was found in the Linux kernel. A use-after-free memory flaw was found in the perf...7.8 High
- pango hotspot shieldImproper directory permissions in the Hotspot Shield VPN client software for Windows 10.3.0 and...7.8 High
- actfaxActFax Version 7.10 Build 0335 (2020-05-25) is susceptible to a privilege escalation...7.3 High
- prestashopStored XSS in PrestaShop5.4 Medium
- jerryscriptvm/opcodes.c in JerryScript 2.2.0 allows attackers to hijack the flow of control by controlling a...7.5 High
- prestashopBlind SQL Injection in PrestaShop9.8 Critical
- prestashopPotential XSS in PrestaShop5.4 Medium
- lenovo enterprise network diskA DOM-based cross-site scripting (XSS) vulnerability was reported in Lenovo Enterprise Network...6.1 Medium
- lenovo enterprise network diskA reflective cross-site scripting (XSS) vulnerability was reported in Lenovo Enterprise Network...6.1 Medium
- lenovo 63 firmware, bios, h50-30g firmware +25 more +27 moreA potential vulnerability in the SMI callback function used in the EEPROM driver in some Lenovo...6.4 Medium
- nakivo backup \& replication transporterLack of access control in Nakivo Backup & Replication Transporter version 9.4.0.r43656 allows...9.8 Critical
- nakivo backup \& replication directorInsecure permissions in Nakivo Backup & Replication Director version 9.4.0.r43656 on Linux allow...7.8 High
- oauth-ruby project oauth-rubyImproper Certificate Validation in oauth ruby gem7.4 High
- joplin project joplinCross-site Scripting in Joplin6.1 Medium
- cisco ios xe, ios xe software 16.1.1 +1 moreCisco IOS XE Software Privilege Escalation Vulnerabilities8.8 High
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Multicast DNS Denial of Service Vulnerability8.6 High
- cisco ios xe, ios xe software +1 moreCisco IOS XE Wireless Controller Software for the Catalyst 9000 Family SNMP Trap Denial of Service Vulnerability7.4 High
- jdownloadsSQL injection exists in the jdownloads 3.2.63 component for Joomla! com_jdownloads/models/send...7.5 High
- Show moreLoading…