CVEs published in September 2020
1,908 vulnerabilities, 200 critical, 8 exploited.
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreIn versions 13.0.0-13.0.0 HF2, 12.1.0-12.1.2 HF1, and 11.6.1-11.6.2, BIG-IP platforms with Cavium...5.9 Medium
- f5 big-ip, big-iq, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreIn BIG-IP 15.0.0-15.1.0.4, 14.1.0-14.1.2.7, 13.1.0-13.1.3.3, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2...7.5 High
- brocade fabric os, broadcom fabric operating system +1 moreRest API in Brocade Fabric OS v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c is...9.8 Critical
- brocade fabric os, broadcom fabric operating system +1 moreMultiple buffer overflow vulnerabilities in REST API in Brocade Fabric OS versions v8.2.1 through...9.8 Critical
- brocade fabric os, broadcom fabric operating system +1 moreA vulnerability in the command-line interface in Brocade Fabric OS before Brocade Fabric OS v8.2...5.5 Medium
- brocade fabric os, broadcom fabric operating system +1 moreBrocade Fabric OS versions before Brocade Fabric OS v9.0.0, v8.2.2c, v8.2.1e, v8.1.2k, v8.2...9.8 Critical
- brocade fabric os, broadcom fabric operating system +1 moreBrocade Fabric OS versions before Brocade Fabric OS v7.4.2g could allow an authenticated, remote...6.5 Medium
- brocade fabric os, broadcom fabric operating system +1 moreSupportlink CLI in Brocade Fabric OS Versions v8.2.1 through v8.2.1d, and 8.2.2 versions before...8.8 High
- brocade fabric os, broadcom fabric operating system +1 moreA vulnerability in the management interface in Brocade Fabric OS Versions before Brocade Fabric...7.5 High
- brocade fabric os, broadcom fabric operating system +1 moreHost Header Injection vulnerability in the http management interface in Brocade Fabric OS...6.1 Medium
- broadcom brocade sannav, brocade sannav +1 moreBrocade SANnav versions before v2.1.0, contain a Plaintext Password Storage vulnerability.9.8 Critical
- broadcom brocade sannav, brocade sannav +1 moreA vulnerability in Brocade SANnav versions before v2.1.0 could allow a remote authenticated...8.8 High
- brocade fabric os, broadcom fabric operating system +1 moreA Reflective XSS Vulnerability in HTTP Management Interface in Brocade Fabric OS versions before...5.4 Medium
- airforce nitf extract utilityU.S. Air Force Sensor Data Management System extract75 has a buffer overflow that leads to code...9.8 Critical
- ng-packagr project ng-packagrCommand Injection6.6 Medium
- ws-rs project ws-rsInsufficient size checks in ws7.5 High
- opensuse openldap2, leap 15.1, leap 15.2 +2 more +4 moreopenldap uses fixed paths in /tmp7.3 High
- zohocorp manageengine applications managerThe REST API in Zoho ManageEngine Applications Manager before build 14740 allows an...9.8 Critical
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager before 14 build 14730 has no protection against jsp/header...6.1 Medium
- redhat pagure, opensuse backports sle, leap +2 morePagure before 5.6 allows XSS via the templates/blame.html blame view.6.1 Medium
- cpanelcPanel before 88.0.3 mishandles the Exim filter path, leading to remote code execution (SEC-485).9.8 Critical
- cpanelcPanel before 88.0.3 allows attackers to bypass the SMTP greylisting protection mechanism (SEC-491).7.5 High
- cpanelchsh in cPanel before 88.0.3 allows a Jailshell escape (SEC-497).9.8 Critical
- cpanelIn cPanel before 88.0.3, insecure RNDC credentials are used for BIND on a templated VM (SEC-549).9.8 Critical
- cpanelIn cPanel before 88.0.3, an insecure auth policy API key is used by Dovecot on a templated VM ...7.5 High
- cpanelIn cPanel before 88.0.3, an insecure site password is used for Mailman on a templated VM (SEC-551).7.5 High
- cpanelIn cPanel before 88.0.3, an insecure SRS secret is used on a templated VM (SEC-552).7.5 High
- cpanelIn cPanel before 88.0.3, insecure chkservd test credentials are used on a templated VM (SEC-554).9.8 Critical
- cpanelcPanel before 88.0.3 has weak permissions (world readable) for the proxy subdomains log file (SEC...7.5 High
- cpanelcPanel before 88.0.3, upon an upgrade, establishes predictable PowerDNS API keys (SEC-561).7.5 High
- cpanelcPanel before 88.0.13 mishandles file-extension dispatching, leading to code execution (SEC-488).9.8 Critical
- cpanelcPanel before 88.0.13 allows bypass of a protection mechanism that attempted to restrict package...7.5 High
- cpanelcPanel before 88.0.13 allows self XSS via DNS Zone Manager DNSSEC interfaces (SEC-564).6.1 Medium
- cpanelcPanel before 90.0.10 allows self XSS via the WHM Edit DNS Zone interface (SEC-566).6.1 Medium
- cpanelThe email quota cache in cPanel before 90.0.10 allows overwriting of files.7.5 High
- cpanelcPanel before 90.0.10 allows self XSS via WHM Manage API Tokens interfaces (SEC-569).6.1 Medium
- cpanelcPanel before 90.0.10 allows self XSS via the Cron Jobs interface (SEC-573).6.1 Medium
- cpanelcPanel before 90.0.10 allows self XSS via the Cron Editor interface (SEC-574).6.1 Medium
- qemu, debian linux +1 morehw/usb/hcd-ohci.c in QEMU 5.0.0 has an infinite loop when a TD list has a loop.5.3 Medium
- qemu, debian linux +1 moreQEMU 5.0.0 has a heap-based Buffer Overflow in flatview_read_continue in exec.c because hw/sd...5.0 Medium
- qemu, debian linux +1 moreQEMU 5.0.0 has a use-after-free in hw/usb/hcd-xhci.c because the usb_packet_map return value is...3.2 Low
- framer previewThe Framer Preview application 12 for Android exposes com.framer.viewer.FramerViewActivity to...5.5 Medium
- multi user project userA Cross-Site Request Forgery (CSRF) vulnerability in the Multi User plugin 1.8.2 for GetSimple...8.8 High
- freebsd, omniosce omnios, openindiana +1 more +3 morebhyve, as used in FreeBSD through 12.1 and illumos (e.g., OmniOS CE through r151034 and...8.2 High
- mitel micloud management portalMitel MiCloud Management Portal before 6.1 SP5 could allow an attacker, by sending a crafted...5.3 Medium
- mitel micloud management portalMitel MiCloud Management Portal before 6.1 SP5 could allow an unauthenticated attacker to execute...9.6 Critical
- mitel micloud management portalMitel MiCloud Management Portal before 6.1 SP5 could allow a remote attacker to conduct a SQL...7.2 High
- mitel micloud management portalMitel MiCloud Management Portal before 6.1 SP5 could allow an attacker, by sending a crafted...5.3 Medium
- mitel micontact center businessThe Ignite portal in Mitel MiContact Center Business before 9.3.0.0 could allow an attacker to...7.1 High
- openmrs htmlformentryA remote code execution (RCE) vulnerability was discovered in the htmlformentry (aka HTML Form...8.8 High
- Show moreLoading…