CVEs published in September 2020
1,908 vulnerabilities, 200 critical, 8 exploited.
ghostscriptOSS-FuzzUse-of-uninitialized-value in s_exD_processNo scoreghostscriptOSS-FuzzSegv on unknown address in s_DCTD_processNo scoreghostscriptOSS-FuzzUse-of-uninitialized-value in get_fapi_glyph_dataNo scoreghostscriptOSS-FuzzUse-of-uninitialized-value in gs_scan_tokenNo scorefirefox-esrDebianfirefox-esr - regression updateNo score- python urllib3, canonical ubuntu linux, debian linux +2 more +4 moreCRLF injection in urllib36.5 Medium
- trend micro security (consumer), trend micro, inc. micro security (consumer), trendmicro antivirus\+ 2020 +3 more +5 moreThe Trend Micro Security 2020 (v16) consumer family of products is vulnerable to a security race...6.3 Medium
- trend micro apex oneA vulnerability in the Trend Micro Apex One ServerMigrationTool component could allow an attacker...4.3 Medium
- trend micro apex oneA vulnerability in the Trend Micro Apex One ServerMigrationTool component could allow an attacker...7.8 High
- trend micro apex oneAn out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a...5.5 Medium
- trend micro apex oneAn out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a...5.5 Medium
- trend micro apex oneAn out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a...5.5 Medium
- trend micro apex oneAn out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a...5.5 Medium
- trend micro apex oneAn out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a...5.5 Medium
- trend micro apex oneA vulnerability in Trend Micro Apex One may allow a local attacker to manipulate the process of...7.8 High
- trend micro officescanA vulnerability in Trend Micro OfficeScan XG SP1 on Microsoft Windows may allow an attacker to...7.8 High
- carltongibson django-filter, fedoraproject fedora +1 moreDenial of Service vulnerability in django-filter7.5 High
- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +1 more +3 moreAn integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the `move_desc`...3.3 Low
- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +1 more +3 moreA flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A complete lack of...7.1 High
- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +1 more +3 moreA flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A lack of bounds...7.8 High
- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +1 more +3 moreA flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. Virtio ring descriptors,...7.8 High
- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +1 more +3 moreA flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A flawed bounds checking...8.8 High
bcm43xx-firmwareopenSUSESecurity update for bcm43xx-firmwareNo scorepcapplusplusOSS-FuzzBad-cast to pcpp::Layer from invalid vptrNo scorec-aresOSS-FuzzUse-of-uninitialized-value in ares_parse_caa_replyNo scoreopenscOSS-FuzzStack-buffer-overflow in sc_get_responseNo scoremediawikiDebianmediawiki - regression updateNo score- mediawiki, fedoraproject fedora +1 moreAn information leak was discovered in MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1...7.5 High
- mediawiki, fedoraproject fedora +1 moreMediaWiki Cross-site Scripting (XSS) vulnerability6.1 Medium
- mediawiki, fedoraproject fedora +1 moreAn issue was discovered in the FileImporter extension for MediaWiki before 1.34.4. An attacker...7.5 High
- mediawiki, fedoraproject fedora +1 moreXSS exists in the MobileFrontend extension for MediaWiki before 1.34.4 because section.line is...6.1 Medium
- dync project dyncOut of bounds read in dync5.5 Medium
- tigervnc, debian linux, opensuse leap +2 moreIn rfb/CSecurityTLS.cxx and rfb/CSecurityTLS.java in TigerVNC before 1.11.0, viewers mishandle...8.1 High
openh264OSS-FuzzHeap-buffer-overflow in WelsDec::WelsDecodeMbCabacPSliceNo scoreopenh264OSS-FuzzHeap-buffer-overflow in WelsDec::UpdateP16x16MotionInfoNo scoreopenh264OSS-FuzzUse-of-uninitialized-value in UpdateDecStatNoFreezingInfoNo score- python, canonical ubuntu linux, debian linux +8 more +10 morehttp.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x...7.2 High
- array-queue project array-queueuse-after-free vulnerability in Rust array-queue5.5 Medium
openh264OSS-FuzzHeap-buffer-overflow in WelsDec::DoErrorConSliceCopyNo scoreopenh264OSS-FuzzUNKNOWN READ in WelsCommon::WelsFreeNo scorelibfmtOSS-FuzzStack-buffer-underflow in fmt::v6::basic_format_args<fmt::v6::basic_format_context<std::__1::back_insert_iNo scorelibfmtOSS-FuzzHeap-buffer-overflow in fmt::v6::basic_string_view<char>::basic_string_viewNo scorerdkitOSS-FuzzUse-of-uninitialized-value in RDKit::SubstanceGroup::getBondTypeNo scoreopenscOSS-FuzzHeap-buffer-overflow in sc_oberthur_parse_publicinfoNo scoreopenh264OSS-FuzzHeap-buffer-overflow in WelsDec::NeedErrorConNo scoreopenscOSS-FuzzHeap-buffer-overflow in hextointNo scorewolfsslOSS-FuzzHeap-buffer-overflow in SendUserAuthPkOkNo scorearrowOSS-FuzzHeap-buffer-overflow in parquet::arrow::SchemaManifest::MakeNo score- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreA flaw was found in the Linux kernel's implementation of biovecs in versions before 5.9-rc7. A...5.5 Medium
- google tensorflowOut of bounds access in tensorflow-lite8.1 High
- Show moreLoading…