CVEs published in September 2020
1,908 vulnerabilities, 200 critical, 8 exploited.
- linuxfoundation harborAuthenticated users can exploit an enumeration vulnerability in Harbor4.3 Medium
- zohocorp manageengine adselfservice plusThe custom GINA/CP module in Zoho ManageEngine ADSelfService Plus before 5.5 build 5517 allows...9.8 Critical
- anixis password reset clientThe custom GINA/CP module in ANIXIS Password Reset Client before version 3.22 allows remote...8.8 High
- mbconnectline mbconnect24, mymbconnect24 +1 moreAn issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is...6.5 Medium
- mbconnectline mbconnect24, mymbconnect24 +1 moreAn issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is...4.3 Medium
- seat reservation system project reservation systemSeat Reservation System version 1.0 suffers from an Unauthenticated File Upload Vulnerability...9.8 Critical
- seat reservation system project reservation systemAn issue was discovered in SourceCodester Seat Reservation System 1.0. The file admin_class.php...9.1 Critical
- projectworlds visitor management systemProjectworlds Visitor Management System in PHP 1.0 allows XSS. The file myform.php does not...6.1 Medium
- projectworlds visitor management systemProjectworlds Visitor Management System in PHP 1.0 allows SQL Injection. The file front.php does...8.8 High
- lansweeperIn Lansweeper 8.0.130.17, the web console is vulnerable to a CSRF attack that would allow a low...8.0 High
- md4c project md4cmd_push_block_bytes in md4c.c in md4c 0.4.5 allows attackers to trigger use of uninitialized...7.5 High
- gitlabA vulnerability was discovered in GitLab versions prior to 13.1. Under certain conditions the...4.3 Medium
- gitlabA vulnerability was discovered in GitLab versions prior to 13.1. Username format restrictions...8.3 High
- gitlabA vulnerability was discovered in GitLab versions prior to 13.1. Under certain conditions the...6.5 Medium
- gitlabA vulnerability was discovered in GitLab versions prior 13.1. The comment section of the issue...7.1 High
- gitlabA vulnerability was discovered in GitLab versions prior 13.1. Under certain conditions private...7.7 High
- gitlabAn issue has been discovered in GitLab affecting versions prior to 12.10.13. GitLab was...5.4 Medium
- gitlabAn issue has been discovered in GitLab affecting versions prior to 12.10.13. GitLab was...4.4 Medium
- gitlabAn issue has been discovered in GitLab affecting versions from 12.6.2 prior to 12.10.13. GitLab...6.5 Medium
- gitlabAn issue has been discovered in GitLab affecting versions prior to 13.1.2, 13.0.8 and 12.10.13....4.8 Medium
- gitlabAn issue has been discovered in GitLab before version 12.10.13 that allowed a project member with...6.5 Medium
- gitlabA vulnerability was discovered in GitLab versions after 12.9. Due to improper verification of...7.2 High
- goxmldsig project goxmldsig, fedoraproject fedora +1 moreSignature Validation Bypass in goxmldsig5.3 Medium
- gitlabAn issue has been discovered in GitLab affecting versions prior to 13.1.2, 13.0.8 and 12.10.13....4.3 Medium
- gitlabAn issue has been discovered in GitLab affecting versions >=10.7 <13.0.14, >=13.1.0 <13.1.8, >=13...6.5 Medium
- metinfoAn issue was discovered in MetInfo v7.0.0 beta. There is SQL Injection via the install/index.php...9.8 Critical
- ibm security verify privilege vault remote, security verify privilege vault remote on-premises +1 moreIBM Security Secret Server (IBM Security Verify Privilege Vault Remote 1.2 ) could allow a local...3.3 Low
- hooskAn issue was discovered in Hoosk CMS v1.8.0. There is a XSS vulnerability in install/index.php6.1 Medium
- ivanti connect secure, pulse connect secure, policy secure +2 moreA vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an...7.2 High
- hooskAn issue was discovered in Hoosk CMS v1.8.0. There is a SQL injection vulnerability in install...9.8 Critical
- ivanti connect secure, pulsesecure pulse connect secure +1 moreA vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an...4.9 Medium
- ivanti connect secure, policy secure, pulsesecure pulse connect secure +2 more +4 moreA vulnerability in the authenticated user web interface of Pulse Connect Secure and Pulse Policy...6.1 Medium
- hooskAn issue was discovered in Hoosk CmS v1.8.0. There is an Remote Code Execution vulnerability in...9.8 Critical
- zohocorp manageengine application control plusAn SSRF issue was discovered in Zoho Application Control Plus before version 10.0.511. The mail...4.3 Medium
- ozeki ng sms gatewayAn issue was discovered in Ozeki NG SMS Gateway through 4.17.6. It stores SMS messages in .NET...7.2 High
- zohocorp manageengine application control plusAn issue was discovered in Zoho Application Control Plus before version 10.0.511. The Element...4.3 Medium
bcm43xx-firmwareSUSESecurity update for bcm43xx-firmwareNo scoreghostscriptOSS-FuzzUse-of-uninitialized-value in gs_scan_tokenNo scorelibxml2OSS-FuzzHeap-use-after-free in xmlStaticCopyNodeNo scorendpiOSS-FuzzSegv on unknown address in process_ndpi_collected_infoNo scoreghostscriptOSS-FuzzUse-of-uninitialized-value in s_exD_processNo scoreghostscriptOSS-FuzzUse-of-uninitialized-value in gx_dc_ht_colored_readNo scoreghostscriptOSS-FuzzUse-of-uninitialized-value in c_pdf14trans_clist_read_updateNo scoreghostscriptOSS-FuzzUse-of-uninitialized-value in gp_pwrite_implNo scoreghostscriptOSS-FuzzUse-of-uninitialized-value in s_A85D_processNo scoreghostscriptOSS-FuzzUse-of-uninitialized-value in FAPI_FF_get_glyphNo scoreghostscriptOSS-FuzzUNKNOWN READ in mem_mapped4_fill_rectangleNo scoreghostscriptOSS-FuzzHeap-use-after-free in dict_find_stringNo scoreghostscriptOSS-FuzzUse-of-uninitialized-value in load_truetype_glyphNo scoreghostscriptOSS-FuzzUse-of-uninitialized-value in zcheck_r6_passwordNo score- Show moreLoading…