Archive
21 September 2020
Vulnerabilities first published on this day (UTC), newest first.
58 results · Feed
-
Unscored —
Insufficient data validation in media in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially …
-
Unscored —
Type confusion in V8 in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bo…
-
Unscored —
Insufficient policy validation in serial in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potential…
-
Unscored —
Insufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced…
-
Unscored —
Insufficient policy validation in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced …
-
Unscored —
Heap buffer overflow in storage in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perfor…
-
Unscored —
Insufficient policy enforcement in networking in Google Chrome prior to 85.0.4183.102 allowed an attacker who convinced…
-
High 7.5
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack …
-
Medium 6.1
IBM Aspera Web Application 1.9.14 PL1 is vulnerable to cross-site scripting. This vulnerability allows users to embed a…
-
Medium 5.3
IBM WebSphere Application Server Liberty 17.0.0.3 through 20.0.0.9 running oauth-2.0 or openidConnectServer-1.0 server …
-
High 7.5
IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.12 could allow a remote attacker to cause a denial of service by send…
-
High 7.5
IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.12 could allow a remote attacker to cause a denial of service by send…
-
Medium 4.3
IBM Business Automation Content Analyzer on Cloud 1.0 does not set the secure attribute on authorization tokens or sess…
-
High 7.5
IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.12 could allow a remote attacker to cause a denial of service by send…
-
Unscored —CVE-2020-16171 Public exploit
An issue was discovered in Acronis Cyber Backup before 12.5 Build 16342. Some API endpoints on port 9877 under /api/ams…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availabil…
-
Unscored —
Affected versions of Atlassian Jira Service Desk Server and Data Center allow remote attackers authenticated as a non-a…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow remote, unauthenticated attackers to view custom field…