Skip to content
OpenAdvisories

Archive

September 2020

Vulnerabilities first published in this month (UTC), newest first.

← August 2020 2020 / September October 2020 →
  1. 1192
  2. 2134
  3. 3364
  4. 4123
  5. 51
  6. 6 
  7. 7 
  8. 852
  9. 9124
  10. 1043
  11. 11223
  12. 12 
  13. 136
  14. 1460
  15. 1553
  16. 1682
  17. 17138
  18. 18105
  19. 1912
  20. 20 
  21. 2158
  22. 2234
  23. 2376
  24. 2499
  25. 25112
  26. 26 
  27. 2711
  28. 2810
  29. 2939
  30. 3054
All Critical High Medium Low Exploited only Public exploit

2,205 results · Feed

  • Unscored —
    CVE-2020-19450

    SQL injection exists in the jdownloads 3.2.63 component for Joomla! via com_jdownloads/helpers/jdownloadshelper.php, ge…

  • Unscored —
    CVE-2020-25133

    An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory tra…

  • Unscored —
    CVE-2020-25132

    An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to SQL Injection…

  • Unscored —
    CVE-2020-25131

    An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to Cross-Site Sc…

  • Unscored —
    CVE-2020-25130

    An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to SQL Injection…

  • Unscored —
    CVE-2020-5929

    In versions 13.0.0-13.0.0 HF2, 12.1.0-12.1.2 HF1, and 11.6.1-11.6.2, BIG-IP platforms with Cavium Nitrox SSL hardware a…

  • Unscored —
    CVE-2020-5930

    In BIG-IP 15.0.0-15.1.0.4, 14.1.0-14.1.2.7, 13.1.0-13.1.3.3, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2 and BIG-IQ 5.2.0-7.1.…

  • Unscored —
    CVE-2020-15374

    Rest API in Brocade Fabric OS v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c is vulnerable to multiple insta…

  • Unscored —
    CVE-2020-15373

    Multiple buffer overflow vulnerabilities in REST API in Brocade Fabric OS versions v8.2.1 through v8.2.1d, and 8.2.2 ve…

  • Unscored —
    CVE-2020-15372

    A vulnerability in the command-line interface in Brocade Fabric OS before Brocade Fabric OS v8.2.2a1, 8.2.2c, v7.4.2g, …

  • Unscored —
    CVE-2020-15371

    Brocade Fabric OS versions before Brocade Fabric OS v9.0.0, v8.2.2c, v8.2.1e, v8.1.2k, v8.2.0_CBN3, contains code injec…

  • Unscored —
    CVE-2020-15370

    Brocade Fabric OS versions before Brocade Fabric OS v7.4.2g could allow an authenticated, remote attacker to view a use…

  • Unscored —
    CVE-2020-15369

    Supportlink CLI in Brocade Fabric OS Versions v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c does not obfusc…

  • Unscored —
    CVE-2018-6448

    A vulnerability in the management interface in Brocade Fabric OS Versions before Brocade Fabric OS v9.0.0 could allow a…

  • Unscored —
    CVE-2018-6449

    Host Header Injection vulnerability in the http management interface in Brocade Fabric OS versions before v9.0.0 could …

  • Unscored —
    CVE-2019-16211

    Brocade SANnav versions before v2.1.0, contain a Plaintext Password Storage vulnerability.

  • Unscored —
    CVE-2019-16212

    A vulnerability in Brocade SANnav versions before v2.1.0 could allow a remote authenticated attacker to conduct an LDAP…

  • Unscored —
    CVE-2018-6447

    A Reflective XSS Vulnerability in HTTP Management Interface in Brocade Fabric OS versions before Brocade Fabric OS v9.0…

  • Unscored —
    CVE-2020-13995 Public exploit

    U.S. Air Force Sensor Data Management System extract75 has a buffer overflow that leads to code execution. An overflow …

  • Medium 6.6
    CVE-2020-7735

    Command Injection

    The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option.

    ng-packagr npm
  • Unscored —
    CVE-2020-15394 Public exploit

    The REST API in Zoho ManageEngine Applications Manager before build 14740 allows an unauthenticated SQL Injection via a…

  • Unscored —
    CVE-2020-15521

    Zoho ManageEngine Applications Manager before 14 build 14730 has no protection against jsp/header.jsp Cross-site Script…

  • Unscored —
    CVE-2019-11556

    Pagure before 5.6 allows XSS via the templates/blame.html blame view.

  • Unscored —
    CVE-2020-26098

    cPanel before 88.0.3 mishandles the Exim filter path, leading to remote code execution (SEC-485).

  • Unscored —
    CVE-2020-26099

    cPanel before 88.0.3 allows attackers to bypass the SMTP greylisting protection mechanism (SEC-491).

  • Unscored —
    CVE-2020-26100

    chsh in cPanel before 88.0.3 allows a Jailshell escape (SEC-497).

  • Unscored —
    CVE-2020-26101

    In cPanel before 88.0.3, insecure RNDC credentials are used for BIND on a templated VM (SEC-549).

  • Unscored —
    CVE-2020-26102

    In cPanel before 88.0.3, an insecure auth policy API key is used by Dovecot on a templated VM (SEC-550).

  • Unscored —
    CVE-2020-26103

    In cPanel before 88.0.3, an insecure site password is used for Mailman on a templated VM (SEC-551).

  • Unscored —
    CVE-2020-26104

    In cPanel before 88.0.3, an insecure SRS secret is used on a templated VM (SEC-552).

  • Unscored —
    CVE-2020-26105

    In cPanel before 88.0.3, insecure chkservd test credentials are used on a templated VM (SEC-554).

  • Unscored —
    CVE-2020-26106

    cPanel before 88.0.3 has weak permissions (world readable) for the proxy subdomains log file (SEC-558).

  • Unscored —
    CVE-2020-26107

    cPanel before 88.0.3, upon an upgrade, establishes predictable PowerDNS API keys (SEC-561).

  • Unscored —
    CVE-2020-26108

    cPanel before 88.0.13 mishandles file-extension dispatching, leading to code execution (SEC-488).

  • Unscored —
    CVE-2020-26109

    cPanel before 88.0.13 allows bypass of a protection mechanism that attempted to restrict package modification (SEC-557).

  • Unscored —
    CVE-2020-26110

    cPanel before 88.0.13 allows self XSS via DNS Zone Manager DNSSEC interfaces (SEC-564).

  • Unscored —
    CVE-2020-26111

    cPanel before 90.0.10 allows self XSS via the WHM Edit DNS Zone interface (SEC-566).

  • Unscored —
    CVE-2020-26112

    The email quota cache in cPanel before 90.0.10 allows overwriting of files.

  • Unscored —
    CVE-2020-26113

    cPanel before 90.0.10 allows self XSS via WHM Manage API Tokens interfaces (SEC-569).

  • Unscored —
    CVE-2020-26114

    cPanel before 90.0.10 allows self XSS via the Cron Jobs interface (SEC-573).