Skip to content
OpenAdvisories

Archive

September 2020

Vulnerabilities first published in this month (UTC), newest first.

2,205 results · Feed

  • Critical 9.8

    Prototype Pollution

    All versions of package deeps are vulnerable to Prototype Pollution via the set function.

  • Critical 9.8

    Prototype Pollution

    All versions of package arr-flatten-unflatten are vulnerable to Prototype Pollution via the constructor.

  • Medium 6.6

    Openfind Mail2000 - Broken Access Control

    Openfind Mail2000 contains Broken Access Control vulnerability, which can be used to execute unauthorized commands after attackers obtain the administrator access token or cookie.

  • Unscored —

    Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate project keys via an Info…

  • Critical 9.6

    NETGEAR R8300 devices before 1.0.2.134 are affected by command injection by an unauthenticated attacker.