Archive
September 2020
Vulnerabilities first published in this month (UTC), newest first.
2,205 results · Feed
-
Critical 9.8
Prototype Pollution
All versions of package deeps are vulnerable to Prototype Pollution via the set function.
-
Critical 9.8
Prototype Pollution
All versions of package arr-flatten-unflatten are vulnerable to Prototype Pollution via the constructor.
-
Medium 6.6
Openfind Mail2000 - Broken Access Control
Openfind Mail2000 contains Broken Access Control vulnerability, which can be used to execute unauthorized commands after attackers obtain the administrator access token or cookie.
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate project keys via an Info…
-
Critical 9.6
NETGEAR R8300 devices before 1.0.2.134 are affected by command injection by an unauthenticated attacker.