CVEs published September 9, 2020
121 CVEs were published on September 9, 2020: 5 critical, 9 high. 1 is now in CISA KEV.
- Published
- 121
- Critical
- 5
- High
- 9
- Medium
- 55
- Low
- 3
- Unrated
- 49
- Now in CISA KEV
- 1
- Fix available
- 67
Most affected products
- SAP SE SAP 3D Visual Enterprise Viewer
- 38
- Palo Alto Networks PAN-OS
- 9
- Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- 5
- McAfee Endpoint Security for Windows
- 4
- Siemens AG SIMATIC RTLS Locating Manager
- 3
- Facebook Hermes · hermes-engine
- 2
- McAfee MVISION Endpoint
- 2
- Siemens AG Polarion Subversion Webclient
- 2
- Siemens AG Spectrum Power
- 2
- accel-ppp
- 1
Critical 5
- CVE-2020-15786A vulnerability has been identified in SIMATIC HMI Basic Panels 2nd Generation (incl.Siemens SIMATIC HMI Basic Panels 2nd Generation · Siemen… +2
- CVE-2020-2040PAN-OS: Buffer overflow when Captive Portal or Multi-Factor Authentication (MFA) is enabledPalo Alto Networks PAN-OS
- CVE-2020-6318A Remote Code Execution vulnerability exists in the SAP NetWeaver (ABAP Server, up to release 7.40) and ABAP Platform (> release 7.40).BecauSAP SE SAP NetWeaver (ABAP Server) and ABAP Platform
- CVE-2020-6320SAP Marketing (Servlet), version-130,140,150, allows an authenticated attacker to invoke certain functions that are restricted.SAP SE SAP Marketing
- CVE-2020-25213The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitrary PHP code because
High 9
- CVE-2020-15173Heap buffer overflow in ACCEL-PPPaccel-ppp
- CVE-2020-15163Invalid root may become trusted root in The Update Framework (TUF)theupdateframework tuf · tuf
- CVE-2020-2042PAN-OS: Buffer overflow in the management web interfacePalo Alto Networks PAN-OS
- CVE-2020-2041PAN-OS: Management web interface denial-of-service (DoS)Palo Alto Networks PAN-OS
- CVE-2020-2038PAN-OS: OS command injection vulnerability in the management web interfacePalo Alto Networks PAN-OS
- CVE-2020-2037PAN-OS: OS command injection vulnerability in the management web interfacePalo Alto Networks PAN-OS
- CVE-2020-2036PAN-OS: Reflected Cross-Site Scripting (XSS) vulnerability in management web interfacePalo Alto Networks PAN-OS
- CVE-2020-1749A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6.Linux Kernel kernel
- CVE-2020-7319Improper Access Control Vulnerability in ENS for WindowsMcAfee Endpoint Security for Windows
Medium, low and unrated 107
- CVE-2020-25219url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response compo
- CVE-2020-15903An issue was found in Nagios XI before 5.7.3.
- CVE-2020-1913An Integer signedness error in the JavaScript Interpreter in Facebook Hermes prior to commit 2c7af7ec481ceffd0d14ce2d7c045e475fd71dc6 allowsFacebook Hermes · hermes-engine
- CVE-2018-17774Ingenico Telium 2 POS terminals have an insecure NTPT3 protocol.
- CVE-2018-17773Ingenico Telium 2 POS terminals have a buffer overflow via SOCKET_TASK in the NTPT3 protocol.
- CVE-2018-17772Ingenico Telium 2 POS terminals allow arbitrary code execution via the TRACE protocol.
- CVE-2018-17771Ingenico Telium 2 POS terminals have hardcoded FTP credentials.
- CVE-2018-17770Ingenico Telium 2 POS terminals have a buffer overflow via the RemotePutFile command of the NTPT3 protocol.
- CVE-2018-17769Ingenico Telium 2 POS terminals have a buffer overflow via the 0x26 command of the NTPT3 protocol.
- CVE-2018-17768Ingenico Telium 2 POS terminals have an insecure TRACE protocol.
- CVE-2018-17767Ingenico Telium 2 POS terminals have hardcoded PPP credentials.
- CVE-2018-17766Ingenico Telium 2 POS Telium2 OS allow bypass of file-reading restrictions via the NTPT3 protocol.
- CVE-2018-17765Ingenico Telium 2 POS terminals have undeclared TRACE protocol commands.
- CVE-2020-1912An out-of-bounds read/write vulnerability when executing lazily compiled inner generator functions in Facebook Hermes prior to commit 091835Facebook Hermes · hermes-engine
- CVE-2020-15791A vulnerability has been identified in SIMATIC S7-300 CPU family (incl.Siemens SIMATIC S7-300 CPU family · Siemens SIMATIC S7-4… +2
- CVE-2020-15790A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP8).Siemens AG Spectrum Power
- CVE-2020-15789A vulnerability has been identified in Polarion Subversion Webclient (All versions).Siemens AG Polarion Subversion Webclient
- CVE-2020-15788A vulnerability has been identified in Polarion Subversion Webclient (All versions).Siemens AG Polarion Subversion Webclient
- CVE-2020-15787A vulnerability has been identified in SIMATIC HMI Unified Comfort Panels (All versions <= V16).Siemens SIMATIC HMI Unified Comfort Panels
- CVE-2020-15785A vulnerability has been identified in Siveillance Video Client (All versions).Siemens AG Siveillance Video Client
- CVE-2020-15784A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP8).Siemens AG Spectrum Power
- CVE-2020-10056A vulnerability has been identified in License Management Utility (LMU) (All versions < V2.4).Siemens AG License Management Utility
- CVE-2020-24916CGI implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to OS command injection.
- CVE-2020-24379WebDAV implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to XXE injection.
- CVE-2020-10051A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.10.2).Siemens AG SIMATIC RTLS Locating Manager
- CVE-2020-10050A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.10.2).Siemens AG SIMATIC RTLS Locating Manager
- CVE-2020-10049A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.10.2).Siemens AG SIMATIC RTLS Locating Manager
- CVE-2020-7068Use of freed hash key in the phar_parse_zipfile functionPHP Group PHP
- CVE-2020-13127A SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.04.1 allows remote authenticated attackers to execute arbitrary S
- CVE-2020-2044PAN-OS: Passwords may be logged in clear text while storing operational command (op command) historyPalo Alto Networks PAN-OS
- CVE-2020-2043PAN-OS: Passwords may be logged in clear text when using after-change-detail custom syslog field for config logsPalo Alto Networks PAN-OS
- CVE-2020-2039PAN-OS: Management web interface denial-of-service (DoS) through unauthenticated file uploadPalo Alto Networks PAN-OS
- CVE-2020-14292In the COVIDSafe application through 1.0.21 for Android, unsafe use of the Bluetooth transport option in the GATT connection allows attacker
- CVE-2020-25212A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt memory or possibly hav
- CVE-2020-25211In the Linux kernel through 5.8.7, local attackers able to inject conntrack netlink configuration could overflow a local buffer, causing cra
- CVE-2020-24566In Octopus Deploy 2020.3.x before 2020.3.4 and 2020.4.x before 2020.4.1, if an authenticated user creates a deployment or runbook process us
- CVE-2020-11986To be able to analyze gradle projects, the build scripts need to be executed.Apache NetBeans
- CVE-2020-24794Cross Site Scripting (XSS) vulnerability in Kentico before 12.0.75.
- CVE-2020-24195An Arbitrary File Upload in the Upload Image component in Sourcecodester Online Bike Rental v1.0 allows authenticated administrator to condu
- CVE-2020-24199Arbitrary File Upload in the Vehicle Image Upload component in Project Worlds Car Rental Management System v1.0 allows attackers to conduct
- CVE-2020-24198A persistent cross-site scripting vulnerability in Sourcecodester Stock Management System v1.0 allows remote attackers to inject arbitrary w
- CVE-2020-24074The decode program in silk-v3-decoder Version:20160922 Build By kn007 does not strictly check data, resulting in a buffer overflow.
- CVE-2020-24197A SQL injection vulnerability in the login component in Stock Management System v1.0 allows remote attacker to execute arbitrary SQL command
- CVE-2020-24194A Cross-site scripting (XSS) vulnerability in 'user-profile.php' in SourceCodester Daily Tracker System v1.0 allows remote attackers to inje
- CVE-2020-1968Raccoon attackOpenSSL
- CVE-2020-14384A flaw was found in JBossWeb in versions before 7.5.31.Final-redhat-3.JBossWeb
- CVE-2020-6311Banking services from SAP 9.0 (Bank Analyzer), version - 500, and SAP S/4HANA for financial products subledger, version � 100, does not corrSAP SE BANKING SERVICES FROM SAP · SAP SE S/4HANA FIN PROD…
- CVE-2020-6324SAP Netweaver AS ABAP(BSP Test Application sbspext_table), version-700,701,720,730,731,740,750,751,752,753,754,755, allows an unauthenticateSAP SE SAP NetWeaver AS ABAP
- CVE-2020-6359SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PLT file received from untrusted sources which results in crSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-6358SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated FBX file received from untrusted sources which results in crSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-6360SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted sources which results in crSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-6355SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated TGA file received from untrusted sources which results in crSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-6361SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated RLE files received from untrusted sources which results in cSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-6357SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated U3D file received from untrusted sources which results in crSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-6353SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SKP file received from untrusted sources which results in crSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-6356SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted sources which results in crSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-6354SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SKP file received from untrusted sources which results in crSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-6352SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated FBX file received from untrusted sources which results in crSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-6351SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated FBX file received from untrusted sources which results in crSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-6349SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources which results in crSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-6347SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HDR file received from untrusted sources which results in crSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-6350SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted sources which results in crSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-6346SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted sources which results in crSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-6348SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources which results in crSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-6288SAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface) allows an attacker with edit document rights to uploadSAP SE SAP Business Objects Business Intelligence Platform
- CVE-2020-6302SAP Commerce versions 6.7, 1808, 1811, 1905, 2005 contains the jSession ID in the backoffice URL when the application is loaded initially.SAP SE SAP Commerce
- CVE-2020-6345SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated TGA file received from untrusted sources which results in crSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-6344SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PDF file received from untrusted sources which results in crSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-6329SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SKP file received from untrusted sources which results in crSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-6283SAP Fiori Launchpad does not sufficiently encode user controlled inputs, and hence allowing the attacker to inject the meta tag into the lauSAP SE SAP Fiori
- CVE-2020-6330SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated 3DM file received from untrusted sources which results in crSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-6327SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated 3DM file received from untrusted sources which results in crSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-6331SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HPGL file received from untrusted sources which results in cSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-6328SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated CGM file received from untrusted sources which results in crSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-6326SAP NetWeaver (Knowledge Management), version-7.30,7.31,7.40,7.50, allows an authenticated attacker to create malicious links in the UI, wheSAP SE SAP NetWeaver
- CVE-2020-6321SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated U3D file received from untrusted sources which results in crSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-6322SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated 3DM file received from untrusted sources which results in crSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-6340SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-6343SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated EPS file received from untrusted sources which results in crSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-6342SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated U3D file received from untrusted sources which results in crSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-6339SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted sources which results in crSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-6337SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HDR file received from untrusted sources which results in crSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-6338SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated RH file received from untrusted sources which results in craSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-6313SAP NetWeaver Application Server JAVA(XML Forms) versions 7.30, 7.31, 7.40, 7.50 does not sufficiently encode user controlled inputs, which SAP SE SAP NetWeaver AS JAVA
- CVE-2020-6332SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HPGL file received from untrusted sources which results in cSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-6314SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HPGL file received from untrusted sources which results in cSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-6333SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated 3DM file received from untrusted sources which results in crSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-6336SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-6312SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), versions - 4.1, 4.2, allows an attacker with a non-admSAP SE SAP BusinessObjects Business Intelligence Platform
- CVE-2020-6341SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated EPS file received from untrusted sources which results in crSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-6334SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SKP file received from untrusted sources which results in crSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-6335SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HPGL file received from untrusted sources which results in cSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2020-14342It was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password, which could be used to inject arbitrary cosamba cifs-utils
- CVE-2020-7325Privilege Escalation vulnerability in MVISION EndpointMcAfee MVISION Endpoint
- CVE-2020-7324Improper Access Control vulnerability in MVISION EndpointMcAfee MVISION Endpoint
- CVE-2020-7323Authentication Protection Bypass vulnerability in ENS for WindowsMcAfee Endpoint Security for Windows
- CVE-2020-7322Exposure of Sensitive Information in ENS for WindowsMcAfee Endpoint Security for Windows
- CVE-2020-7320Protection Mechanism Failure in ENS for WindowsMcAfee Endpoint Security for Windows
- CVE-2020-5627Yodobashi App for Android versions 1.8.7 and earlier allows remote attackers to lead a user to access an arbitrary website via the vulnerablYODOBASHI CAMERA CO. Yodobashi App for Android
- CVE-2020-3674Information can leak into userspace due to improper transfer of data from kernel to userspace in Snapdragon Auto, Snapdragon Compute, SnapdrQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-3679u'During execution after Address Space Layout Randomization is turned on for QTEE, part of code is still mapped at known address including cQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-3617u'Buffer over-read Issue in Q6 testbus framework due to diag packet length is not completely validated before accessing the field and leads Qualcomm Snapdragon Compute, Snapdragon Consumer IOT, Snapd…
- CVE-2020-3634u'Multiple Read overflows issue due to improper length check while decoding Generic NAS transport/EMM info' in Snapdragon Auto, Snapdragon CQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-3656Out of bound access can happen in MHI command process due to lack of check of command channel id value received from MHI devices in SnapdragQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11129u'During the error occurrence in capture request, the buffer is freed and later accessed causing the camera APP to fail due to memory use-afQualcomm Snapdragon Consumer IOT, Snapdragon Mobile
- CVE-2020-11135u'Reachable assertion when wrong data size is returned by parser for ape clips' in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon InduQualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2020-11124u'Possible use-after-free while accessing diag client map table since list can be reallocated due to exceeding max client limit.' in SnapdraQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…