CVEs published September 17, 2020
138 CVEs were published on September 17, 2020: 1 critical, 6 high.
- Published
- 138
- Critical
- 1
- High
- 6
- Medium
- 0
- Low
- 4
- Unrated
- 127
- Now in CISA KEV
- 0
- Fix available
- 12
Most affected products
- Android
- 104
- helm · helm.sh/helm/v3 +1
- 4
- Nitro Pro
- 4
- inunosinsi soycms
- 2
- Apache Airflow · apache-airflow
- 1
- Apache Superset · apache-superset
- 1
- Atlassian Jira Server
- 1
- com.fasterxml.jackson.core:jackson-databind
- 1
- py-mini-racer
- 1
- SUSE Linux Enterprise Module for SUSE Manager Server · SUSE…
- 1
Critical 1
High 6
- CVE-2020-15183Reflected XSS leading to RCE in SoyCMSinunosinsi soycms
- CVE-2020-15182Cross-site Request Forgery leading to RCE in SOY CMSinunosinsi soycms
- CVE-2020-6113An exploitable vulnerability exists in the object stream parsing functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242 when updatingNitro Pro
- CVE-2020-6112An exploitable code execution vulnerability exists in the JPEG2000 Stripe Decoding functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2Nitro Pro
- CVE-2020-6115An exploitable vulnerability exists in the cross-reference table repairing functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242.Nitro Pro
- CVE-2020-6116An arbitrary code execution vulnerability exists in the rendering functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242.Nitro Pro
Medium, low and unrated 131
- CVE-2020-15187Duplicate plugin entries in Helmhelm · helm.sh/helm/v3 +1
- CVE-2020-15186Improper sanitization of plugin names in Helmhelm · helm.sh/helm/v3 +1
- CVE-2020-15185Duplicated chart entries in Helmhelm · helm.sh/helm/v3 +1
- CVE-2020-0375In Telephony, there is a possible permission bypass due to a missing permission check.Android
- CVE-2020-0374In NFC, there is a possible permission bypass due to an unsafe PendingIntent.Android
- CVE-2020-0266In factory reset protection, there is a possible FRP bypass due to a missing permission check.Android
- CVE-2020-0363In libmedia, there is a possible resource exhaustion due to improper input validation.Android
- CVE-2020-0362In libstagefright, there is a possible resource exhaustion due to improper input validation.Android
- CVE-2020-0353In libmp4extractor, there is a possible resource exhaustion due to a missing bounds check.Android
- CVE-2020-0351In libstagefright, there is possible CPU exhaustion due to improper input validation.Android
- CVE-2020-0332In libstagefright, there is a possible dead loop due to an uncaught exception.Android
- CVE-2020-0320In libstagefright, there is a possible resource exhaustion due to improper input validation.Android
- CVE-2020-0301In libstagefright, there is a possible resource exhaustion due to improper input validation.Android
- CVE-2020-0287In libmkvextractor, there is a possible resource exhaustion due to a missing bounds check.Android
- CVE-2020-0373In SoundTriggerHwService, there is a possible out of bounds read due to a race condition.Android
- CVE-2020-0370In libAACdec, there is a possible out of bounds read due to missing bounds check.Android
- CVE-2020-0364In libDRCdec, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2020-0361In libDRCdec, there is a possible information disclosure due to uninitialized data.Android
- CVE-2020-0359In GLESRenderEngine, there is a possible out of bounds read due to a buffer overflow.Android
- CVE-2020-0355In libFraunhoferAAC, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2020-0344In MediaProvider, there is a possible permissions bypass due to SQL injection.Android
- CVE-2020-0340In libcodec2_soft_mp3dec, there is a possible information disclosure due to uninitialized data.Android
- CVE-2020-0329In the OMX encoder, there is a possible out of bounds read due to invalid input validation.Android
- CVE-2020-0328In the camera, there is a possible out of bounds read due to an integer overflow.Android
- CVE-2020-0324In libsonivox, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2020-0314In AudioService, there are missing permission checks.Android
- CVE-2020-0279In the AAC parser, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2020-0274In the OMX parser, there is a possible information disclosure due to a returned raw pointer.Android
- CVE-2020-0270In tremolo, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2020-0125In mediadrm, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2020-0406In libmpeg2dec, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2020-0360In Notification Access Confirmation, there is a possible permissions bypass due to uninformed consent.Android
- CVE-2020-0358In SurfaceFlinger, there is a possible use after free due to a race condition.Android
- CVE-2020-0357In SurfaceFlinger, there is a possible use-after-free due to improper locking.Android
- CVE-2020-0356In the Audio HAL, there is a possible out of bounds write due to an incorrect bounds check.Android
- CVE-2020-0346In Mediaserver, there is a possible out of bounds write due to an integer overflow.Android
- CVE-2020-0336In SurfaceFlinger, there is possible memory corruption due to type confusion.Android
- CVE-2020-0306In LLVM, there is a possible ineffective stack cookie placement due to stack frame double reservation.Android
- CVE-2020-0321In the mp3 extractor, there is a possible out of bounds write due to uninitialized data.Android
- CVE-2020-0303In the Media extractor, there is a possible use after free due to improper locking.Android
- CVE-2020-0264In libstagefright, there is a possible out of bounds write due to an integer overflow.Android
- CVE-2020-0426In SyncManager, there is a possible permission bypass due to an unsafe PendingIntent.Android
- CVE-2020-0425There is a possible way to view notifications even when the "Lockdown" feature is on.Android
- CVE-2020-0323In libavb, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2020-0322In apexd, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2020-0369In libavb, there is a possible out of bounds write due to an integer overflow.Android
- CVE-2020-0372In ActivityManager, there is a possible access to protected data due to a missing permission check.Android
- CVE-2020-0352In MediaProvider, there is a possible permissions bypass due to SQL injection.Android
- CVE-2020-0343In NetworkStatsService, there is a possible access to protected data due to a missing permission check.Android
- CVE-2020-0317In UsageStatsManager, there is a possible access to protected data due to a missing permission check.Android
- CVE-2020-0312In Battery Saver, there is a possible permission bypass due to an unsafe PendingIntent.Android
- CVE-2020-0308In Window Manager, there is a possible permission bypass due to an unsafe PendingIntent.Android
- CVE-2020-0297In devicepolicy service, there is a possible permission bypass due to an unsafe PendingIntent.Android
- CVE-2020-0296In ADB server and USB server, there is a possible permission bypass due to an unsafe PendingIntent.Android
- CVE-2020-0293In Java network APIs, there is possible access to sensitive network state due to a missing permission check.Android
- CVE-2020-0290In PackageManager, there is a missing permission check.Android
- CVE-2020-0289In PackageManager, there is a missing permission check.Android
- CVE-2020-0288In PackageManager, there is a missing permission check.Android
- CVE-2020-0366In PackageInstaller, there is a possible permissions bypass due to a tapjacking vulnerability.Android
- CVE-2020-0345In DocumentsUI, there is a possible permission bypass due to a confused deputy.Android
- CVE-2020-0341In DisplayManager, there is a possible permission bypass due to a missing permission check.Android
- CVE-2020-0277In NetworkPolicyManagerService, there is a possible permissions bypass due to a missing permission check.Android
- CVE-2020-0130In screencap, there is a possible command injection due to improper input validation.Android
- CVE-2020-0333In UrlQuerySanitizer, there is a possible improper input validation.Android
- CVE-2020-0338In checkKeyIntent of AccountManagerService.java, there is a possible permission bypass.Android
- CVE-2020-0337In MediaProvider, there is a possible bypass of a permissions check due to a confused deputy.Android
- CVE-2020-0275In MediaProvider, there is a possible way to access ContentResolver and MediaStore entries the app shouldn't have access to due to a permissAndroid
- CVE-2020-0267In WindowManager, there is a possible launch of an unexpected app due to a confused deputy.Android
- CVE-2020-0330In iorap, there is a possible memory corruption due to a use after free.Android
- CVE-2020-15184Aliases are never checked in Helmhelm · helm.sh/helm/v3 +1
- CVE-2020-13260A vulnerability in the web-based management interface of RAD SecFlow-1v through 2020-05-21 could allow an authenticated attacker to upload a
- CVE-2020-0434In Pixel's use of the Catpipe library, there is possible memory corruption due to a use after free.Android
- CVE-2020-0433In blk_mq_queue_tag_busy_iter of blk-mq-tag.c, there is a possible use after free due to improper locking.Android
- CVE-2020-0432In skb_to_mamac of networking.c, there is a possible out of bounds write due to an integer overflow.Android
- CVE-2020-0431In kbd_keycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2020-0430In skb_headlen of /include/linux/skbuff.h, there is a possible out of bounds read due to memory corruption.Android
- CVE-2020-0429In l2tp_session_delete and related functions of l2tp_core.c, there is possible memory corruption due to a use after free.Android
- CVE-2020-0428In CamX code, there is a possible use after free due to a race condition.Android
- CVE-2020-24750FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to com.pastdev.hcom.fasterxml.jackson.core:jackson-databind
- CVE-2020-0403In the FPC TrustZone fingerprint App, there is a possible invalid command handler due to an exposed test feature.Android
- CVE-2020-0387In manifest files of the SmartSpace package, there is a possible tapjacking vector due to a missing permission check.Android
- CVE-2020-24753A memory corruption vulnerability in Objective Open CBOR Run-time (oocborrt) in versions before 2020-08-12 could allow an attacker to execut
- CVE-2020-13169Stored XSS (Cross-Site Scripting) exists in the SolarWinds Orion Platform before before 2020.2.1 on multiple forms and pages.
- CVE-2019-20919An issue was discovered in the DBI module before 1.643 for Perl.
- CVE-2020-25729ZoneMinder before 1.34.21 has XSS via the connkey parameter to download.php or export.php.
- CVE-2020-25489A heap overflow in Sqreen PyMiniRacer (aka Python Mini Racer) before 0.3.0 allows remote attackers to potentially exploit heap corruption.py-mini-racer
- CVE-2020-25490Lack of cryptographic signature verification in the Sqreen PHP agent daemon before 1.16.0 makes it easier for remote attackers to inject rul
- CVE-2020-24046A sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07.
- CVE-2020-24045A sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07.
- CVE-2020-25727The Reset Password add-on before 1.2.0 for Alfresco suffers from CMIS-SQL Injection, which allows a malicious user to inject a query within
- CVE-2020-25728The Reset Password add-on before 1.2.0 for Alfresco has a broken algorithm (involving an increment) that allows a malicious user to change a
- CVE-2020-11700An issue was discovered in Titan SpamTitan 7.07.
- CVE-2020-11699An issue was discovered in Titan SpamTitan 7.07.
- CVE-2020-11698An issue was discovered in Titan SpamTitan 7.07.
- CVE-2020-11804An issue was discovered in Titan SpamTitan 7.07.
- CVE-2020-11803An issue was discovered in Titan SpamTitan 7.07.
- CVE-2020-0342There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-160812576Android
- CVE-2020-0278There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-160812574Android
- CVE-2020-0391In applyPolicy of PackageManagerService.java, there is possible arbitrary command execution as System due to an unenforced protected-broadcaAndroid
- CVE-2020-0390In the app zygote SE Policy, there is a possible permissions bypass.Android
- CVE-2020-0389In createSaveNotification of RecordingService.java, there is a possible permission bypass due to an unsafe PendingIntent.Android
- CVE-2020-0229There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-156333725Android
- CVE-2020-0388In createEmergencyLocationUserNotification of GnssVisibilityControl.java, there is a possible permissions bypass due to an empty mutable PenAndroid
- CVE-2020-0386In onCreate of RequestPermissionActivity.java, there is a possible tapjacking vector due to an insecure default value.Android
- CVE-2020-0394In onCreate of BluetoothPairingDialog.java, there is a possible tapjacking vector due to an insecure default value.Android
- CVE-2020-0396In various places in Telephony, there is a possible permission bypass due to an unsafe PendingIntent.Android
- CVE-2020-0397In getNotificationBuilder of CarrierServiceStateTracker.java, there is a possible permission bypass due to an unsafe PendingIntent.Android
- CVE-2020-0395In showNotification of EmergencyCallbackModeService.java, there is a possible permission bypass due to an unsafe PendingIntent.Android
- CVE-2020-0393In decrypt and decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2020-0399In showLimitedSimFunctionWarningNotification of NotificationMgr.java, there is a possible permission bypass due to an unsafe PendingIntent.Android
- CVE-2020-0407In various functions in fscrypt_ice.c and related files in some implementations of f2fs encryption that use encryption hardware which only sAndroid
- CVE-2020-0382In RunInternal of dumpstate.cpp, there is a possible user consent bypass due to an uncaught exception.Android
- CVE-2020-0245In DecodeFrameCombinedMode of combined_decode.cpp, there is a possible out of bounds write due to a heap buffer overflow.Android
- CVE-2020-0401In setInstallerPackageName of PackageManagerService.java, there is a missing permission check.Android
- CVE-2020-0392In getLayerDebugInfo of SurfaceFlinger.cpp, there is a possible code execution due to a double free.Android
- CVE-2020-0383In Parse_ins of eas_mdls.c, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2020-0385In Parse_insh of eas_mdls.c, there is a possible out of bounds write due to an incorrect bounds check.Android
- CVE-2020-0384In Parse_art of eas_mdls.c, there is a possible out of bounds write due to an incorrect bounds check.Android
- CVE-2020-0381In Parse_wave of eas_mdls.c, there is a possible out of bounds write due to an integer overflow.Android
- CVE-2020-0379In the Bluetooth service, there is a possible spoofing attack due to a logic error.Android
- CVE-2020-0123There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-149871374Android
- CVE-2020-0380In allocExcessBits of bitalloc.c, there is a possible out of bounds write due to an incorrect bounds check.Android
- CVE-2020-0074In verifyIntentFiltersIfNeeded of PackageManagerService.java, there is a possible settings bypass allowing an app to become the default handAndroid
- CVE-2020-0404In uvc_scan_chain_forward of uvc_driver.c, there is a possible linked list corruption due to an unusual root cause.Android
- CVE-2020-14338A flaw was found in Wildfly's implementation of Xerces, specifically in the way the XMLSchemaValidator class in the JAXP component of WildflWildfly · xerces:xercesImpl
- CVE-2020-13944In Apache Airflow < 1.10.12, the "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit.Apache Airflow · apache-airflow
- CVE-2020-13948While investigating a bug report on Apache Superset, it was determined that an authenticated user could craft requests via a number of templApache Superset · apache-superset
- CVE-2020-14181Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Information Disclosure vuAtlassian Jira Server
- CVE-2020-0427In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free.Android
- CVE-2020-25215yWorks yEd Desktop before 3.20.1 allows XXE attacks via an XML or GraphML document.
- CVE-2020-25216yWorks yEd Desktop before 3.20.1 allows code execution via an XSL Transformation when using an XML file in conjunction with a custom stylesh