CVEs published in December 2020
1,575 vulnerabilities, 262 critical, 9 exploited.
- hibernate orm, debian linux, oracle communications cloud native core console +2 more +4 moreSQL injection in hibernate-core7.4 High
- ahdinosaur set-inPrototype pollution in set-in9.8 Critical
- keyget project keygetkeyget vulnerable to prototype pollution9.8 Critical
- [unknown] cloudformsRed Hat Security Advisory: CloudForms 5.0.8 security, bug fix and enhancement update6.3 Medium
memmapcrates.iomemmap is unmaintainedNo score- haxx curl, apple mac os x, macos +22 more +24 moreA malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting...3.7 Low
java-1_8_0-openjdkSUSESecurity update for java-1_8_0-openjdkNo score- textpatternTextpattern CMS 4.6.2 allows CSRF via the prefs subsystem.8.8 High
- papermergeCross-site scripting in papermerge6.1 Medium
- cloud foundry capi, cf deployment, cloudfoundry capi-release +1 more +3 moreCloud Controller is vulnerable to denial of service via YAML parsing7.5 High
- umbraco cmsIncorrect permission enforcement in UmbracoCms4.3 Medium
- valvesoftware game networking socketsValve's Game Networking Sockets prior to version v1.2.0 improperly handles long encrypted...9.8 Critical
- hcl dominoHCL Domino is susceptible to a Buffer Overflow vulnerability in DXL due to improper validation of...9.8 Critical
- hcl notesHCL Notes is susceptible to a Buffer Overflow vulnerability in DXL due to improper validation of...6.7 Medium
- elastic kibana, redhat openshift container platform +1 moreThe elasticsearch-operator does not validate the namespace where kibana logging resource is created and due to that it is possible to replace the original openshift-logging console link (kibana consol…6.1 Medium
- canonical software-propertiessoftware-properties incorrectly validated TLS certificates6.8 Medium
- hp edgeline infrastructure managerA security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also...9.8 Critical
- gorillatoolkit websocket, debian linux +1 moreInteger overflow in github.com/gorilla/websocket7.5 High
- jupyter oauthenticatorBase class whitelist configuration ignored in OAuthenticator6.3 Medium
- trend micro apex one, officescan +1 moreAn improper access control information disclosure vulnerability in Trend Micro Apex One and...5.3 Medium
- trend micro apex one, officescan +1 moreAn improper access control information disclosure vulnerability in Trend Micro Apex One and...5.3 Medium
- trend micro apex one, officescan +1 moreAn improper access control information disclosure vulnerability in Trend Micro Apex One and...5.3 Medium
- trend micro apex one, officescan +1 moreAn improper access control information disclosure vulnerability in Trend Micro Apex One and...5.3 Medium
- trend micro serverprotect for linux, trendmicro serverprotect +1 moreA heap-based buffer overflow privilege escalation vulnerability in Trend Micro ServerProtect for...6.7 Medium
- trend micro apex one, officescan +1 moreAn improper access control information disclosure vulnerability in Trend Micro Apex One and...5.3 Medium
- solarwinds help deskCross-site Scripting (XSS) vulnerability in SolarWinds Web Help Desk 12.7.0 allows attacker to...5.4 Medium
- kia head unit firmwareKia Motors Head Unit with Software version: SOP.003.30.18.0703, SOP.005.7.181019, and SOP.007.1...7.8 High
- thinkadminCross-site scripting in ThinkAdmin5.4 Medium
- apache cordovaWe have resolved a security issue in the camera plugin that could have affected certain Cordova ...3.3 Low
- zte zxv10 w908 firmwareA ZXELINK wireless controller has a SQL injection vulnerability. A remote attacker does not need...9.8 Critical
- westerndigital my cloud os 5An issue was discovered on Western Digital My Cloud OS 5 devices before 5.06.115. A NAS Admin...9.8 Critical
- westerndigital my cloud os 5On Western Digital My Cloud OS 5 devices before 5.06.115, the NAS Admin dashboard has an...9.8 Critical
- westerndigital my cloud os 5An issue was discovered on Western Digital My Cloud OS 5 devices before 5.06.115. A NAS Admin...9.8 Critical
- atx minicmts200a firmwareA Directory Traversal vulnerability exists in ATX miniCMTS200a Broadband Gateway through 2.0 and...7.5 High
- edimax ic-3116w firmware, ic-3140w firmware +1 moreA stack-based buffer-overflow exists in Edimax IP-Camera IC-3116W (v3.06) and IC-3140W (v3.07),...9.8 Critical
- we-con plc editorWECON PLC Editor Versions 1.3.8 and prior has a heap-based buffer overflow vulnerabilities have...8.8 High
- we-con plc editorWECON PLC Editor Versions 1.3.8 and prior has a stack-based buffer overflow vulnerability has...8.8 High
- schneider-electric 140cpu65260 firmware, 140noc77101 firmware, 140noc78000 firmware +13 more +15 moreA CWE-255: Credentials Management vulnerability exists in Web Server on Modicon M340, Modicon...9.8 Critical
- schneider-electric acti9 powertag link firmware, acti9 powertag link hd firmware, acti9 smartlink el b firmware +4 more +6 moreA CWE-330 - Use of Insufficiently Random Values vulnerability exists in Smartlink, PowerTag, and...9.8 Critical
- schneider-electric ecostruxure energy expert, ecostruxure power monitoring expert, power manager +2 more +4 moreA CWE-284: Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power...8.8 High
- schneider-electric ecostruxure energy expert, ecostruxure power monitoring expert, power manager +2 more +4 moreA CWE-79: Improper Neutralization of Input During Web Page Generation vulnerability exists in...5.4 Medium
- schneider-electric ecostruxure energy expert, ecostruxure power monitoring expert, power manager +2 more +4 moreA CWE-284:Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power...7.2 High
- hcl dominoHCL Domino is susceptible to a lockout policy bypass vulnerability in the ID Vault service. An...5.3 Medium
- reffers project reffersData races in reffers4.7 Medium
- mcafee total protection, mcafee,llc mcafee total protection (mtp) +1 morePrivilege Escalation vulnerability in McAfee Total Protection (MTP)7.5 High
- huawei fusioncomputeFusionCompute versions 6.3.0, 6.3.1, 6.5.0, 6.5.1 and 8.0.0 have a privilege escalation...7.8 High
- huawei nova 4 firmware, sydneym-al00 firmware +1 moreHUAWEI nova 4 versions earlier than 10.0.0.165(C01E34R2P4) and SydneyM-AL00 versions earlier than...7.8 High
- the xorg project xorg-x11-server, redhat enterprise linux, x.org x server +2 moreA flaw was found in xorg-x11-server before 1.20.10. A heap-buffer overflow in XkbSetDeviceInfo...7.8 High
- uip project uip, open-iscsi project open-iscsi, siemens sentron 3va com100 firmware +8 more +10 moreAn issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent...8.2 High
- the xorg project xorg-x11-server, x.org x server +1 moreA flaw was found in the X.Org Server before version 1.20.10. An out-of-bounds access in the...7.8 High
- Show moreLoading…