CVEs published in December 2020
1,575 vulnerabilities, 262 critical, 9 exploited.
- jenkins project chaos monkey plugin, netflix chaos monkey +1 moreMissing permission checks in Jenkins Chaos Monkey Plugin5.3 Medium
- jenkins project chaos monkey plugin, netflix chaos monkey +1 moreMissing permission checks in Jenkins Chaos Monkey Plugin7.5 High
- jenkins shelve project, jenkins project shelve project plugin +1 moreCSRF vulnerability in Jenkins Shelve Project Plugin8.1 High
- jenkins installation manager tool, jenkins project plugin installation manager tool +1 moreJenkins Plugin Installation Manager Tool did not verify plugin downloads9.8 Critical
- openclinic project openclinicOpenClinic version 0.8.2 is affected by a missing authentication vulnerability that allows...7.5 High
- valvesoftware game networking socketsValve's Game Networking Sockets prior to version v1.2.0 improperly handles long unreliable...9.8 Critical
- check point endpoint security client for windows, checkpoint endpoint security +1 moreCheck Point Endpoint Security Client for Windows before version E84.20 allows write access to the...7.8 High
- rockwellautomation micrologix 1100 b firmwareAn exploitable denial-of-service vulnerability exists in the IPv4 functionality of Allen-Bradley...7.5 High
- ec-cubeEC-CUBE Improper input validation vulnerability7.5 High
- ec-cubeEC-CUBE Improper Restriction of Rendered UI Layers or Frames6.1 Medium
- growi, inc. growiStored cross-site scripting vulnerability in GROWI v3.8.1 and earlier allows remote attackers to...6.1 Medium
- growi, inc. growiReflected cross-site scripting vulnerability in GROWI v4.0.0 and earlier allows remote attackers...6.1 Medium
- growi, inc. growiGROWI v4.1.3 and earlier allow remote attackers to obtain information which is not allowed to...7.5 High
- desknets neo, neojapan inc. desknet's neo +1 moreCross-site scripting vulnerability in desknet's NEO (desknet's NEO Small License V5.5 R1.5 and...6.1 Medium
pngcheckMageiaUpdated pngcheck packages fix a security vulnerabilityNo scoretorMageiaUpdated tor package fixes security vulnerabilitiesNo scorerpmlintSUSESecurity update for rpmlintNo score- pimcoreAuthorization bypass in Pimcore7.7 High
- imagemagick, debian linux +1 moreIn /MagickCore/statistic.c, there are several areas in ApplyEvaluateOperator() where a size_t...3.3 Low
- imagemagick, debian linux +1 moreA flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file...3.3 Low
- imagemagick, debian linux +1 moreA flaw was found in ImageMagick in coders/hdr.c. An attacker who submits a crafted file that is...5.5 Medium
- imagemagick, debian linux +1 moreWritePALMImage() in /coders/palm.c used size_t casts in several areas of a calculation which...3.3 Low
- imagemagick, debian linux +1 moreIn `GammaImage()` of /MagickCore/enhance.c, depending on the `gamma` value, it's possible to...5.5 Medium
- imagemagick, debian linux +1 moreIn IntensityCompare() of /MagickCore/quantize.c, a double value was being casted to int and...3.3 Low
- mozilla thunderbirdWhen reading SMTP server status codes, Thunderbird writes an integer value to a position on the...8.8 High
- infinispan, netapp active iq unified manager, redhat data grid +2 moreImproper Access Control in infinispan-server-runtime6.5 Medium
- 74cmsPHP remote file inclusion in the assign_resume_tpl method in Application/Common/Controller...9.8 Critical
- victor cms project cmsThe Victor CMS v1.0 application is vulnerable to SQL injection via the 'search' parameter on the...9.8 Critical
- bloodx project bloodxSQL injection vulnerability in BloodX 1.0 allows attackers to bypass authentication.9.8 Critical
- online doctor appointment booking system php and mysql project doctor appointment booking system php and mysqlAn SQL injection vulnerability was discovered in Online Doctor Appointment Booking System PHP and...9.8 Critical
- multi restaurant table reservation system project restaurant table reservation systemThe file view-chair-list.php in Multi Restaurant Table Reservation System 1.0 does not perform...9.8 Critical
- point of sales in php\/pdo project of sales in php\/pdoSQL injection vulnerability was discovered in Point of Sales in PHP/PDO 1.0, which can be...9.8 Critical
- car rental management system project rental management systemAn SQL injection vulnerability was discovered in Car Rental Management System v1.0 can be...9.8 Critical
- admerc gym management systemAn SQL injection vulnerability was discovered in Gym Management System In manage_user.php file,...9.8 Critical
- python openid connect project openid connect, openidc pyoidc +1 moreCryptographic issues in Python oic6.8 Medium
- bitrix24 bitrix frameworkAn issue was discovered in Bitrix24 Bitrix Framework (1c site management) 20.0. An "User...6.5 Medium
amundsen-frontendPyPIUNEDITABLE_SCHEMAS and UNEDITABLE_TABLE_DESCRIPTION_MATCH_RULES not respected by frontend service backendNo score- pixar openusd, apple macos +1 moreAn exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded...4.3 Medium
- pixar openusdAn exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded...4.3 Medium
- pixar openusdAn exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded...4.3 Medium
- pixar openusdA heap overflow vulnerability exists in the Pixar OpenUSD 20.05 parsing of compressed string...4.3 Medium
- libxlsAn exploitable Out-of-bounds Write vulnerability exists in the xls_addCell function of libxls 2.0...8.8 High
- pixar openusdA heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed...8.8 High
- ethereum, talos cpp-ethereum +1 moreAn exploitable out-of-bounds read vulnerability exists in libevm (Ethereum Virtual Machine) of...10.0 Critical
- docker crux linux docker imageThe official Crux Linux Docker images 3.0 through 3.4 contain a blank password for a root user....9.8 Critical
- appimage appimagedAppImage appimaged before 1.0.3 does not properly check whether a downloaded file is a valid...5.5 Medium
- lepton-cms leptoncmsLepton-CMS 4.7.0 is affected by cross-site scripting (XSS). An attacker can inject the XSS...4.8 Medium
- appimage libappimageAppImage libappimage before 1.0.3 allows attackers to trigger an overwrite of a system-installed ...6.5 Medium
- janobe online voting systemOnline Birth Certificate System Project V 1.0 is affected by cross-site scripting (XSS). This...6.1 Medium
- phoenix contact btp touch panel, phoenixcontact btp 2043w firmware, btp 2070w firmware +1 more +3 morePhoenix Contact BTP Touch Panels uncontrolled resource consumption7.5 High
- Show moreLoading…