CVEs published in December 2020
1,575 vulnerabilities, 262 critical, 9 exploited.
highlight.jsnpm,@highlightjs/cdn-assetsnpm,@rootio/highlight.jsRoot +2 moreReDOS vulnerabities: multiple grammarsNo score- os4ed opensisOpenSIS Community Edition through 7.6 is affected by incorrect access controls for the file...7.5 High
- os4ed opensisOpenSIS Community Edition before 7.5 is affected by a cross-site scripting (XSS) vulnerability in...6.1 Medium
- mitsubishi electric corporation gt21 model of got2000 series, gs21 model of got simple series, and tension controller le7-40gu-l series, mitsubishielectric gs2107-wtbd-n firmware, gs2107-wtbd firmware +8 more +10 moreOut-of-bounds read issue in GT21 model of GOT2000 series (GT2107-WTBD all versions, GT2107-WTSD...7.5 High
- openstack horizon, debian linux +1 moreOpenStack Horizon Open redirect in workflow forms6.1 Medium
- gnu glibc, fedoraproject fedora, netapp e-series santricity os controller +3 more +5 moreThe iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4...4.8 Medium
- qemu, debian linux +1 morehw/net/e1000e_core.c in QEMU 5.0.0 has an infinite loop via an RX descriptor with a NULL buffer...5.5 Medium
- boom-core risvc-boomAn issue was discovered in SonicBOOM riscv-boom 3.0.0. For LR, it does not avoid acquiring a...5.5 Medium
fluent-bitOSS-FuzzHeap-buffer-overflow in flb_sds_cat_utf8No scorephpOSS-FuzzHeap-buffer-overflow in _zend_is_inconsistentNo scorewiresharkOSS-FuzzHeap-buffer-overflow in ieeeNUMBER_fragment_hashNo scoreqemuOSS-FuzzHeap-use-after-free in e1000e_write_packet_to_guestNo scoreopenscOSS-FuzzHeap-double-free in sc_pkcs15_free_tokeninfoNo scoreuwebsocketsOSS-FuzzUNKNOWN READ in std::__1::pair<unsigned int, void*> uWS::HttpParser::fenceAndConsumePostPadded<0No scorefluent-bitOSS-FuzzHeap-buffer-overflow in mk_rconf_readNo scoreuwebsocketsOSS-FuzzHeap-buffer-overflow in std::__1::pair<int, void*> uWS::HttpParser::fenceAndConsumePostPadded<0>No scoredebian-security-supportDebiandebian-security-support - security updateNo score- linux kernelAn information disclosure vulnerability exists in the /proc/pid/syscall functionality of Linux...4.0 Medium
- imagemagick, redhat enterprise linux +1 moreA flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file...3.3 Low
- imagemagick, debian linux, redhat enterprise linux +2 moreA flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file...3.3 Low
- imagemagick, debian linux, redhat enterprise linux +2 moreA flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file...3.3 Low
- imagemagick, debian linux, redhat enterprise linux +2 moreA flaw was found in ImageMagick in MagickCore/gem-private.h. An attacker who submits a crafted...3.3 Low
- imagemagick, debian linux, redhat enterprise linux +2 moreA flaw was found in ImageMagick in coders/bmp.c. An attacker who submits a crafted file that is...3.3 Low
- imagemagick, debian linux, redhat enterprise linux +2 moreIn RestoreMSCWarning() of /coders/pdf.c there are several areas where calls to GetPixelIndex()...3.3 Low
- imagemagick, debian linux +1 moreDue to a missing check for 0 value of `replace_extent`, it is possible for offset `p` to overflow...5.5 Medium
- imagemagick, debian linux, redhat enterprise linux +2 moreA flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file...3.3 Low
- imagemagick, debian linux +1 moreA flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file...7.8 High
- imagemagick, debian linux, redhat enterprise linux +2 moreA flaw was found in ImageMagick in MagickCore/segment.c. An attacker who submits a crafted file...3.3 Low
- prestashop productcommentsBlind SQL injection during the CommentGrade process6.8 Medium
- linux kernelAn issue was discovered in the Linux kernel before 5.9.3. io_uring takes a non-refcounted...7.8 High
- hashicorp go-slugUnsafe tar unpacking in HashiCorp go-slug7.5 High
- dadajiasu dada acceleratorThere is a local denial of service vulnerability in DaDa accelerator 5.6.19.816,, attackers can...5.5 Medium
- advancedsystemcare advanced systemcareThere is a local denial of service vulnerability in Advanced SystemCare 13 PRO 13.5.0.174....5.5 Medium
- apache tomcat, debian linux, netapp element plug-in +9 more +11 moreApache Tomcat: Request header mix-up between HTTP/2 streams7.5 High
- amoisoft anyviewIn AnyView (network police) network monitoring software 4.6.0.1, there is a local denial of...5.5 Medium
- drivergeniusIn DriverGenius 9.61.5480.28 there is a local privilege escalation vulnerability in the driver...7.8 High
- canonical snapcraft, ubuntu linux +1 moresnapcraft may build snaps with incorrect LD_LIBRARY_PATH6.8 Medium
- almico speedfanThere is a local privilege escalation vulnerability in Alfredo Milani Comparetti SpeedFan 4.52....7.8 High
- antiy zhijia terminal defense systemThere is a local denial of service vulnerability in the Antiy Zhijia Terminal Defense System 5.0...5.5 Medium
- wisecleaner wise care 365There is a local denial of service vulnerability in Wise Care 365 5.5.4, attackers can cause...5.5 Medium
- processmakerThe sort parameter in the download page /sysworkflow/en/neoclassic/reportTables/reportTables_Ajax...6.4 Medium
- pixar openusd, apple mac os x, macos +2 moreAn out-of-bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 uses SPECS...6.3 Medium
- saibo cyber game acceleratorIn Saibo Cyber Game Accelerator 3.7.9 there is a local privilege escalation vulnerability....7.8 High
- netscout airmagnet enterpriseNETSCOUT AirMagnet Enterprise 11.1.4 build 37257 and earlier has a sensor escalated privileges...8.1 High
- logicaldocA local privilege elevation vulnerability exists in the file system permissions of LogicalDoc 8.5...9.3 Critical
- pixar openusdA use-after-free vulnerability exists in a way Pixar OpenUSD 20.08 processes reference paths...8.8 High
- lightbend play frameworkData Amplification in Play Framework2.7 Low
- openclinic project openclinicOpenClinic version 0.8.2 is affected by a medical/test_new.php insecure file upload vulnerability...7.2 High
- openclinic project openclinicOpenClinic version 0.8.2 is affected by a stored XSS vulnerability in lib/Check.php that allows...5.4 Medium
- jenkins cvs, jenkins project cvs plugin +1 moreXXE vulnerability in Jenkins CVS Plugin7.5 High
- Show moreLoading…