CVEs published in December 2020
1,575 vulnerabilities, 262 critical, 9 exploited.
- apache groovy, atlas, netapp snapcenter +18 more +20 moreInformation Disclosure in Apache Groovy5.5 Medium
- incomcms project incomcmsIncomCMS 2.0 has a modules/uploader/showcase/script.php insecure file upload vulnerability. This...9.8 Critical
- apache apisixIn Apache APISIX, the user enabled the Admin API and deleted the Admin API access IP restriction...6.5 Medium
- acdsee photo studio 2021PlugIns\IDE_ACDStd.apl in ACDSee Photo Studio Studio Professional 2021 14.0 Build 1705 has a User...9.8 Critical
- inspur nf5180m5 firmware, nf5260m5 firmware, nf5266m5 firmware +12 more +14 moreInspur NF5266M5 through 3.21.2 and other server M5 devices allow remote code execution via...7.2 High
- intland codebeamerAn issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4. The ReqIF XML data, used...5.5 Medium
- katacontainers kata containersAn issue was discovered in Kata Containers through 1.11.3 and 2.x through 2.0-rc1. The runtime will execute binaries given using annotations without any kind of validation. Someone who is granted acce…8.8 High
- huawei hima-l29c, honor 20 pro, mate 20 +23 more +25 moreThere is a buffer overflow vulnerability in several Huawei products. The system does not...7.8 High
- druva insyncinSync Client installer for macOS versions v6.8.0 and prior could allow an attacker to gain...7.8 High
- eat spray love project spray loveThe Eat Spray Love mobile app for both iOS and Android contains logic that allows users to bypass...9.8 Critical
- eat spray love project spray loveThe Eat Spray Love mobile app for both iOS and Android contains a backdoor account that, when...9.8 Critical
safe_corecrates.iocrate has been renamed to `sn_client`No scoresafe_vaultcrates.iocrate has been renamed to `sn_node`No scoresafe_authenticatorcrates.iocrate has been superseded by `sn_client`No scoresafe_appcrates.iocrate has been superseded by `sn_client`No scorejava-1_8_0-openjdkopenSUSESecurity update for java-1_8_0-openjdkNo score- google chromeUninitialized Use in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to...6.5 Medium
- google chromeOut of bounds read in networking in Google Chrome prior to 87.0.4280.88 allowed a remote attacker...8.1 High
- google chromeInsufficient data validation in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote...6.5 Medium
- google chromeUse after free in extensions in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to...8.8 High
- google chromeUse after free in media in Google Chrome on OS X prior to 87.0.4280.88 allowed a remote attacker...8.8 High
- google chromeUse after free in clipboard in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to...8.8 High
- seeddmsCross-site scripting (XSS) exists in SeedDMS 6.0.13 via the folderid parameter to views/bootstrap...6.1 Medium
python-certbotDebianpython-certbot - switch to ACMEv2 APINo score- imagemagick, debian linux +1 moreImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which...7.8 High
- debian linux, linux kernel +1 moreA vulnerability was found in Linux Kernel where in the spk_ttyio_receive_buf2() function, it...5.5 Medium
- apache traffic serverATS negative cache option is vulnerable to a cache poisoning attack. If you have this option...7.5 High
- apache traffic serverThe ATS ESI plugin has a memory disclosure vulnerability. If you are running the plugin please...7.5 High
- libpng pngcheck, debian linux, fedoraproject extra packages for enterprise linux +1 more +3 moreA flaw was found in the check_chunk_name() function of pngcheck-2.4.0. An attacker able to pass a...3.3 Low
- ordered-float project ordered-floatordered_float:NotNan may contain NaN after panic in assignment operators5.5 Medium
openthreadOSS-FuzzStack-buffer-overflow in ot::MeshCoP::ChannelMaskEntryBase::GetEntrySizeNo scoreqpdfOSS-FuzzHeap-buffer-overflow in Pl_ASCII85Decoder::writeNo score- gnu glibc, netapp cloud backup, solidfire baseboard management controller +4 more +6 moresysdeps/i386/ldbl2mpn.c in the GNU C Library (aka glibc or libc6) before 2.23 on x86 targets has...7.5 High
- misp-project mispapp/View/Elements/genericElements/SingleViews/Fields/genericField.ctp in MISP 2.4.135 has XSS via...6.1 Medium
privoxyMageiaUpdated privoxy package fixes security vulnerabilitiesNo scorejava-1_8_0-openjdkopenSUSESecurity update for java-1_8_0-openjdkNo scorefluent-bitOSS-FuzzHeap-buffer-overflow in tinfl_decompressNo scorefluent-bitOSS-FuzzHeap-buffer-overflow in mk_string_copy_substrNo scorefluent-bitOSS-FuzzHeap-buffer-overflow in process_chunked_dataNo scorefluent-bitOSS-FuzzHeap-buffer-overflow in flb_http_doNo scoreyaraOSS-FuzzHeap-buffer-overflow in dotnet_parse_tilde_2No score- linux kernel, redhat enterprise linux, openshift container platform +2 moreA flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On...6.7 Medium
- kaspersky anti-ransomware toolThe installer of Kaspersky Anti-Ransomware Tool (KART) prior to KART 4.0 Patch C was vulnerable...7.8 High
html-purifynpmCross-Site Scripting bypass in html-purifyNo score- arachnys cabotCabot Cross Site Scripting (XSS) vulnerability via Address column4.8 Medium
- moddableNull Pointer Dereference. in xObjectBindingFromExpression at moddable/xs/sources/xsSyntaxical.c...7.5 High
- moddableHeap buffer overflow at moddable/xs/sources/xsDebug.c in Moddable SDK before before 20200903. The...7.5 High
- moddableInvalid Memory Access in fxUTF8Decode at moddable/xs/sources/xsCommon.c:916 in Moddable SDK...7.5 High
- moddableHeap buffer overflow in the fxCheckArrowFunction function at moddable/xs/sources/xsSyntaxical.c...9.8 Critical
- moddableInvalid Memory Access in the fxProxyGetter function in moddable/xs/sources/xsProxy.c in Moddable...7.5 High
- Show moreLoading…