CVEs published in December 2020
1,575 vulnerabilities, 262 critical, 9 exploited.
- dces project dcesData races in dces8.1 High
- nanorand project nanorandImproper random number generation in nanorand9.8 Critical
- mcafee virusscan enterprise, mcafee, llc virusscan enterprise (vse) +1 moreIncorrect Permission Assignment for Critical Resource6.5 Medium
- jerryscriptIn JerryScript 2.3.0, there is an out-of-bounds read in main_print_unhandled_exception in the...9.1 Critical
- asus rt-ac88u firmwareAn injection vulnerability exists in RT-AC88U Download Master before 3.1.0.108. Accessing...7.5 High
- asus rt-ac88u firmwareAn information disclosure vulnerability exists in RT-AC88U Download Master before 3.1.0.108. A...7.5 High
- apple mac os x, macos, debian linux +22 more +24 morecurl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack...7.5 High
- pytest py, fedoraproject fedora, oracle zfs storage appliance kit +2 morepy vulnerable to Regular Expression Denial of Service7.5 High
- microsoft teamsMicrosoft Teams displayName stored cross-site scripting vulnerability5.7 Medium
- mozilla firefox, firefox mobile +1 moreIf the Remote Debugging via USB feature was enabled in Firefox for Android on an Android version...6.8 Medium
- mozilla firefox, firefox mobile +1 moreOneCRL was non-functional in the new Firefox for Android due to a missing service initialization....6.5 Medium
- mozilla firefox, firefox mobile +1 moreWhen a user downloaded a file in Firefox for Android, if a cookie is set, it would have been re...6.5 Medium
- mozilla firefox, firefox mobile +1 moreWhen accepting a malicious intent from other installed apps, Firefox for Android accepted...4.3 Medium
- moodleMoodle stored Cross-site Scripting (XSS)6.1 Medium
- anydeskAnyDesk for macOS versions 6.0.2 and older have a vulnerability in the XPC interface that does...7.8 High
c-blosc2OSS-FuzzHeap-buffer-overflow in blosc_run_decompression_with_contextNo score- apple mac os x, macos, debian linux +17 more +19 morecurl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to...7.5 High
- uclouvain openjpeg, debian linux, fedoraproject fedora +2 moreA flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x...7.8 High
- canonical python-apt, debian advanced package tool +1 moreVarious memory and file descriptor leaks in apt-python2.0 Low
- canonical apt, debian advanced package tool, netapp solidfire baseboard management controller firmware +2 moreapt integer wraparound5.7 Medium
- openexr, debian linux +1 moreA head-based buffer overflow exists in Academy Software Foundation OpenEXR 2.3.0 in writeTileData...5.5 Medium
- openexr, debian linux +1 moreA Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in...5.5 Medium
- openexr, debian linux +1 moreA heap-based buffer overflow vulnerability exists in Academy Software Foundation OpenEXR 2.3.0 in...5.5 Medium
- cog-creators red-dashboardRemote Code Execution (RCE) Exploit on Cross Site Scripting (XSS) Vulnerability7.7 High
- apereo opencastDisabled Hostname Verification in OpenCast4.8 Medium
- imagemagickin SetImageExtent() of /MagickCore/image.c, an incorrect image depth size can cause a memory leak...3.3 Low
- imagemagickThere are several memory leaks in the MIFF coder in /coders/miff.c due to improper image depth...5.5 Medium
- imagemagickA flaw was found in ImageMagick in MagickCore/quantum-private.h. An attacker who submits a...7.1 High
- c2fo fast-csvDenial of service in fast-csv5.7 Medium
- qemu, debian linux +1 moreA flaw was found in the memory management API of QEMU during the initialization of a memory...6.0 Medium
- deepref project deeprefPrototype pollution vulnerability in 'deepref'9.8 Critical
- apple icloud, ipados, itunes +9 more +11 moreA use after free issue was addressed with improved memory management. This issue is fixed in...7.8 High
- apple icloud, icloud for windows, ipados +6 more +8 moreThis issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.0.1,...7.5 High
- apple macos, mac os x +1 moreA path handling issue was addressed with improved validation. This issue is fixed in macOS Big...5.5 Medium
- imagemagickTIFFGetProfiles() in /coders/tiff.c calls strstr() which causes a large out-of-bounds read when...5.5 Medium
- imagemagick, fedoraproject fedora +1 moreIn WriteOnePNGImage() of the PNG coder at coders/png.c, an improper call to AcquireVirtualMemory(...6.1 Medium
- imagemagickA call to ConformPixelInfo() in the SetImageAlphaChannel() routine of /MagickCore/channel.c...5.5 Medium
- apple ipados, macos, watchos +4 more +6 moreA memory corruption issue was addressed with improved input validation. This issue is fixed in...7.8 High
- apple ipados, macos, watchos +3 more +5 moreA memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS...5.5 Medium
- apple ipados, macos, watchos +6 more +8 moreA type confusion issue was addressed with improved state handling. This issue is fixed in macOS...7.8 High
- apple ios, iphone os +1 moreA logic issue existed in the handling of Group FaceTime calls. The issue was addressed with...5.5 Medium
- apple icloud, ipados, itunes +5 more +7 moreA use after free issue was addressed with improved memory management. This issue is fixed in...7.8 High
- apple ipados, ios and ipados, iphone os +2 moreA use after free issue was addressed with improved memory management. This issue is fixed in iOS...7.8 High
- apple ipados, macos, tvos +3 more +5 moreAn out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS...7.8 High
- apple ipados, macos, tvos +3 more +5 moreAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in...7.8 High
- apple ipados, ios and ipados, iphone os +2 moreAn issue existed in the handling of incoming calls. The issue was addressed with additional state...5.5 Medium
- apple icloud, ipados, itunes +5 more +7 moreAn integer overflow was addressed through improved input validation. This issue is fixed in macOS...7.8 High
- apple icloud, ipados, itunes +5 more +7 moreAn out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS...7.8 High
- apple ipados, tvos, watchos +3 more +5 moreAn out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14...7.8 High
- apple ipados, macos, tvos +3 more +5 moreAn out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS...7.8 High
- Show moreLoading…