CVEs published in December 2020
1,575 vulnerabilities, 262 critical, 9 exploited.
- azure azure-c-shared-utility, azure-uamqp-c, microsoft azure-c-shared-utility release lts 02 2020 ref02 +15 more +17 moreAzure SDK for C Security Feature Bypass Vulnerability7.4 High
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +9 more +11 moreKerberos Security Feature Bypass Vulnerability6.5 Medium
- microsoft azure sdk, azure sdk for java +1 moreAzure SDK for Java Security Feature Bypass Vulnerability7.4 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +21 more +23 moreWindows Backup Engine Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +21 more +23 moreWindows Backup Engine Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +21 more +23 moreWindows Backup Engine Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +21 more +23 moreWindows Backup Engine Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +21 more +23 moreWindows Backup Engine Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +21 more +23 moreWindows Backup Engine Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +21 more +23 moreWindows Backup Engine Elevation of Privilege Vulnerability7.8 High
- mcafee database securityDatabase Security(DBS)-Use of a Broken or Risky Cryptographic Algorithm6.3 Medium
- macrium reflectMacrium Reflect includes an OpenSSL component that specifies an OPENSSLDIR variable as C:\openssl...7.8 High
- online examination system project examination systemCross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the subject...5.4 Medium
- online examination system project examination systemCross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the w parameter to...6.1 Medium
- online examination system project examination systemCross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the q parameter to...6.1 Medium
- artifex mupdfA Use After Free vulnerability exists in Artifex Software, Inc. MuPDF library 1.17.0-rc1 and...7.8 High
- gnu binutils, netapp cloud backup, hci management node +2 more +4 moreA Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka...5.5 Medium
- gnu binutils, netapp cloud backup, ontap select deploy administration utility +1 more +3 moreA Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka...5.5 Medium
- gnu binutils, fedoraproject fedora, netapp ontap select deploy administration utility +2 moreA use after free issue exists in the Binary File Descriptor (BFD) library (aka libbfd) in GNU...5.5 Medium
- gnu binutils, netapp ontap select deploy administration utility +1 moreA Denial of Service vulnerability exists in the Binary File Descriptor (BFD) in GNU Binutils 2.34...5.5 Medium
- gnu binutils, netapp ontap select deploy administration utility +1 moreA double free vulnerability exists in the Binary File Descriptor (BFD) (aka libbrd) in GNU...5.5 Medium
- totolink a3002r firmware, a3002ru-v1 firmware, a3002ru-v2 firmware +10 more +12 moreTOTOLINK A3002RU-V2.0.0 B20190814.1034 allows authenticated remote users to modify the system's ...8.8 High
- element-hq synapse, fedoraproject fedora +1 moreDenial of service attack via incorrect parameters to federation APIs6.5 Medium
- zx2c4 password-storepass through 1.7.3 has a possibility of using a password for an unintended resource. For...7.5 High
- palo alto networks cortex xdr agentCortex XDR Agent: Improper control of loaded DLL leads to local privilege escalation7.8 High
- palo alto networks cortex xdr agentCortex XDR Agent: Exceptional condition denial-of-service (DoS)5.5 Medium
chromium-browser-stableMageiaUpdated chromium-browser-stable packages fix security vulnerabilitiesNo score- debian linux, linux kernel, broadcom fabric operating system +8 more +10 moreA locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9...4.4 Medium
- debian linux, linux kernel, broadcom fabric operating system +9 more +11 moreA locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers...7.8 High
- phpoffice phpspreadsheetCross-site Scripting (XSS)7.1 High
- react-adal project react-adalImproper Authentication8.2 High
- apache nuttx, apache software foundation nuttx (incubating) +1 moreApache NuttX (incubating) Out of Bound Write from invalid fragmentation offset value specified in the IP header9.8 Critical
- apache nuttx, apache software foundation nuttx (incubating) +1 moreApache NuttX (incubating) Out of Bound Write from invalid TCP Urgent length9.1 Critical
- sap solution manager, sap se solution manager (trace analysis) +1 moreSAP Solution Manager (Trace Analysis), version - 720, allows for misuse of a parameter in the...3.4 Low
- sap solution manager, sap se solution manager (user experience monitoring) +1 moreSAP Solution Manager 7.2 (User Experience Monitoring), version - 7.2, allows an authenticated...8.5 High
- sap business warehouse, sap se bw4hana, sap bw\/4hana +2 moreSAP Business Warehouse, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 782,...9.1 Critical
- sap se s4 hana (sap landscape transformation), sap netweaver application server abap, s\/4 hana +1 more +3 moreSAP AS ABAP (SAP Landscape Transformation), versions - 2011_1_620, 2011_1_640, 2011_1_700,...7.6 High
- sap se netweaver as abap, sap netweaver application server abap +1 moreSAP NetWeaver AS ABAP, versions - 740, 750, 751, 752, 753, 754 , does not sufficiently encode URL...5.3 Medium
- sap hana databaseSAP HANA Database, version - 2.0, does not correctly validate the username when performing SAML...4.2 Medium
- sap se netweaver as java, sap netweaver application server java +1 moreProcess Integration Monitoring of SAP NetWeaver AS JAVA, versions - 7.31, 7.40, 7.50, allows an...6.5 Medium
- sap disclosure management, sap se disclosure management. +1 moreSAP Disclosure Management, version - 10.1, provides capabilities for authorized users to upload...5.4 Medium
- sap se businessobjects bi platform (crystal report), sap businessobjects business intelligence platform +1 moreSAP BusinessObjects BI Platform (Crystal Report), versions - 4.1, 4.2, 4.3, does not sufficiently...9.6 Critical
- sap solution manager, sap se solution manager (user experience monitoring) +1 moreSAP Solution Manager 7.2 (User Experience Monitoring), version - 7.2, does not perform necessary...7.6 High
- sap se netweaver as java (p2p cluster communication), sap netweaver application server java +1 moreSAP NetWeaver AS JAVA (P2P Cluster Communication), versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50,...10.0 Critical
- sap netweaver application server java, sap se netweaver as java (key storage service) +1 moreSAP AS JAVA (Key Storage Service), versions - 7.10, 7.11, 7.20 ,7.30, 7.31, 7.40, 7.50, has the...5.4 Medium
- jupyterhub systemdspawneruser-readable api tokens in systemd units7.9 High
- bookstackapp bookstackServer Side Request Forgery in BookStack6.4 Medium
- flexense dupscoutA buffer overflow in the web server of Flexense DupScout Enterprise 10.0.18 allows a remote...9.8 Critical
- we-con levistudiouA heap-based buffer overflow vulnerability exists within the WECON LeviStudioU Release Build 2019...7.8 High
- txjia imcatimcat 5.2 allows an authenticated file upload and consequently remote code execution via the...7.2 High
- Show moreLoading…