CVEs published in December 2020
1,575 vulnerabilities, 262 critical, 9 exploited.
- altran picotcp, picotcp-ng +1 moreAn issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The code that processes DNS...7.5 High
- altran picotcp, picotcp-ng +1 moreAn issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The DNS domain name record...7.5 High
- altran picotcpAn issue was discovered in picoTCP through 1.7.0. The DNS domain name record decompression...9.8 Critical
- altran picotcp, picotcp-ng +1 moreAn issue was discovered in picoTCP and picoTCP-NG through 1.7.0. When an unsupported TCP option...7.5 High
- contiki-ng, contiki-os contiki +1 moreAn issue was discovered in Contiki through 3.0 and Contiki-NG through 4.5. The code for parsing...9.8 Critical
- uip project uipThe code that processes DNS responses in uIP through 1.0, as used in Contiki and Contiki-NG, does...8.2 High
- butok fnetAn issue was discovered in FNET through 4.6.4. The code that initializes the DNS client interface...5.3 Medium
- butok fnetAn issue was discovered in FNET through 4.6.4. The code for IPv6 fragment reassembly tries to...7.5 High
- butok fnetAn issue was discovered in FNET through 4.6.4. The code for processing the hop-by-hop header (in...7.5 High
- butok fnetAn issue was discovered in FNET through 4.6.4. The code for processing the hostname from an LLMNR...9.1 Critical
- altran picotcpAn issue was discovered in picoTCP 1.7.0. The code for processing the IPv6 destination options...7.5 High
- altran picotcpAn issue was discovered in picoTCP 1.7.0. The routine for processing the next header field (and...7.5 High
- altran picotcpAn issue was discovered in picoTCP 1.7.0. The code for creating an ICMPv6 echo replies doesn't...7.5 High
- altran picotcpAn issue was discovered in picoTCP 1.7.0. The code for parsing the hop-by-hop IPv6 extension...7.5 High
- altran picotcp, microchip mplab harmony +1 moreAn issue was discovered in picoTCP 1.7.0. The code for processing the IPv6 headers does not...9.1 Critical
- uip project uipAn issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that...7.5 High
- uip project uipAn issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that...8.3 High
- uip project uipAn issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that...9.8 Critical
- frappeFrappe Framework 12 and 13 does not properly validate the HTTP method for the frappe.client API.5.3 Medium
- contiki-os contikiAn issue was discovered in Contiki through 3.0. An infinite loop exists in the uIP TCP/IP stack...7.5 High
- contiki-os contikiAn issue was discovered in Contiki through 3.0. A memory corruption vulnerability exists in the...7.5 High
- contiki-os contikiAn issue was discovered in Contiki through 3.0. An infinite loop exists in the uIP TCP/IP stack...7.5 High
- brocade fabric os, broadcom fabric operating system +1 moreBrocade Fabric OS versions before v9.0.0, v8.2.2c, v8.2.1e, v8.1.2k, v8.2.0_CBN3, v7.4.2g contain...6.7 Medium
- brocade fabric os, broadcom fabric operating system +1 moreBrocade Fabric OS versions before v9.0.0 and after version v8.1.0, configured in Virtual Fabric...4.3 Medium
- smartystreets liveaddressplugin.jsA cross-Site Scripting (XSS) vulnerability in this.showInvalid and this.showInvalidCountry in...6.1 Medium
rpmlintSUSESecurity update for rpmlintNo score- f5 nginx controller, netapp cloud backup +1 moreIn versions 3.0.0-3.9.0, 2.0.0-2.9.0, and 1.0.1, the NGINX Controller Agent does not use absolute...9.8 Critical
- phpshePHPSHE 1.7 has SQL injection via the admin.php?mod=user&userlevel_id=1 userlevel_id[] parameter.9.8 Critical
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreOn BIG-IP versions 14.0.0-14.0.1 and 13.1.0-13.1.3.4, certain traffic pattern sent to a virtual...7.5 High
- f5 big-ip, big-ip advanced firewall manager +1 moreIn certain configurations on version 13.1.3.4, when a BIG-IP AFM HTTP security profile is applied...7.5 High
- mquery project mqueryCode Injection in mquery5.3 Medium
- f5 big-ip, big-ip advanced firewall manager +1 moreOn BIG-IP 14.1.0-14.1.2.6, undisclosed endpoints in iControl REST allow for a reflected XSS...5.3 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn BIG-IP versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, 12.1.0-12...9.6 Critical
- the wireshark foundation wireshark, debian linux, fedoraproject fedora +1 more +3 moreMemory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of...3.1 Low
- the wireshark foundation wireshark, debian linux, fedoraproject fedora +1 more +3 moreCrash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to...4.2 Medium
- the wireshark foundation wireshark, fedoraproject fedora, oracle zfs storage appliance kit +2 moreMemory leak in RTPS protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of...3.1 Low
- the wireshark foundation wireshark, fedoraproject fedora, oracle zfs storage appliance kit +2 moreMemory leak in the dissection engine in Wireshark 3.4.0 allows denial of service via packet...3.1 Low
- debian linux, linux kernel, netapp cloud backup +4 more +6 moreA use-after-free flaw was found in kernel/trace/ring_buffer.c in Linux kernel (5.10-rc1). There...5.7 Medium
- corenlp-js-prefab project corenlp-js-prefabCommand Injection9.8 Critical
- corenlp-js-interface project corenlp-js-interfaceCommand Injection9.8 Critical
- i18n project i18nDenial of Service (DoS)7.5 High
- ethereum go ethereum, go-ethereum +1 moreLES Server DoS via GetProofsV26.5 Medium
- ethereum go ethereum, go-ethereum +1 moreConsensus flaw during block processing5.3 Medium
- cisco jabber, jabber for mobile platforms +1 moreCisco Jabber Desktop and Mobile Client Software Vulnerabilities9.9 Critical
- cisco jabber, jabber for mobile platforms +1 moreCisco Jabber Desktop and Mobile Client Software Vulnerabilities9.9 Critical
- cisco jabber, jabber for mobile platforms +1 moreCisco Jabber Desktop and Mobile Client Software Vulnerabilities9.9 Critical
- cisco jabber, jabber for mobile platforms +1 moreCisco Jabber Desktop and Mobile Client Software Vulnerabilities9.9 Critical
- sophos cyberoamosAn SQL injection vulnerability in the WebAdmin of Cyberoam OS through 2020-12-04 allows...9.8 Critical
- silver peak systems, inc. ecos, arubanetworks edgeconnect enterprise +1 moreOS Command Injection - nslookup API6.8 Medium
- askey ap5100w firmwareAskey AP5100W devices through AP5100W_Dual_SIG_1.01.097 are affected by WPS PIN offline brute...5.9 Medium
- Show moreLoading…