CVEs published in December 2020
1,575 vulnerabilities, 262 critical, 9 exploited.
- gallagher command centreImproper Authentication vulnerability in Gallagher Command Centre Server allows an...7.1 High
- gallagher command centreSQL Injection vulnerability in Enterprise Data Interface of Gallagher Command Centre allows a...8.2 High
- medtronic mycarelink smart model 25000 firmware, smart model 25000 patient reader +1 moreMedtronic MyCareLink Smart Time-of-check Time-of-use Race Condition8.8 High
- medtronic mycarelink smart model 25000 firmware, smart model 25000 patient reader +1 moreMedtronic MyCareLink Smart Heap-based Buffer Overflow8.8 High
- medtronic mycarelink smart model 25000 firmware, smart model 25000 patient reader +1 moreMedtronic MyCareLink Smart Improper Authentication8.0 High
- openasset digital asset managementOpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly sanitize user...6.1 Medium
- openasset digital asset managementOpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly verify whether a...8.8 High
- openasset digital asset managementOpenAsset Digital Asset Management (DAM) through 12.0.19, does not correctly sanitize user...6.1 Medium
- quantconnect leanQuantConnect Lean vulnerable to insecure deserialization9.8 Critical
- openasset digital asset managementOpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly determine the HTTP...7.5 High
- bitdefender antivirus plusURL Spoofing Vulnerability in Bitdefender SafePay (VA-8958)6.5 Medium
- mobileviewpoint wireless multiplex terminal playout serverThe Web Administrative Interface in Mobile Viewpoint Wireless Multiplex Terminal (WMT) Playout...9.8 Critical
- gehealthcare 1.5t brivo mr355 firmware, 3.0t signa hd 16 firmware, 3.0t signa hd 23 firmware +109 more +111 moreGE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during...9.8 Critical
- gehealthcare 1.5t brivo mr355 firmware, 3.0t signa hd 16 firmware, 3.0t signa hd 23 firmware +109 more +111 moreGE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during...9.8 Critical
- classroombookingsSQL Injection in Classbooking before 2.4.1 via the username field of a CSV file when adding a new...7.2 High
- hcl notesA vulnerability in the MIME message handling of the Notes client (versions 9 and 10) could...9.8 Critical
- online bus ticket reservation project bus ticket reservationSQL Injection in the login page in Online Bus Ticket Reservation 1.0 allows attackers to execute...9.8 Critical
- hcl dominoA vulnerability in the MIME message handling of the Domino server (versions 9 and 10) could...9.8 Critical
- car rental management system project rental management systemAn issue was discovered in Car Rental Management System 1.0. An unauthenticated user can perform...9.8 Critical
- apache airflowSSRF vulnerability in Apache Airflow5.3 Medium
- apache airflowApache Airflow logs passwords in plaintext6.5 Medium
- amazee lagoonThe GitLab Webhook Handler in amazee.io Lagoon before 1.12.3 has incorrect access control...5.3 Medium
- mitsubishi electric corporation melsec iq-f series fx5u(c) cpu unit, mitsubishielectric melsec iq-f fx5u cpu firmware +1 moreImproper check or handling of exceptional conditions in MELSEC iQ-F series FX5U(C) CPU unit...7.4 High
- soliton filezenDirectory traversal vulnerability in FileZen versions from V3.0.0 to V4.2.2 allows remote...9.8 Critical
- nec corporation aterm sa3500g, necplatforms aterm sa3500g firmware +1 moreImproper validation of integrity check value vulnerability in Aterm SA3500G firmware versions...6.8 Medium
- nec corporation aterm sa3500g, necplatforms aterm sa3500g firmware +1 moreAterm SA3500G firmware versions prior to Ver. 3.5.9 allows an attacker with an administrative...6.8 Medium
- nec corporation aterm sa3500g, necplatforms aterm sa3500g firmware +1 moreAterm SA3500G firmware versions prior to Ver. 3.5.9 allows an attacker on the adjacent network to...8.8 High
- wp-ecommerce easy wp smtpThe easy-wp-smtp plugin before 1.4.4 for WordPress allows Administrator account takeover, as...7.5 High
- themexa secure file manager** UNSUPPORTED WHEN ASSIGNED ** vendor/elfinder/php/connector.minimal.php in the secure-file...8.8 High
- macally wifisd2-2a82 firmwareIn the Macally WIFISD2-2A82 Media and Travel Router 2.000.010, the Guest user is able to reset...8.8 High
linuxUbuntu,linux-awsUbuntu,linux-aws-hweUbuntu +9 more +11 morelinux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-gke-4.15, linux-hwe, linux-kvm, linux-oracle, linux-snapdragon regressionNo scorelinuxUbuntu,linux-awsUbuntu,linux-aws-5.4Ubuntu +10 more +12 morelinux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-hwe-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 regressionNo scoreopenthreadOSS-FuzzStack-buffer-overflow in ot::MeshCoP::ChannelMaskEntry::GetMaskNo score- logmein lastpass** DISPUTED ** An issue was discovered in the LogMein LastPass Password Manager (aka com.lastpass...5.7 Medium
- logmein lastpass** DISPUTED ** An issue was discovered in the LogMein LastPass Password Manager (aka com.lastpass...5.7 Medium
- igniterealtime openfireIgnite Realtime Openfire 4.6.0 has create-bookmark.jsp groupchatJID Stored XSS.5.4 Medium
- igniterealtime openfireIgnite Realtime Openfire 4.6.0 has plugins/clientcontrol/spark-form.jsp Reflective XSS.6.1 Medium
- igniterealtime openfireIgnite Realtime Openfire 4.6.0 has plugins/dbaccess/db-access.jsp sql Stored XSS.5.4 Medium
- igniterealtime openfireIgnite Realtime Openfire 4.6.0 has create-bookmark.jsp users Stored XSS.5.4 Medium
- westerndigital my cloud os 5An issue was discovered on Western Digital My Cloud OS 5 devices before 5.07.118. A NAS Admin...9.8 Critical
- westerndigital dashboardWestern Digital Dashboard before 3.2.2.9 allows DLL Hijacking that leads to compromise of the...7.8 High
- awstats, debian linux, fedoraproject fedora +2 moreIn AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial absolute pathname (omitting...5.3 Medium
- contiki-osAn issue was discovered in the IPv6 stack in Contiki through 3.0. There are inconsistent checks...9.8 Critical
- contiki-osAn issue was discovered in the IPv6 stack in Contiki through 3.0. There is an insufficient check...9.8 Critical
- ethernut nut\/osAn issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. The length byte of a...9.8 Critical
- ethernut nut\/osAn issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. The number of DNS...9.8 Critical
- ethernut nut\/osAn issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. The DNS response...9.8 Critical
- ethernut nut\/osAn issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. There is no check on...9.8 Critical
- butok fnetAn issue was discovered in FNET through 4.6.4. The code for processing resource records in mDNS...9.1 Critical
- altran picotcp, picotcp-ng +1 moreAn issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The TCP input data processing...9.1 Critical
- Show moreLoading…