CVEs published in December 2020
1,575 vulnerabilities, 262 critical, 9 exploited.
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen 4.6 through 4.14.x. When acting upon a guest XS_RESET_WATCHES...5.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. When a Xenstore watch fires, the xenstore client...6.0 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. Xenstored and guests communicate via a shared...6.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. A guest may access xenstore paths via absolute...6.0 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. Access rights of Xenstore nodes are per domid....8.8 High
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. Neither xenstore implementation does any...2.3 Low
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. In the Ocaml xenstored implementation, the...8.8 High
- mozilla firefoxWhen a user typed a URL in the address bar or the search bar and quickly hit the enter key, a...6.1 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreUsing techniques that built on the slipstream research, a malicious webpage could have exposed...6.1 Medium
- mozilla firefox, debian linux +1 moreWhen a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreWhen flex-basis was used on a table wrapper, a StyleGenericFlexBasis object could have been...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreCertain input to the CSS Sanitizer confused it, resulting in incorrect components being removed....8.8 High
- mozilla firefoxThe lifecycle of IPC Actors allows managed actors to outlive their manager actors; and the former...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreCertain blit values provided by the user were not properly constrained leading to a heap buffer...8.8 High
- keycloakKeycloak vulnerable to Server-Side Request Forgery5.3 Medium
- mpxj, oracle primavera unifier +1 moreMPXJ path Traversal vulnerability5.3 Medium
- gnome glib** DISPUTED ** GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of...7.8 High
- siemens sicam a8000 cp-8000, sicam a8000 cp-8021, sicam a8000 cp-8022 +3 more +5 moreA vulnerability has been identified in SICAM A8000 CP-8000 (All versions < V16), SICAM A8000 CP...7.3 High
- siemens logo! 8 bm (incl. siplus variants), logo\! 8 bm firmware +1 moreA vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3)....7.5 High
- siemens logo! 8 bm (incl. siplus variants), logo! soft comfort, logo\! 8 bm firmware +2 moreA vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3),...7.7 High
- siemens logo! 8 bm (incl. siplus variants), logo\! 8 bm firmware +1 moreA vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3)....5.5 Medium
- siemens logo! 8 bm (incl. siplus variants), logo\! 8 bm firmware +1 moreA vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3)....7.5 High
- siemens logo! 8 bm (incl. siplus variants), logo! soft comfort, logo\! 8 bm firmware +1 more +3 moreA vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3),...5.5 Medium
- siemens logo! 8 bm (incl. siplus variants), logo\! 8 bm firmware +1 moreA vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3)....7.5 High
- siemens logo! 8 bm (incl. siplus variants), logo\! 8 bm firmware +1 moreA vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3)....7.5 High
- siemens logo! 8 bm (incl. siplus variants), logo\! 8 bm firmware +1 moreA vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3)....9.8 Critical
- siemens simatic et 200sp open controller (incl. siplus variants), simatic s7-1500 software controller, simatic et 200sp open controller firmware +1 more +3 moreA vulnerability has been identified in SIMATIC ET 200SP Open Controller (incl. SIPLUS variants) ...7.5 High
- siemens xhqA vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow a...8.8 High
- siemens xhqA vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow...6.1 Medium
- siemens xhqA vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow...6.5 Medium
- siemens xhqA vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow...7.2 High
- siemens xhqA vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow...5.4 Medium
- siemens xhqA vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow...5.4 Medium
- siemens xhqA vulnerability has been identified in XHQ (All Versions < 6.1). The application's web server...5.3 Medium
- newpk project newpkSQL Injection vulnerability in NewPK 1.1 via the title parameter to admin\newpost.php.9.8 Critical
- check point software technologies ltd. eclipse, eclipse che +1 moreA flaw was found in Eclipse Che in versions prior to 7.14.0 that impacts CodeReady Workspaces....7.1 High
- ecies go, netapp trident +1 moreAuthentication Bypass in github.com/russellhaering/gosaml29.8 Critical
- ecies go, netapp trident +1 moreThe encoding/xml package in Go (all versions) does not correctly preserve the semantics of...9.8 Critical
- ecies go, netapp trident +1 moreThe encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the...9.8 Critical
- liftoffsoftware gateoneGateOne allows remote attackers to execute arbitrary commands via shell metacharacters in the...9.8 Critical
- directoriespro directories proA cross-site scripting (XSS) vulnerability exists in the SabaiApps WordPress Directories Pro...6.1 Medium
- directoriespro directories proA cross-site scripting (XSS) vulnerability in the SabaiApp Directories Pro plugin 1.3.45 for...6.1 Medium
- zyxel p1302-t10 v3 firmwareInsecure direct object reference vulnerability in Zyxel’s P1302-T10 v3 with firmware version 2.00...7.5 High
- citrix gateway plug-inImproper privilege management on services run by Citrix Gateway Plug-in for Windows, versions...7.5 High
- citrix gateway plug-inImproper privilege management on services run by Citrix Gateway Plug-in for Windows, versions...9.8 Critical
- ui edgemax edgepower 24v firmware, edgemax edgepower 54v firmware +1 moreA security issue was found in EdgePower 24V/54V firmware v1.7.0 and earlier where, due to missing...8.8 High
- citrix virtual apps and desktops, xenapp, xendesktop +2 moreAn authorised user on a Windows host running Citrix Universal Print Server can perform arbitrary...8.8 High
- openasset digital asset managementOpenAsset Digital Asset Management (DAM) 12.0.19 and earlier failed to implement access controls...5.3 Medium
- gallagher command centreType confusion in Gallagher Command Centre Server allows a remote attacker to crash the server or...8.8 High
- openasset digital asset managementOpenAssetDigital Asset Management (DAM) through 12.0.19 does not correctly sanitize user supplied...8.8 High
- Show moreLoading…