CVEs published in December 2020
1,575 vulnerabilities, 262 critical, 9 exploited.
- hashicorp vaultHashiCorp Vault Enterprise’s Sentinel EGP policy feature incorrectly allowed requests to be...5.3 Medium
- hashicorp vaultEnumeration of users in HashiCorp Vault5.3 Medium
- golang sshgolang.org/x/crypto/ssh NULL Pointer Dereference vulnerability7.5 High
- magic home pro project home proThe Magic Home Pro application 1.5.1 for Android allows Authentication Bypass. The security...7.5 High
- zimbra collaborationIn Zimbra Collaboration Suite Network Edition versions < 9.0.0 P10 and 8.8.15 P17, there exists...6.5 Medium
- kyland kps2204 6 port managed din-rail programmable serial device firmwareA sensitive information disclosure vulnerability in Kyland KPS2204 6 Port Managed Din-Rail...9.8 Critical
- kyland kps2204 6 port managed din-rail programmable serial device firmwareAn arbitrary code execution vulnerability in Kyland KPS2204 6 Port Managed Din-Rail Programmable...9.8 Critical
- logrhythm platform managerLogRhythm Platform Manager 7.4.9 allows Command Injection. To exploit this, an attacker can...9.8 Critical
- logrhythm platform managerLogRhythm Platform Manager (PM) 7.4.9 allows CSRF. The Web interface is vulnerable to Cross-site...8.8 High
- logrhythm platform managerLogRhythm Platform Manager (PM) 7.4.9 has Incorrect Access Control. Users within LogRhythm can be...8.8 High
- sonatype nexus repository managerSonatype Nexus Repository Manager 3.x before 3.29.0 allows a user with admin privileges to...6.5 Medium
- hashicorp vaultThe official vault docker images before 0.11.6 contain a blank password for a root user. System...9.8 Critical
- ploneThe official plone Docker images before version of 4.3.18-alpine (Alpine specific) contain a...9.8 Critical
- docker composer docker imageThe official composer docker images before 1.8.3 contain a blank password for a root user. System...9.8 Critical
- docker rabbitmq docker imageThe official rabbitmq docker images before 3.7.13-beta.1-management-alpine (Alpine specific)...9.8 Critical
- docker adminerThe official adminer docker images before 4.7.0-fastcgi contain a blank password for a root user....9.8 Critical
- docker haproxy docker imageThe official haproxy docker images before 1.8.18-alpine (Alpine specific) contain a blank...9.8 Critical
- drupal docker imagesThe official drupal docker images before 8.5.10-fpm-alpine (Alpine specific) contain a blank...9.8 Critical
- docker memcached docker imageThe official memcached docker images before 1.5.11-alpine (Alpine specific) contain a blank...9.8 Critical
- influxdata telegrafThe official telegraf docker images before 1.9.4-alpine (Alpine specific) contain a blank...9.8 Critical
- kong alpine docker imageThe official kong docker images before 1.0.2-alpine (Alpine specific) contain a blank password...9.8 Critical
- docker ghost alpine docker imageThe official ghost docker images before 2.16.1-alpine (Alpine specific) contain a blank password...9.8 Critical
- ibm financial transaction manager, financial transaction manager for multiplatform +1 moreIBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 returns the product...5.3 Medium
- ibm financial transaction manager, financial transaction manager for multiplatform +1 moreIBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 could allow a...5.3 Medium
- ibm financial transaction manager, financial transaction manager for multiplatform +1 moreIBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 allows web pages to...4.0 Medium
- ibm financial transaction manager, financial transaction manager for multiplatform +1 moreIBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 could allow an...5.9 Medium
- ibm financial transaction manager, financial transaction manager for multiplatform +1 moreIBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 is vulnerable to...4.3 Medium
- ibm sterling file gatewayIBM Sterling File Gateway 2.2.0.0 through 6.0.3.2 is vulnerable to cross-site scripting. This...6.1 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator 5.2.0.0 through 6.0.3.2 Standard Edition is vulnerable to cross-site...6.1 Medium
- epson eps tse server 8 firmwareLack of an anti-CSRF token in the entire administrative interface in EPSON EPS TSE Server 8 (21.0...8.8 High
- epson eps tse server 8 firmwareA Cross-Site Scripting (XSS) issue in the 'update user' and 'delete user' functionalities in...5.4 Medium
- epson eps tse server 8 firmwareUnrestricted access to the log downloader functionality in EPSON EPS TSE Server 8 (21.0.11)...9.8 Critical
- sebhildebrandt systeminformationCommand Injection Vulnerability in systeminformation6.4 Medium
- connection-tester project connection-testerCommand Injection9.8 Critical
- irfanviewirfanView 4.56 contains an error processing parsing files of type .pcx. Which leads to out-of...7.5 High
- adremsoft netcrunchAdRem NetCrunch 10.6.0.4587 has a stored Cross-Site Scripting (XSS) vulnerability in the...5.4 Medium
- adremsoft netcrunchAdRem NetCrunch 10.6.0.4587 has a Cross-Site Request Forgery (CSRF) vulnerability in the...5.4 Medium
- adremsoft netcrunchAdRem NetCrunch 10.6.0.4587 has a Server-Side Request Forgery (SSRF) vulnerability in the...6.5 Medium
- adremsoft netcrunchAdRem NetCrunch 10.6.0.4587 allows Remote Code Execution. In the NetCrunch web client, a read...8.8 High
- infraware ml report, polarisoffice polaris ml report +1 moreAn issue was discovered in ML Report Program. There is a stack-based buffer overflow in function...7.5 High
- dell bsafe micro edition suite, bsafe micro-edition-suite, oracle database +3 more +5 moreDell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to a Buffer Under-Read...7.5 High
- dell bsafe micro edition suite, bsafe micro-edition-suite, oracle database +1 more +3 moreDell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to an Unchecked Return...5.8 Medium
- dell idrac9 firmware, integrated dell remote access controller (idrac) +1 moreDell EMC iDRAC9 versions prior to 4.32.10.00 and 4.40.00.00 contain a reflected cross-site...6.1 Medium
- adremsoft netcrunchAdRem NetCrunch 10.6.0.4587 has a hardcoded SSL private key vulnerability in the NetCrunch web...9.8 Critical
- adremsoft netcrunchAdRem NetCrunch 10.6.0.4587 allows Credentials Disclosure. Every user can read the BSD, Linux,...8.8 High
- adremsoft netcrunchAdRem NetCrunch 10.6.0.4587 has an Improper Session Handling vulnerability in the NetCrunch web...9.8 Critical
- adremsoft netcrunchAdRem NetCrunch 10.6.0.4587 has Improper Credential Storage since the internal user database is...5.5 Medium
- pluck-cms pluckA file upload restriction bypass vulnerability in Pluck CMS before 4.7.13 allows an admin...7.2 High
- vmware carbon black cloudThe installer of the macOS Sensor for VMware Carbon Black Cloud prior to 3.5.1 handles certain...3.6 Low
- hcl bigfix inventory, hcltech bigfix platform +1 moreBigFix Inventory up to v10.0.2 does not set the secure flag for the session cookie in an https...5.3 Medium
- Show moreLoading…