CVEs published in December 2020
1,575 vulnerabilities, 262 critical, 9 exploited.
- ibm financial transaction managerIBM Financial Transaction Manager 3.0.6 and 3.1.0 does not invalidate session after logout which...6.3 Medium
- ibm loopbackLoopback 8.0.0 contains a vulnerability that could allow an attacker to manipulate or pollute...7.3 High
- tenable tenable.scIn certain scenarios in Tenable.sc prior to 5.17.0, a scanner could potentially be used outside...7.5 High
- pengutronix raucThe install.c module in the Pengutronix RAUC update client prior to version 1.5 has a Time-of-Check Time-of-Use vulnerability, where signature verification on an update file takes place before the fil…6.6 Medium
- zte zxhn e8810 firmware, zxhn e8820 firmware, zxhn e8822 firmware +2 moreZTE E8810/E8820/E8822 series routers have an information leak vulnerability, which is caused by...7.5 High
- zte zxhn e8810 firmware, zxhn e8820 firmware, zxhn e8822 firmware +2 moreZTE E8810/E8820/E8822 series routers have an MQTT DoS vulnerability, which is caused by the...7.5 High
- the wireshark foundation wireshark, oracle zfs storage appliance kit +1 moreBuffer overflow in QUIC dissector in Wireshark 3.4.0 to 3.4.1 allows denial of service via packet...3.7 Low
- hcl software inotes, hcltech hcl inotes +1 moreHCL iNotes is susceptible to a Tabnabbing vulnerability caused by improper sanitization of...6.5 Medium
- emerson x-stream enhanced xefd firmware, x-stream enhanced xegk firmware, x-stream enhanced xegp firmware +1 more +3 moreEmerson Rosemount X-STREAM Gas AnalyzerX-STREAM enhanced XEGP, XEGK, XEFD, XEXF – all revisions,...7.5 High
- tlsfuzzer tlslite-ngRSA vulnerability in tslite-ng7.5 High
- apache airflowIncorrect Session Validation in Apache Airflow7.7 High
- ovirt ovirt-engine, redhat virtualization +1 moreA flaw was found in ovirt-engine 4.4.3 and earlier allowing an authenticated user to read other...6.5 Medium
- saml project saml, fedoraproject fedora, grafana +3 more +5 moreXML Processing error in github.com/crewjam/saml9.8 Critical
- vmware esxi, fusion, workstation +2 moreVMware ESXi (7.0 prior to ESXi70U1c-17325551), VMware Workstation (16.x prior to 16.0 and 15.x...6.5 Medium
- solarwinds webhelpdeskSolarWinds Web Help Desk 12.7.0 allows CSV Injection, also known as Formula Injection, via a file...6.5 Medium
- egavilanmedia ecm address bookEgavilanMedia ECM Address Book 1.0 is affected by SQL injection. An attacker can bypass the Admin...9.8 Critical
- coastercmsCoastercms v5.8.18 is affected by cross-site Scripting (XSS). A user can steal a cookie and make...5.4 Medium
- dotcmsDotCMS Add Template with admin panel 20.11 is affected by cross-site Scripting (XSS) to gain...4.8 Medium
- egavilanmedia user registration \& login system with admin panelEgavilanMedia User Registration & Login System with Admin Panel 1.0 is affected by Cross Site...8.0 High
- niftypm nifty-pmNifty-PM CPE 2.3 is affected by stored HTML injection. The impact is remote arbitrary code...6.1 Medium
- abi stable project stableUpdate unsound DrainFilter and RString::retain7.5 High
- abi stable project stableUpdate unsound DrainFilter and RString::retain7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreIf a user downloaded a file lacking an extension on Windows, and then "Open"-ed it from the...8.8 High
- limitloginattempts limit login attempts reloadedLimitLoginAttempts.php in the limit-login-attempts-reloaded plugin before 2.17.4 for WordPress...9.8 Critical
- limitloginattempts limit login attempts reloadedThe limit-login-attempts-reloaded plugin before 2.17.4 for WordPress allows wp-admin/options...5.4 Medium
- atlassian crucibleAffected versions of Atlassian Crucible allow remote attackers to impact the application's...4.3 Medium
differencecrates.iodifference is unmaintainedNo score- petabi eventioData race in eventio5.9 Medium
- subconverter project subconvertertindy2013 subconverter 0.6.4 has a /sub?target=%TARGET%&url=%URL%&config=%CONFIG% API endpoint...7.5 High
- postsrsd project postsrsd, debian linux +1 moresrs2.c in PostSRSd before 1.10 allows remote attackers to cause a denial of service (CPU...7.5 High
- multiqueue2 project multiqueue2Data races in multiqueue25.9 Medium
openscOSS-FuzzNegative-size-param in tcos_decipherNo scoreopenh264OSS-FuzzHeap-buffer-overflow in McCopyWidthEq4_cNo scoreperfettoOSS-FuzzStack-buffer-overflow in perfetto::trace_processor::MemoryTrackerSnapshotParser::EmitRowsNo scorelxmlDebianlxml - regression updateNo score- hp storeever 1\/8 g2 tape autoloader firmware, storeever msl2024 firmware +1 moreA potential security vulnerability has been identified in the HPE StoreEver MSL2024 Tape Library...8.8 High
- hp ilo amplifier packA potential security vulnerability has been identified in HPE iLO Amplifier Pack server version 1...9.8 Critical
- hp systems insight managerA potential security vulnerability has been identified in HPE Systems Insight Manager (SIM)...9.8 Critical
- hcl notesA vulnerability in the MIME message handling of the HCL Notes v9 client could potentially be...9.8 Critical
- hcl software inotes, hcltech hcl inotes +1 moreHCL iNotes v9, v10 and v11 is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability...6.1 Medium
- hcl software verse, hcltech domino +1 moreHCL Verse v10 and v11 is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability due to...6.1 Medium
- marvell qconvergeconsoleRelative Path Traversal in Marvell QConvergeConsole GUI 5.5.0.74 allows a remote, authenticated...8.1 High
- apache pulsar managerIn the Pulsar manager 0.1.0 version, malicious users will be able to bypass pulsar-manager's...6.5 Medium
- kepware linkmasterA privilege escalation vulnerability exists in Kepware LinkMaster 3.0.94.0. In its default...9.3 Critical
- nzxt camA privilege escalation vulnerability exists in the WinRing0x64 Driver IRP 0x9c402088...8.8 High
- nzxt camA privilege escalation vulnerability exists in the WinRing0x64 Driver Privileged I/O Write IRPs...8.8 High
- nzxt camA privilege escalation vulnerability exists in the WinRing0x64 Driver Privileged I/O Write IRPs...8.8 High
- nzxt camA privilege escalation vulnerability exists in the WinRing0x64 Driver Privileged I/O Write IRPs...8.8 High
- nzxt camA privilege escalation vulnerability exists in the WinRing0x64 Driver IRP 0x9c40a148...8.8 High
- zzzcms zzzphpEval injection vulnerability in the parserCommom method in the ParserTemplate class in...9.8 Critical
- Show moreLoading…