CVEs published in December 2020
1,575 vulnerabilities, 262 critical, 9 exploited.
- bilancAn issue was discovered in Programi Bilanc build 007 release 014 31.01.2020 and below. Its...7.4 High
- uncannyowl tin canny reporting for learndashMultiple cross-site scripting (XSS) vulnerabilities in Uncanny Owl Tin Canny LearnDash Reporting...6.1 Medium
- urveAn issue was discovered in URVE Build 24.03.2020. Using the _internal/pc/shutdown.php path, it is...9.1 Critical
- uncannyowl uncanny groups for learndashMultiple cross-site scripting (XSS) vulnerabilities in Uncanny Groups for LearnDash before v3.7...6.1 Medium
- mersive solstice firmware, solstice pod firmware +1 more** DISPUTED ** In Solstice Pod before 3.0.3, the firmware can easily be decompiled/disassembled....7.5 High
- urveAn issue was discovered in URVE Build 24.03.2020. By using the _internal/pc/vpro.php?mac=0&ip=0...9.8 Critical
- opera, opera software as for android +1 moreURLs using “javascript:” have the protocol removed when pasted into the address bar to protect...6.1 Medium
- urveAn issue was discovered in URVE Build 24.03.2020. The password of an integration user account ...7.5 High
- mersive solstice pod firmwareIn Solstice Pod before 3.3.0 (or Open4.3), the Administrator password can be enumerated using...7.5 High
- mersive solstice pod firmwareIn Solstice Pod before 3.3.0 (or Open4.3), the screen key can be enumerated using brute-force...7.5 High
- mersive solstice pod firmwareIn Solstice Pod before 3.0.3, the web services allow users to connect to them over unencrypted...5.9 Medium
- dolibarr erp\/crmDolibarr authenticated Remote Code Execution7.2 High
- moxa nport iaw5000a-i/o, nport iaw5000a-i\/o firmware +1 moreMOXA NPort IAW5000A-I/O Series9.8 Critical
- moxa nport iaw5000a-i/o, nport iaw5000a-i\/o firmware +1 moreMOXA NPort IAW5000A-I/O Series9.8 Critical
- moxa nport iaw5000a-i/o, nport iaw5000a-i\/o firmware +1 moreMOXA NPort IAW5000A-I/O Series5.3 Medium
- moxa nport iaw5000a-i/o, nport iaw5000a-i\/o firmware +1 moreMOXA NPort IAW5000A-I/O Series8.8 High
- moxa nport iaw5000a-i/o, nport iaw5000a-i\/o firmware +1 moreMOXA NPort IAW5000A-I/O Series8.8 High
- moxa nport iaw5000a-i/o, nport iaw5000a-i\/o firmware +1 moreMOXA NPort IAW5000A-I/O Series7.5 High
- titanhq spamtitanSpamTitan before 7.09 allows attackers to tamper with backups, because backups are not encrypted.5.3 Medium
- jaws project jawsJaws through 1.8.0 allows remote authenticated administrators to execute arbitrary code via...7.2 High
- jaws project jawsJaws through 1.8.0 allows remote authenticated administrators to execute arbitrary code via...7.2 High
- terra-master terramaster operating systemAn unauthenticated command-execution vulnerability exists in TerraMaster TOS through 4.2.06 via...9.8 Critical
- malwarebytes, malwarebytes endpoint protection +1 moreIn Malwarebytes Free 4.1.0.56, a symbolic link may be used delete an arbitrary file on the system...7.1 High
- oracle cloud infrastructure identity and access managementVulnerability in the Oracle Cloud Infrastructure Identity and Access Management product of Oracle...4.7 Medium
- abb ability™ symphony® plus historian, ability™ symphony® plus operations, symphony \+ historian +1 more +3 moreWeak Authentication in Symphony Plus9.8 Critical
- abb ability™ symphony® plus historian, ability™ symphony® plus operations, symphony \+ historian +1 more +3 moreSQL Injection in Symphony Plus9.8 Critical
- abb ability™ symphony® plus historian, ability™ symphony® plus operations, symphony \+ historian +1 more +3 moreImproper Authorization in Symphony Plus8.8 High
- abb ability™ symphony® plus operations, symphony \+ historian, symphony \+ operations +2 moreAuthentication Bypass in Symphony Plus9.8 Critical
- abb ability™ symphony® plus historian, ability™ symphony® plus operations, symphony \+ historian +1 more +3 moreImproper Credential Storage in Symphony Plus7.0 High
- abb ability™ symphony® plus historian, ability™ symphony® plus operations, symphony \+ historian +1 more +3 moreDenial of Service attack on Symphony Plus7.5 High
- abb ability™ symphony® plus historian, ability™ symphony® plus operations, symphony \+ historian +1 more +3 moreInsecure Web Service in Symphony Plus8.8 High
- abb ability™ symphony® plus historian, ability™ symphony® plus operations, symphony \+ historian +1 more +3 moreInsecure Windows Services in Symphony Plus7.8 High
- abb ability™ symphony® plus historian, ability™ symphony® plus operations, symphony \+ historian +1 more +3 morePotential Privilege Escalation in Symphony Plus8.8 High
- treck ipv6An issue was discovered in Treck IPv6 before 6.0.1.68. Improper Input Validation in the DHCPv6...5.9 Medium
- treck ipv6An issue was discovered in Treck IPv6 before 6.0.1.68. Improper Input Validation in the IPv6...7.3 High
- treck ipv6An issue was discovered in Treck IPv6 before 6.0.1.68. Improper input validation in the IPv6...3.7 Low
- treck tcp\/ipA heap-based buffer overflow in the Treck HTTP Server component before 6.0.1.68 allows remote...10.0 Critical
- hcl dominoHCL Domino v9, v10, v11 is susceptible to an Information Disclosure vulnerability in XPages due...5.3 Medium
- hcltechsw hcl client application accessA vulnerability in the input parameter handling of HCL Client Application Access v9 could...8.8 High
- microsoft azure sphereA denial-of-service vulnerability exists in the asynchronous ioctl functionality of Microsoft...5.5 Medium
- microsoft azure sphereA code execution vulnerability exists in the normal world’s signed code execution functionality...7.8 High
- foxit, foxitsoftware foxit reader +1 moreA type confusion vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF...8.8 High
- dlink dsl2888a firmwareAn issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55....8.0 High
- dlink dsl2888a firmwareAn issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55....7.5 High
- dlink dsl2888a firmwareAn issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55....8.8 High
- dlink dsl2888a firmwareAn issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55....6.5 Medium
- foxit, foxitsoftware foxit reader +1 moreA use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader,...7.5 High
- foxit, foxitsoftware foxit reader +1 moreA use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF...8.8 High
- foxit, foxitsoftware foxit reader +1 moreA use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF...8.8 High
- supremocontrol supremoNanosystems SupRemo 4.1.3.2348 allows attackers to obtain LocalSystem access because File Manager...7.8 High
- Show moreLoading…