CVEs published in December 2020
1,575 vulnerabilities, 262 critical, 9 exploited.
- f5 big-ip apm, big-ip access policy manager +1 moreIn BIG-IP APM versions 15.0.0-15.0.1.3, 14.1.0-14.1.3, and 13.1.0-13.1.3.4, under certain...6.5 Medium
- f5 big-ip dns, big-ip domain name system +1 moreOn BIG-IP DNS 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, and 12.1.0-12.1.5...7.5 High
- f5 big-ip afm, big-ip advanced firewall manager +1 moreOn the BIG-IP AFM version 15.1.0-15.1.0.5, 14.1.0-14.1.3, and 13.1.0-13.1.3.5, when a Protocol...7.5 High
- f5 big-ip apm, big-ip access policy manager +1 moreIn versions 14.1.0-14.1.3 and 13.1.0-13.1.3.4, a BIG-IP APM virtual server processing PingAccess...7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn BIG-IP 15.1.0-15.1.0.5 and 14.1.0-14.1.3, crafted TLS request to the BIG-IP management...7.5 High
- f5 big-ip apm, big-ip access policy manager +1 moreOn versions 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.5, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2...7.5 High
- f5 big-ip apm, big-ip access policy manager +1 moreIn versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, and 12.1.0-12.1.5.2...6.1 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn BIG-IP version 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, and 13.1.0-13.1.3.4, when an...4.9 Medium
- f5 big-ip domain name system, big-ip global traffic manager, big-ip link controller +2 moreIn version 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2...4.3 Medium
- f5 big-ip apm, big-ip access policy manager +1 moreIn BIG-IP APM versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.3, 13.1.0...6.5 Medium
- f5 big-ip advanced web application firewall, big-ip application security manager +1 moreWhen a BIG-IP ASM or Advanced WAF system running version 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0...7.5 High
- f5 big-ip domain name system, big-ip global traffic manager +1 moreIn versions 16.0.0-16.0.0.1, 15.1.0-15.1.1, 14.1.0-14.1.3, 13.1.0-13.1.3.5, 12.1.0-12.1.5.2, and...7.5 High
- terra-master tosIncorrect Access Control vulnerability in TerraMaster TOS <= 4.2.06 allows remote authenticated...8.1 High
- td-agent-builder project td-agent-builder, debian linux +1 moreThe td-agent-builder plugin before 2020-12-18 for Fluentd allows attackers to gain privileges...7.0 High
- terra-master tosTerraMaster TOS <= 4.2.06 was found to check for updates (of both system and applications) via an...5.9 Medium
- terra-master tosMultiple directory traversal vulnerabilities in TerraMaster TOS <= 4.2.06 allow remote...9.8 Critical
- terra-master tosEmail Injection in TerraMaster TOS <= 4.2.06 allows remote unauthenticated attackers to abuse the...7.3 High
- terra-master tosCross-site scripting (XSS) vulnerability in TerraMaster TOS <= 4.2.06 allows remote authenticated...5.4 Medium
- terra-master tosUser Enumeration vulnerability in TerraMaster TOS <= 4.2.06 allows remote unauthenticated...5.3 Medium
- bigprof online invoicing systemBigProf Online Invoicing System before 2.9 suffers from an unauthenticated SQL Injection found in...9.8 Critical
- bigprof online invoicing systemBigProf Online Invoicing System before 3.0 offers a functionality that allows an administrator to...8.8 High
- bigprof online invoicing systemBigProf Online Invoicing System before 3.1 fails to correctly sanitize an XSS payload when a user...6.1 Medium
- bigprof online invoicing systemBigProf Online Invoicing System before 4.0 fails to adequately sanitize fields for HTML...4.8 Medium
- dart httphttp before 0.13.3 vulnerable to header injection6.1 Medium
- qnap qesSensitive information via generation of error messages vulnerability in QES2.3 Low
- qnap qesAbsolute path traversal vulnerability in QES5.8 Medium
- qnap qesStored cross-site scripting vulnerability in QES9.0 Critical
- qnap qesHard-coded Password Vulnerability in QES6.3 Medium
- nec ism server, nec corporation management software for nec storage disk array system +1 moreiSM client versions from V5.1 prior to V12.1 running on NEC Storage Manager or NEC Storage...4.8 Medium
- epson epsonnet setupmanager, offirio synergyware printdirector, seiko epson corporation epsonnet setupmanager and offirio synergyware printdirector +2 moreUntrusted search path vulnerability in self-extracting files created by EpsonNet SetupManager...7.8 High
- terra-master tosRemote Command Execution (RCE) vulnerability in TerraMaster TOS <= 4.2.06 allow remote...9.8 Critical
- redislabs redisgraphRedisGraph 2.x through 2.2.11 has a NULL Pointer Dereference that leads to a server crash because...7.5 High
- steedosSteedos Platform through 1.21.24 allows NoSQL injection because the /api/collection/findone...8.8 High
- advanced comment system project comment systemACS Advanced Comment System 1.0 is affected by Directory Traversal via an...7.5 High
- nagios coreThere is a Cross Site Request Forgery (CSRF) vulnerability in Nagios Core 4.2.4.8.8 High
- raysyncA RCE vulnerability exists in Raysync below 3.3.3.8. An unauthenticated unauthorized attacker...8.8 High
- egavilanmedia user registration and login system with admin panelCross Site Scripting (XSS) vulnerability via the 'Full Name' parameter in the User Registration...6.1 Medium
- online health care system project health care systemSourceCodester Online Health Care System 1.0 is affected by SQL Injection which allows a...9.8 Critical
- library management system project management systemSourceCodester Library Management System 1.0 is affected by SQL Injection allowing an attacker to...9.8 Critical
- alumni management system project management systemSourceCodester Alumni Management System 1.0 is affected by cross-site Scripting (XSS) in /admin...4.8 Medium
- alumni management system project management systemSourceCodester Alumni Management System 1.0 is affected by SQL injection causing arbitrary remote...9.8 Critical
- projectworlds online matrimonial projectMarital - Online Matrimonial Project In PHP version 1.0 suffers from an authenticated file upload...8.8 High
- crk business platformCRK Business Platform <= 2019.1 allows reflected XSS via erro.aspx on 'CRK', 'IDContratante', ...6.1 Medium
- crk business platformCRK Business Platform <= 2019.1 allows can inject SQL statements against the DB on any path using...9.8 Critical
- bitcoinsv bitcoin svBitcoin SV before 0.1.1 allows uncontrolled resource consumption when deserializing transactions.7.5 High
- bitcoinsv bitcoin svBitcoin SV before 0.1.1 allows uncontrolled resource consumption when receiving sendheaders...7.5 High
- bitcoinsv bitcoin svBitcoin SV before 0.1.1 allows uncontrolled resource consumption when receiving messages with...7.5 High
- ibm db2, db2 for linux- unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5...6.2 Medium
- bilancAn issue was discovered in Programi Bilanc build 007 release 014 31.01.2020 and possibly below....7.5 High
- bilancAn issue was discovered in Programi Bilanc build 007 release 014 31.01.2020 and possibly below....9.8 Critical
- Show moreLoading…