CVEs published in December 2020
1,575 vulnerabilities, 262 critical, 9 exploited.
- fluxbbFluxBB 1.5.11 is affected by cross-site scripting (XSS in the Blog Content component. This...4.8 Medium
- invisioncommunity communityInvision Community 4.5.4 is affected by cross-site scripting (XSS) in the Field Name field. This...4.8 Medium
kdeconnect-kdeSUSESecurity update for kdeconnect-kdeNo score- rocket.chatRocket.Chat before 0.74.4, 1.x before 1.3.4, 2.x before 2.4.13, 3.x before 3.7.3, 3.8.x before 3...9.8 Critical
- cockpit-project cockpit** DISPUTED ** An SSRF issue was discovered in cockpit-project.org Cockpit 234. NOTE: this is...6.5 Medium
- agentejo cockpitAgentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php check function.9.8 Critical
- agentejo cockpitAgentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php newpassword...9.8 Critical
- agentejo cockpitAgentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword...9.8 Critical
openh264OSS-FuzzHeap-double-free in WelsCommon::WelsFreeNo score- nokogiri, debian linux +1 moreXXE in Nokogiri2.6 Low
- amino ak45x firmware, ak5xx firmware, ak65x firmware +3 more +5 moreUse of a Hard-coded Password in VNCserver in Amino Communications AK45x series, AK5xx series,...4.4 Medium
- amino ak45x firmware, ak5xx firmware, ak65x firmware +3 more +5 moreCommand Injection in the CPE WAN Management Protocol (CWMP) registration in Amino Communications...8.1 High
- netgear dgn2200v1 firmwareNETGEAR DGN2200v1 devices before v1.0.0.58 are affected by command injection.8.4 High
- netgear gs716t firmware, gs724t firmware +1 moreCertain NETGEAR devices are affected by CSRF. This affects GS716Tv3 before 6.3.1.36 and GS724Tv4...4.3 Medium
- netgear nms300 firmwareNETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service.7.5 High
- netgear nms300 firmwareNETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service.7.1 High
- netgear nms300 firmwareNETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service.8.3 High
- netgear gs116e firmware, jgs516pe firmware, jgs524e firmware +1 more +3 moreCertain NETGEAR devices are affected by lack of access control at the function level. This...8.1 High
- amino ak45x firmware, ak5xx firmware, ak65x firmware +3 more +5 moreCommand Injection in EntoneWebEngine in Amino Communications AK45x series, AK5xx series, AK65x...9.9 Critical
- netgear gs116e firmware, jgs516pe firmware, jgs524e firmware +1 more +3 moreCertain NETGEAR devices are affected by lack of access control at the function level. This...6.5 Medium
- netgear gs116e firmware, jgs516pe firmware, jgs524e firmware +1 more +3 moreCertain NETGEAR devices are affected by lack of access control at the function level. This...6.2 Medium
- netgear dgn2200 firmwareNETGEAR DGN2200v1 devices before v1.0.0.60 mishandle HTTPd authentication (aka PSV-2020-0363, PSV...8.3 High
- netgear r7800 firmwareNETGEAR R7800 devices before 1.0.2.74 are affected by a buffer overflow by an authenticated user.4.5 Medium
- netgear d3600 firmware, d6000 firmware, d6200 firmware +23 more +25 moreCertain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects...8.0 High
- netgear wac104 firmwareNETGEAR WAC104 devices before 1.0.4.13 are affected by a buffer overflow by an authenticated user.7.6 High
- netgear nms300 firmwareNETGEAR NMS300 devices before 1.6.0.27 are affected by command injection by an authenticated user.8.8 High
- netgear d7800 firmware, r7800 firmware, r8900 firmware +1 more +3 moreCertain NETGEAR devices are affected by command injection by an authenticated user. This affects...6.4 Medium
- netgear r7800 firmware, r8900 firmware, r9000 firmware +2 moreCertain NETGEAR devices are affected by command injection by an authenticated user. This affects...6.4 Medium
- netgear r7500 firmware, r7800 firmware, r8900 firmware +1 more +3 moreCertain NETGEAR devices are affected by command injection by an authenticated user. This affects...8.3 High
- netgear d7800 firmware, r7500 firmware, r7800 firmware +2 more +4 moreCertain NETGEAR devices are affected by command injection by an authenticated user. This affects...6.1 Medium
- netgear rbk752 firmware, rbk852 firmware, rbr750 firmware +4 more +6 moreCertain NETGEAR devices are affected by command injection by an authenticated user. This affects...8.4 High
- netgear nms300 firmwareNETGEAR NMS300 devices before 1.6.0.27 are affected by command injection by an unauthenticated...9.8 Critical
- netgear r6400v2 firmware, r6700v3 firmware, r6900p firmware +27 more +29 moreCertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This...9.3 Critical
- netgear d3600 firmware, d6000 firmware, d6200 firmware +43 more +45 moreCertain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated...8.8 High
- netgear gs116e firmware, jgs516pe firmware, jgs524e firmware +1 more +3 moreCertain NETGEAR devices are affected by incorrect configuration of security settings. This...8.3 High
- netgear cbr40 firmware, rax75 firmware, rax80 firmware +11 more +13 moreCertain NETGEAR devices are affected by disclosure of sensitive information. This affects CBR40...7.5 High
- netgear ac2100 firmware, ac2400 firmware, ac2600 firmware +12 more +14 moreCertain NETGEAR devices are affected by disclosure of sensitive information. This affects D6200...4.4 Medium
- netgear d7800 firmware, r7800 firmware, r8900 firmware +2 more +4 moreCertain NETGEAR devices are affected by disclosure of sensitive information. This affects D7800...7.6 High
- netgear d7800 firmware, r7500v2 firmware, r7800 firmware +14 more +16 moreCertain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2...6.1 Medium
- netgear d7800 firmware, r7500v2 firmware, r7800 firmware +11 more +13 moreCertain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2...6.0 Medium
- netgear d7800 firmware, r7800 firmware, rax120 firmware +10 more +12 moreCertain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7800...6.0 Medium
- netgear d6100 firmware, dm200 firmware, r7800 firmware +4 more +6 moreCertain NETGEAR devices are affected by stored XSS. This affects D6100 before 1.0.0.63, DM200...4.8 Medium
- netgear d7800 firmware, r7500v2 firmware, r7800 firmware +8 more +10 moreCertain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2...6.1 Medium
- netgear d7800 firmware, r7500v2 firmware, r7800 firmware +14 more +16 moreCertain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2...6.1 Medium
- netgear d7800 firmware, r7500v2 firmware, r7800 firmware +14 more +16 moreCertain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2...6.1 Medium
- netgear d7800 firmware, r7500v2 firmware, r7800 firmware +14 more +16 moreCertain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2...6.1 Medium
- netgear d7800 firmware, r7500v2 firmware, r7800 firmware +14 more +16 moreCertain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, RBK50...6.1 Medium
- netgear d7800 firmware, r7800 firmware, r8900 firmware +13 more +15 moreCertain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7800...6.1 Medium
- netgear d7800 firmware, r7500v2 firmware, r7800 firmware +12 more +14 moreCertain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2...6.1 Medium
- netgear d7800 firmware, r7500v2 firmware, r7800 firmware +14 more +16 moreCertain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2...6.1 Medium
- Show moreLoading…