Skip to content
OpenAdvisories

Archive

2 December 2020

Vulnerabilities first published on this day (UTC), newest first.

← November 2020 2020 / December /2 January 2021 →
  1. 129
  2. 246
  3. 355
  4. 427
  5. 52
  6. 6 
  7. 723
  8. 8116
  9. 9130
  10. 1037
  11. 11120
  12. 126
  13. 13 
  14. 1490
  15. 15129
  16. 1645
  17. 1762
  18. 1866
  19. 19 
  20. 203
  21. 2152
  22. 2245
  23. 2341
  24. 2452
  25. 2510
  26. 2628
  27. 2713
  28. 2845
  29. 29105
  30. 3041
  31. 31133
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 6.8
    CVE-2020-26244

    Cryptographic issues in Python oic

    Python oic is a Python OpenID Connect implementation. In Python oic before version 1.2.1, there are several related cryptographic issues affecting client implementations that use the library. The issues are: 1) The IdToken signature algorithm was not checked …

    OpenIDC pyoidc oic PyPI
  • Medium 4.3
    CVE-2020-13498

    An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types. A specially cr…

    Apple Pixar macOS OpenUSD macOS
  • Medium 4.3
    CVE-2020-13497

    An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types. A specially cr…

  • Medium 4.3
    CVE-2020-13496

    An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types. A specially cr…

  • Medium 4.3
    CVE-2020-13494

    A heap overflow vulnerability exists in the Pixar OpenUSD 20.05 parsing of compressed string tokens in binary USD files…

  • Medium 5.3
    CVE-2020-13956

    Cross-site scripting in Apache HttpClient

    Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.

    druid trino trino-plugin-opensearch trino-plugin-pinot Debian Ubuntu Wolfi Maven
  • Medium 6.1
    CVE-2020-29456

    Cross-site scripting in papermerge

    Multiple cross-site scripting (XSS) vulnerabilities in Papermerge before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the rename, tag, upload, or create folder function. The payload can be in a folder, a tag, or a document's filenam…

    papermerge PyPI
  • Medium 4.3
    CVE-2020-29454

    Incorrect permission enforcement in UmbracoCms

    Editors/LogViewerController.cs in Umbraco through 8.9.1 allows a user to visit a logviewer endpoint even if they lack Applications.Settings access.

    UmbracoCms NuGet
  • Medium 6.8
    CVE-2012-0955

    software-properties incorrectly validated TLS certificates

    software-properties was vulnerable to a person-in-the-middle attack due to incorrect TLS certificate validation in softwareproperties/ppa.py. software-properties didn't check TLS certificates under python2 and only checked certificates under python3 if a vali…

    Canonical software-properties software-properties Debian