Skip to content
OpenAdvisories

Archive

4 December 2020

Vulnerabilities first published on this day (UTC), newest first.

← November 2020 2020 / December /4 January 2021 →
  1. 129
  2. 246
  3. 355
  4. 427
  5. 52
  6. 6 
  7. 723
  8. 8116
  9. 9130
  10. 1037
  11. 11120
  12. 126
  13. 13 
  14. 1490
  15. 15129
  16. 1645
  17. 1762
  18. 1866
  19. 19 
  20. 203
  21. 2152
  22. 2245
  23. 2341
  24. 2452
  25. 2510
  26. 2628
  27. 2713
  28. 2845
  29. 29105
  30. 3041
  31. 31133
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 4.8
    CVE-2020-25449

    Cabot Cross Site Scripting (XSS) vulnerability via Address column

    Cross Site Scripting (XSS) vulnerability in Arachnys Cabot 0.11.12 can be exploited via the Address column.

    cabot PyPI
  • Medium —
    GHSA-7wwv-vh3v-89cq

    ReDOS vulnerabities: multiple grammars

    ### Impact: Potential ReDOS vulnerabilities (exponential and polynomial RegEx backtracking) [oswasp](https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS): > The Regular expression Denial of Service (ReDoS) is a Denial of Servi…

    highlight.js @highlightjs/cdn-assets npm
  • Medium 6.1
    CVE-2020-29565

    OpenStack Horizon Open redirect in workflow forms

    An issue was discovered in OpenStack Horizon before 15.3.2, 16.x before 16.2.1, 17.x and 18.x before 18.3.3, 18.4.x, and 18.5.x. There is a lack of validation of the "next" parameter, which would allow someone to supply a malicious URL in Horizon that can cau…

    horizon horizon horizon Debian Ubuntu PyPI
  • Medium 4.8
    CVE-2020-29562

    The iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4 text containing an irre…

    glibc glibc Debian Ubuntu
  • Medium 6.8
    CVE-2020-27348

    snapcraft may build snaps with incorrect LD_LIBRARY_PATH

    In some conditions, a snap package built by snapcraft includes the current directory in LD_LIBRARY_PATH, allowing a malicious snap to gain code execution within the context of another snap if both plug the home interface or similar. This issue affects snapcra…

    Canonical snapcraft snapcraft snapcraft Ubuntu PyPI