Archive
8 December 2020
Vulnerabilities first published on this day (UTC), newest first.
116 results · Feed
-
High 7.7
Remote Code Execution (RCE) Exploit on Cross Site Scripting (XSS) Vulnerability
Red Discord Bot Dashboard is an easy-to-use interactive web dashboard to control your Redbot. In Red Discord Bot before version 0.1.7a an RCE exploit has been discovered. This exploit allows Discord users with specially crafted Server names and Usernames/Nick…
-
Medium 4.8
Disabled Hostname Verification in OpenCast
Opencast before versions 8.9 and 7.9 disables HTTPS hostname verification of its HTTP client used for a large portion of Opencast's HTTP requests. Hostname verification is an important part when using HTTPS to ensure that the presented certificate is valid fo…
-
Unscored —
in SetImageExtent() of /MagickCore/image.c, an incorrect image depth size can cause a memory leak because the code whic…
-
Unscored —
There are several memory leaks in the MIFF coder in /coders/miff.c due to improper image depth values, which can be tri…
-
Unscored —
A flaw was found in ImageMagick in MagickCore/quantum-private.h. An attacker who submits a crafted file that is process…
-
Medium 5.7
Denial of service in fast-csv
Fast-csv is an npm package for parsing and formatting CSVs or any other delimited value file in node. In fast-cvs before version 4.3.6 there is a possible ReDoS vulnerability (Regular Expression Denial of Service) when using ignoreEmpty option when parsing. T…
-
Unscored —
A flaw was found in the memory management API of QEMU during the initialization of a memory region cache. This issue co…
-
Critical 9.8
Prototype pollution vulnerability in 'deepref'
Prototype pollution vulnerability in 'deepref' versions 1.1.1 through 1.2.1 allows attacker to cause a denial of service and may lead to remote code execution.
-
Unscored —
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, watc…
-
Unscored —
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, iOS 14.0 and i…
-
Unscored —
A path handling issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.0.1. A remote att…
-
Unscored —
TIFFGetProfiles() in /coders/tiff.c calls strstr() which causes a large out-of-bounds read when it searches for `"dc:fo…
-
Unscored —
In WriteOnePNGImage() of the PNG coder at coders/png.c, an improper call to AcquireVirtualMemory() and memset() allows …
-
Unscored —
A call to ConformPixelInfo() in the SetImageAlphaChannel() routine of /MagickCore/channel.c caused a subsequent heap-us…
-
High 7.8
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, wa…
KEV Nov 3, 2021 -
Medium 5.5
A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watc…
KEV Nov 3, 2021 -
High 7.8
A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1, watchOS…
KEV Nov 3, 2021 -
Unscored —
A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. …
-
Unscored —
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, watc…
-
Unscored —
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.2 and iPadOS 14.2. …
-
Unscored —
An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, iOS 1…
-
Unscored —
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.0.1, …
-
Unscored —
An issue existed in the handling of incoming calls. The issue was addressed with additional state checks. This issue is…
-
Unscored —
An integer overflow was addressed through improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watch…
-
Unscored —
An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watch…
-
Unscored —
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.2 and iPadOS 14.2, tv…
-
Unscored —
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, iOS 14…
-
Unscored —
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 14.2 and iPadOS 14.2…
-
Unscored —
Multiple integer overflows were addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1. …
-
Unscored —
An authentication issue was addressed with improved state management. This issue is fixed in iOS 14.2 and iPadOS 14.2. …
-
Unscored —
A denial of service issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1. An a…
-
Unscored —CVE-2020-27904 Public exploit
A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue is …
-
Unscored —
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Big Sur 11.0.1. An application m…
-
Unscored —
An issue existed in the handling of snapshots. The issue was resolved with improved permissions logic. This issue is fi…
-
Unscored —
An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, iOS 1…
-
Unscored —
An information disclosure issue existed in the transition of program state. This issue was addressed with improved stat…
-
Unscored —
The issue was addressed with additional user controls. This issue is fixed in macOS Big Sur 11.0.1. Users may be unable…
-
Unscored —
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in …
-
Unscored —
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, iO…
-
Unscored —
An access issue was addressed with improved access restrictions. This issue is fixed in macOS Big Sur 11.0.1. Processin…