Skip to content
OpenAdvisories

Archive

8 December 2020

Vulnerabilities first published on this day (UTC), newest first.

← November 2020 2020 / December /8 January 2021 →
  1. 129
  2. 246
  3. 355
  4. 427
  5. 52
  6. 6 
  7. 723
  8. 8116
  9. 9130
  10. 1037
  11. 11120
  12. 126
  13. 13 
  14. 1490
  15. 15129
  16. 1645
  17. 1762
  18. 1866
  19. 19 
  20. 203
  21. 2152
  22. 2245
  23. 2341
  24. 2452
  25. 2510
  26. 2628
  27. 2713
  28. 2845
  29. 29105
  30. 3041
  31. 31133
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.8
    CVE-2020-27930 Exploited Public exploit EPSS 22%

    A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, wa…

    Apple macOS iOS and iPadOS watchOS macOS iOS
    KEV Nov 3, 2021
  • Medium 5.5
    CVE-2020-27950 Exploited Public exploit EPSS 17%

    A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watc…

    Apple macOS iOS and iPadOS watchOS macOS iOS
    KEV Nov 3, 2021
  • Unscored —
    CVE-2020-27904 Public exploit

    A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue is …

    Apple macOS macOS
  • High 7.3
    CVE-2020-26233 Public exploit

    Remote Code Execution in Git Credential Manager Core

    Git Credential Manager Core (GCM Core) is a secure Git credential helper built on .NET Core that runs on Windows and macOS. In Git Credential Manager Core before version 2.0.289, when recursively cloning a Git repository on Windows with submodules, Git will f…

    Microsoft Git-Credential-Manager-Core
  • Unscored —
    CVE-2020-9922 Public exploit

    A logic issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15.6, Security Upd…

    Apple macOS macOS
  • Medium 5.9
    CVE-2020-1971 Public exploit

    EDIPARTYNAME NULL pointer dereference

    The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equa…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine
  • Unscored —
    CVE-2020-27818 Public exploit

    A flaw was found in the check_chunk_name() function of pngcheck-2.4.0. An attacker able to pass a malicious file to be …

    pngcheck pngcheck Debian Ubuntu
  • Critical 9.8
    CVE-2020-17531 Public exploit

    Deserialization flaw in EOL Tapestry 4.

    A Java Serialization vulnerability was found in Apache Tapestry 4. Apache Tapestry 4 will attempt to deserialize the "sp" parameter even before invoking the page's validate method, leading to deserialization without authentication. Apache Tapestry 4 reached e…

    Apache Software Foundation Apache Tapestry org.apache.tapestry:tapestry-project Maven