Skip to content
OpenAdvisories

Archive

8 December 2020

Vulnerabilities first published on this day (UTC), newest first.

← November 2020 2020 / December /8 January 2021 →
  1. 129
  2. 246
  3. 355
  4. 427
  5. 52
  6. 6 
  7. 723
  8. 8116
  9. 9130
  10. 1037
  11. 11120
  12. 126
  13. 13 
  14. 1490
  15. 15129
  16. 1645
  17. 1762
  18. 1866
  19. 19 
  20. 203
  21. 2152
  22. 2245
  23. 2341
  24. 2452
  25. 2510
  26. 2628
  27. 2713
  28. 2845
  29. 29105
  30. 3041
  31. 31133
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.7
    CVE-2020-26249

    Remote Code Execution (RCE) Exploit on Cross Site Scripting (XSS) Vulnerability

    Red Discord Bot Dashboard is an easy-to-use interactive web dashboard to control your Redbot. In Red Discord Bot before version 0.1.7a an RCE exploit has been discovered. This exploit allows Discord users with specially crafted Server names and Usernames/Nick…

    Cog-Creators Red-Dashboard red-dashboard PyPI
  • High 7.8
    CVE-2020-27930 Exploited Public exploit EPSS 22%

    A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, wa…

    Apple macOS iOS and iPadOS watchOS macOS iOS
    KEV Nov 3, 2021
  • High 7.8
    CVE-2020-27932 Exploited EPSS 10%

    A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1, watchOS…

    Apple macOS iOS and iPadOS watchOS macOS iOS
    KEV Nov 3, 2021
  • High 7.3
    CVE-2020-26233 Public exploit

    Remote Code Execution in Git Credential Manager Core

    Git Credential Manager Core (GCM Core) is a secure Git credential helper built on .NET Core that runs on Windows and macOS. In Git Credential Manager Core before version 2.0.289, when recursively cloning a Git repository on Windows with submodules, Git will f…

    Microsoft Git-Credential-Manager-Core
  • High 7.7
    CVE-2020-26254

    omniauth-apple allows attacker to fake their email address during authentication

    omniauth-apple is the OmniAuth strategy for "Sign In with Apple" (RubyGem omniauth-apple). In omniauth-apple before version 1.0.1 attackers can fake their email address during authentication. This vulnerability impacts applications using the omniauth-apple st…

    nhosoya omniauth-apple omniauth-apple RubyGems
  • High 8.8
    CVE-2020-25629

    Moodle incorrect access control

    A vulnerability was found in Moodle where users with "Log in as" capability in a course context (typically, course managers) may gain access to some site administration capabilities by "logging in as" a System manager. This affects 3.9 to 3.9.1, 3.8 to 3.8.4,…

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • High 7.5
    CVE-2020-25630

    Moodle Denial of Service

    A vulnerability was found in Moodle where the decompressed size of zip files was not checked against available user quota before unzipping them, which could lead to a denial of service risk. This affects versions 3.9 to 3.9.1, 3.8 to 3.8.4, 3.7 to 3.7.7, 3.5 …

    moodle/moodle moodle Web / CMS Ubuntu Packagist