Archive
8 December 2020
Vulnerabilities first published on this day (UTC), newest first.
116 results · Feed
-
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1. A malicious ap…
-
Unscored —
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 14.2 and iPadOS 14.2, mac…
-
Unscored —
An issue existed within the path validation logic for symlinks. This issue was addressed with improved path sanitizatio…
-
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and i…
-
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in tvOS 14.0, iOS 14.0 and iPadOS 14.0.…
-
Unscored —
A path handling issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and…
-
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1. A sandboxed pr…
-
Unscored —
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, iOS …
-
Unscored —
This issue was addressed with improved entitlements. This issue is fixed in macOS Big Sur 11.0.1. A malicious applicati…
-
Unscored —
The issue was addressed with improved deletion. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, iOS 14.0 and …
-
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and i…
-
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, i…
-
High 7.3CVE-2020-26233 Public exploit
Remote Code Execution in Git Credential Manager Core
Git Credential Manager Core (GCM Core) is a secure Git credential helper built on .NET Core that runs on Windows and macOS. In Git Credential Manager Core before version 2.0.289, when recursively cloning a Git repository on Windows with submodules, Git will f…
-
Unscored —
The DiveBook plugin 1.1.4 for WordPress was prone to a SQL injection within divelog.php, allowing unauthenticated users…
-
Unscored —
The DiveBook plugin 1.1.4 for WordPress is prone to unauthenticated XSS within the filter function (via an arbitrary pa…
-
Unscored —
The DiveBook plugin 1.1.4 for WordPress is prone to improper access control in the Log Dive form because it fails to pe…
-
Unscored —
An improper webserver configuration on Plum IK-401 devices with firmware before 1.02 allows an attacker (with network a…
-
Unscored —
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, iT…
-
Unscored —
The issue was addressed with improved UI handling. This issue is fixed in watchOS 7.0, Safari 14.0, iOS 14.0 and iPadOS…
-
Unscored —
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchO…
-
Unscored —
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Big Sur 11.0.1, watchO…
-
Unscored —
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 14.0. …
-
Unscored —
The issue was addressed with improved deletion. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.0 and iPadOS 14.0. …
-
Unscored —
A use after free issue was addressed with improved memory management. This issue is fixed in watchOS 7.0, iOS 14.0 and …
-
Unscored —
A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the pr…
-
Unscored —
The issue was addressed with improved handling of icon caches. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.0 an…
-
Unscored —
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, watc…
-
Unscored —
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 14.0 and iPadOS 14.0. P…
-
Unscored —
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.0.1, watchOS…
-
Unscored —
A use after free issue was addressed with improved memory management. This issue is fixed in watchOS 7.0, iOS 14.0 and …
-
Unscored —
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchO…
-
Unscored —
A use after free issue was addressed with improved memory management. This issue is fixed in watchOS 7.0, tvOS 14.0, Sa…
-
Unscored —
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in watchOS 7.0, tvOS 14.0, mac…
-
Unscored —
An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0…
-
Unscored —
A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue i…
-
Unscored —
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.0.1, watchOS…
-
Unscored —CVE-2020-9922 Public exploit
A logic issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15.6, Security Upd…
-
Unscored —
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS Big Sur…
-
Medium 5.9CVE-2020-1971 Public exploit
EDIPARTYNAME NULL pointer dereference
The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equa…
-
Unscored —
The official eggdrop Docker images before 1.8.4rc2 contain a blank password for a root user. Systems using the Eggdrop …