Skip to content
OpenAdvisories

Archive

9 December 2020

Vulnerabilities first published on this day (UTC), newest first.

← November 2020 2020 / December /9 January 2021 →
  1. 129
  2. 246
  3. 355
  4. 427
  5. 52
  6. 6 
  7. 723
  8. 8116
  9. 9130
  10. 1037
  11. 11120
  12. 126
  13. 13 
  14. 1490
  15. 15129
  16. 1645
  17. 1762
  18. 1866
  19. 19 
  20. 203
  21. 2152
  22. 2245
  23. 2341
  24. 2452
  25. 2510
  26. 2628
  27. 2713
  28. 2845
  29. 29105
  30. 3041
  31. 31133
All Critical High Medium Low Exploited only Public exploit

48 results · Clear filters · Feed

  • High 7.8
    CVE-2020-2049

    Cortex XDR Agent: Improper control of loaded DLL leads to local privilege escalation

    A local privilege escalation vulnerability exists in Palo Alto Networks Cortex XDR Agent on the Windows platform that allows an authenticated local Windows user to execute programs with SYSTEM privileges. This requires the user to have the privilege to create…

    Palo Alto Networks Cortex XDR Agent Network devices
  • High 7.1
    CVE-2020-7776

    Cross-site Scripting (XSS)

    This affects the package phpoffice/phpspreadsheet from 0.0.0. The library is vulnerable to XSS when creating an html output from an excel file by adding a comment on any cell. The root cause of this issue is within the HTML writer where user comments are conc…

    phpoffice/phpspreadsheet phpoffice/phpexcel Packagist
  • High 8.2
    CVE-2020-7787

    Improper Authentication

    This affects all versions of package react-adal. It is possible for a specially crafted JWT token and request URL can cause the nonce, session and refresh values to be incorrectly validated, causing the application to treat an attacker-generated JWT token as …

    react-adal npm
  • High 8.5
    CVE-2020-26837

    SAP Solution Manager 7.2 (User Experience Monitoring), version - 7.2, allows an authenticated user to upload a maliciou…

    SAP SAP Solution Manager (User Experience Monitoring)
  • High 7.6
    CVE-2020-26832

    SAP AS ABAP (SAP Landscape Transformation), versions - 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 2011…

    SAP SAP S4 HANA (SAP Landscape Transformation) SAP NetWeaver AS ABAP (SAP Landscape Transformation)
  • High 7.9
    CVE-2020-26261

    user-readable api tokens in systemd units

    jupyterhub-systemdspawner enables JupyterHub to spawn single-user notebook servers using systemd. In jupyterhub-systemdspawner before version 0.15 user API tokens issued to single-user servers are specified in the environment of systemd units. These tokens ar…

    jupyterhub systemdspawner jupyterhub-systemdspawner PyPI
  • High 7.6
    CVE-2020-26830

    SAP Solution Manager 7.2 (User Experience Monitoring), version - 7.2, does not perform necessary authorization checks f…

    SAP SAP Solution Manager (User Experience Monitoring)
  • High 7.5
    CVE-2020-29651

    py vulnerable to Regular Expression Denial of Service

    A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

    python-py py python-py Debian Ubuntu PyPI