Archive
9 December 2020
Vulnerabilities first published on this day (UTC), newest first.
130 results · Feed
-
Unscored —
When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from arbitrary file…
-
Unscored —
It was possible to cause the browser to enter fullscreen mode without displaying the security UI; thus making it possib…
-
Unscored —
Incorrect bookkeeping of functions inlined during JIT compilation could have led to memory corruption and a potentially…
-
Unscored —
A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after sanitizat…
-
Unscored —
In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an exploitable…
-
Medium 6.1CVE-2020-25627 Public exploit
Moodle stored Cross-site Scripting (XSS)
The moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2.
-
Unscored —
AnyDesk for macOS versions 6.0.2 and older have a vulnerability in the XPC interface that does not properly validate cl…
-
Unscored —
A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in generatePreview in makePreview.cp…
-
Unscored —
A heap-based buffer overflow vulnerability exists in Academy Software Foundation OpenEXR 2.3.0 in chunkOffsetReconstruc…
-
Unscored —
A head-based buffer overflow exists in Academy Software Foundation OpenEXR 2.3.0 in writeTileData in ImfTiledOutputFile…