Skip to content
OpenAdvisories

Archive

11 December 2020

Vulnerabilities first published on this day (UTC), newest first.

← November 2020 2020 / December /11 January 2021 →
  1. 129
  2. 246
  3. 355
  4. 427
  5. 52
  6. 6 
  7. 723
  8. 8116
  9. 9130
  10. 1037
  11. 11120
  12. 126
  13. 13 
  14. 1490
  15. 15129
  16. 1645
  17. 1762
  18. 1866
  19. 19 
  20. 203
  21. 2152
  22. 2245
  23. 2341
  24. 2452
  25. 2510
  26. 2628
  27. 2713
  28. 2845
  29. 29105
  30. 3041
  31. 31133
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Critical 9.8
    CVE-2020-28439

    Command Injection

    This affects all versions of package corenlp-js-prefab. The injection point is located in line 10 in 'index.js.' It depends on a vulnerable package 'corenlp-js-interface.' Vulnerability can be exploited with the following PoC:

    corenlp-js-prefab npm
  • Critical 9.8
    CVE-2020-28440

    Command Injection

    All versions of package corenlp-js-interface are vulnerable to Command Injection via the main function.

    corenlp-js-interface npm
  • Critical 9.9
    CVE-2020-27134

    Cisco Jabber Desktop and Mobile Client Software Vulnerabilities

    Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) with elevated privileges or gain access to sensitive informat…

    Cisco Cisco Jabber Network devices
  • Critical 9.9
    CVE-2020-27133

    Cisco Jabber Desktop and Mobile Client Software Vulnerabilities

    Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) with elevated privileges or gain access to sensitive informat…

    Cisco Cisco Jabber Network devices
  • Critical 9.9
    CVE-2020-27132

    Cisco Jabber Desktop and Mobile Client Software Vulnerabilities

    Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) with elevated privileges or gain access to sensitive informat…

    Cisco Cisco Jabber Network devices
  • Critical 9.9
    CVE-2020-27127

    Cisco Jabber Desktop and Mobile Client Software Vulnerabilities

    Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) with elevated privileges or gain access to sensitive informat…

    Cisco Cisco Jabber Network devices
  • Critical 9.8
    CVE-2020-29574 Exploited · Ransomware

    An SQL injection vulnerability in the WebAdmin of Cyberoam OS through 2020-12-04 allows unauthenticated attackers to ex…

    KEV Feb 6, 2025
  • Critical 9.8
    CVE-2020-13556

    An out-of-bounds write vulnerability exists in the Ethernet/IP server functionality of EIP Stack Group OpENer 2.3 and d…

  • Critical 9.8
    CVE-2020-17530 Exploited Public exploit Scanner template EPSS 96%

    Remote code execution in Apache Struts

    Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. Affected software : Apache Struts 2.0.0 - Struts 2.5.25.

    Apache Software Foundation Apache Struts org.apache.struts:struts2-core Maven
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2020-28214

    A CWE-760: Use of a One-Way Hash with a Predictable Salt vulnerability exists in Modicon M221 (all references, all vers…