Skip to content
OpenAdvisories

Archive

11 December 2020

Vulnerabilities first published on this day (UTC), newest first.

← November 2020 2020 / December /11 January 2021 →
  1. 129
  2. 246
  3. 355
  4. 427
  5. 52
  6. 6 
  7. 723
  8. 8116
  9. 9130
  10. 1037
  11. 11120
  12. 126
  13. 13 
  14. 1490
  15. 15129
  16. 1645
  17. 1762
  18. 1866
  19. 19 
  20. 203
  21. 2152
  22. 2245
  23. 2341
  24. 2452
  25. 2510
  26. 2628
  27. 2713
  28. 2845
  29. 29105
  30. 3041
  31. 31133
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 7.5
    CVE-2020-7791

    Denial of Service (DoS)

    This affects the package i18n before 2.1.15. Vulnerability arises out of insufficient handling of erroneous language tags in src/i18n/Concrete/TextLocalizer.cs and src/i18n/LocalizedApplication.cs.

    i18n NuGet
  • High 7.5
    CVE-2020-7793

    Regular Expression Denial of Service (ReDoS)

    The package ua-parser-js before 0.7.23 are vulnerable to Regular Expression Denial of Service (ReDoS) in multiple regexes (see linked commit for more info).

    ua-parser-js node-ua-parser-js node-ua-parser-js Debian Ubuntu npm
  • High 7.5
    CVE-2020-7792

    Prototype Pollution

    This affects all versions of package mout. The deepFillIn function can be used to 'fill missing properties recursively', while the deepMixIn 'mixes objects into the target object, recursively mixing existing child objects as well'. In both cases, the key used…

    mout npm
  • High 7.3
    CVE-2020-7788

    Prototype Pollution

    This affects the package ini before 1.3.6. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the prototype on the application. This can be exploited further depending on the context.

    js-jquery nodejs-nodemon ini node-ini Debian Ubuntu Azure Linux npm
  • High 8.8
    CVE-2020-13520

    An out of bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 reconstructs paths from binary U…

  • High 7.5
    CVE-2020-13530

    A denial-of-service vulnerability exists in the Ethernet/IP server functionality of the EIP Stack Group OpENer 2.3 and …

  • High 7.0
    CVE-2020-24440

    Uncontrolled Search Path Element in Adobe Prelude for Windows

    Adobe Prelude version 9.0.1 (and earlier) is affected by an uncontrolled search path element that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a ma…

    Adobe Prelude
  • High 7.0
    CVE-2020-24447

    Uncontrolled Search Path Element vulnerability in Lightroom Classic 10.0

    Adobe Lightroom Classic version 10.0 (and earlier) for Windows is affected by an uncontrolled search path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in t…

    Adobe Lightroom
  • High 7.5
    CVE-2020-7549

    A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340,…