Skip to content
OpenAdvisories

Archive

14 December 2020

Vulnerabilities first published on this day (UTC), newest first.

← November 2020 2020 / December /14 January 2021 →
  1. 129
  2. 246
  3. 355
  4. 427
  5. 52
  6. 6 
  7. 723
  8. 8116
  9. 9130
  10. 1037
  11. 11120
  12. 126
  13. 13 
  14. 1490
  15. 15129
  16. 1645
  17. 1762
  18. 1866
  19. 19 
  20. 203
  21. 2152
  22. 2245
  23. 2341
  24. 2452
  25. 2510
  26. 2628
  27. 2713
  28. 2845
  29. 29105
  30. 3041
  31. 31133
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2020-29509

    Authentication Bypass in github.com/russellhaering/gosaml2

    The encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace prefixes during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of proces…

    golang Go golang go Debian Ubuntu Azure Linux Alpine Go
  • Critical 9.8
    CVE-2020-29511

    The encoding/xml package in Go (all versions) does not correctly preserve the semantics of element namespace prefixes d…

    golang Go golang go Debian Ubuntu Azure Linux Alpine
  • Critical 9.8
    CVE-2020-29510

    The encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the semantics of directives during…

    golang Go golang-1.8 golang-1.13 Debian Ubuntu
  • Critical 9.8
    CVE-2020-20136

    QuantConnect Lean vulnerable to insecure deserialization

    QuantConnect Lean versions from 2.3.0.0 to 2.4.0.1 are affected by an insecure deserialization vulnerability due to insecure configuration of TypeNameHandling property in Json.NET library.

    QuantConnect.Common NuGet