Skip to content
OpenAdvisories

Archive

14 December 2020

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2020-35460 Public exploit

    MPXJ path Traversal vulnerability

    common/InputStreamHelper.java in Packwood MPXJ before 8.3.5 allows directory traversal in the zip stream handler flow, leading to the writing of files to arbitrary locations.

  • Medium 6.5

    URL Spoofing Vulnerability in Bitdefender SafePay (VA-8958)

    An Origin Validation Error vulnerability in the SafePay component of Bitdefender Antivirus Plus allows a web resource to misrepresent itself in the URL bar. This issue affects: Bitdefender Antivirus Plus versions prior to 25.0.7.29.

  • Medium 5.3

    SSRF vulnerability in Apache Airflow

    In Apache Airflow versions prior to 1.10.13, the Charts and Query View of the old (Flask-admin based) UI were vulnerable for SSRF attack.