Skip to content
OpenAdvisories

Archive

14 December 2020

Vulnerabilities first published on this day (UTC), newest first.

← November 2020 2020 / December /14 January 2021 →
  1. 129
  2. 246
  3. 355
  4. 427
  5. 52
  6. 6 
  7. 723
  8. 8116
  9. 9130
  10. 1037
  11. 11120
  12. 126
  13. 13 
  14. 1490
  15. 15129
  16. 1645
  17. 1762
  18. 1866
  19. 19 
  20. 203
  21. 2152
  22. 2245
  23. 2341
  24. 2452
  25. 2510
  26. 2628
  27. 2713
  28. 2845
  29. 29105
  30. 3041
  31. 31133
All Critical High Medium Low Exploited only Public exploit

90 results · Feed

  • Medium 5.3
    CVE-2020-17513

    SSRF vulnerability in Apache Airflow

    In Apache Airflow versions prior to 1.10.13, the Charts and Query View of the old (Flask-admin based) UI were vulnerable for SSRF attack.

    Apache Software Foundation Apache Airflow apache-airflow PyPI
  • Unscored —
    CVE-2020-35236

    The GitLab Webhook Handler in amazee.io Lagoon before 1.12.3 has incorrect access control associated with project delet…

  • Unscored —
    CVE-2020-5665

    Improper check or handling of exceptional conditions in MELSEC iQ-F series FX5U(C) CPU unit firmware version 1.060 and …

    Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU unit ICS / OT
  • Unscored —
    CVE-2020-5639

    Directory traversal vulnerability in FileZen versions from V3.0.0 to V4.2.2 allows remote attackers to upload an arbitr…

    Soliton Systems K.K. FileZen
  • Unscored —
    CVE-2020-5637

    Improper validation of integrity check value vulnerability in Aterm SA3500G firmware versions prior to Ver. 3.5.9 allow…

    NEC Aterm SA3500G
  • Unscored —
    CVE-2020-5635

    Aterm SA3500G firmware versions prior to Ver. 3.5.9 allows an attacker on the adjacent network to send a specially craf…

    NEC Aterm SA3500G
  • Unscored —
    CVE-2020-5636

    Aterm SA3500G firmware versions prior to Ver. 3.5.9 allows an attacker with an administrative privilege to send a speci…

    NEC Aterm SA3500G
  • Unscored —
    CVE-2020-35234 Public exploit Scanner template EPSS 60%

    The easy-wp-smtp plugin before 1.4.4 for WordPress allows Administrator account takeover, as exploited in the wild in D…

  • Unscored —
    CVE-2020-35235 EPSS 18%

    vendor/elfinder/php/connector.minimal.php in the secure-file-manager plugin through 2.5 for WordPress loads elFinder co…

  • Unscored —
    CVE-2020-29669 Public exploit

    In the Macally WIFISD2-2A82 Media and Travel Router 2.000.010, the Guest user is able to reset its own password. This p…