Archive

15 December 2020

Vulnerabilities first published on this day (UTC), newest first.

← November 2020 2020 / December /15 January 2021 →

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

High 7.5

CVE-2020-35381

Denial of Service in jsonparser

jsonparser 1.0.0 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of range) via a GET call.

github.com/buger/jsonparser golang-github-buger-jsonparser golang-github-buger-jsonparser Debian Ubuntu Go

Dec 15, 2020
High 7.5

CVE-2020-35380

Denial of service in GJSON

GJSON before 1.6.4 allows attackers to cause a denial of service via crafted JSON.

golang-github-tidwall-gjson golang-github-tidwall-gjson github.com/tidwall/gjson Debian Ubuntu Go

Dec 15, 2020
High 7.3

CVE-2020-28456

Cross-site Scripting (XSS)

The package s-cart/core before 4.4 are vulnerable to Cross-site Scripting (XSS) via the admin panel.

Dec 15, 2020
High 7.2

CVE-2020-28457

Cross-site Scripting (XSS)

This affects the package s-cart/core before 4.4. The search functionality of the admin dashboard in core/src/Admin/Controllers/AdminOrderController.phpindex is vulnerable to XSS.

Dec 15, 2020
High 7.4

CVE-2020-4747

IBM Connect:Direct for UNIX 6.1.0, 6.0.0, 4.3.0, and 4.2.0 can allow a local or remote user to obtain an authenticated …

IBM Sterling Connect Direct for Unix

Dec 15, 2020
High 7.5

CVE-2020-28442

Prototype Pollution

All versions of package js-data are vulnerable to Prototype Pollution via the deepFillIn function.

js-data npm

Dec 15, 2020