Skip to content
OpenAdvisories

Archive

16 December 2020

Vulnerabilities first published on this day (UTC), newest first.

← November 2020 2020 / December /16 January 2021 →
  1. 129
  2. 246
  3. 355
  4. 427
  5. 52
  6. 6 
  7. 723
  8. 8116
  9. 9130
  10. 1037
  11. 11120
  12. 126
  13. 13 
  14. 1490
  15. 15129
  16. 1645
  17. 1762
  18. 1866
  19. 19 
  20. 203
  21. 2152
  22. 2245
  23. 2341
  24. 2452
  25. 2510
  26. 2628
  27. 2713
  28. 2845
  29. 29105
  30. 3041
  31. 31133
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Unscored —
    CVE-2020-29607 Public exploit EPSS 33%

    A file upload restriction bypass vulnerability in Pluck CMS before 4.7.13 allows an admin privileged user to gain acces…

  • High 7.3
    CVE-2020-28458 Public exploit

    Prototype Pollution

    All versions of package datatables.net are vulnerable to Prototype Pollution due to an incomplete fix for https://snyk.io/vuln/SNYK-JS-DATATABLESNET-598806.

    reaper datatables.net Azure Linux npm
  • Medium 6.3
    CVE-2020-26258 Public exploit Scanner template EPSS 82%

    Server-Side Forgery Request can be activated unmarshalling with XStream

    XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.15, a Server-Side Forgery Request vulnerability can be activated when unmarshalling. The vulnerability may allow a remote attacker to request data from interna…

    x-stream xstream libxstream-java com.thoughtworks.xstream:xstream Debian Ubuntu Maven
  • Medium 6.8
    CVE-2020-26259 Public exploit EPSS 82%

    XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling

    XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.15, is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling. The vulnerability may allow a remote attacker to delete arbitrary know fi…

    x-stream xstream com.thoughtworks.xstream:xstream libxstream-java Debian Ubuntu Maven
  • Critical 9.8
    CVE-2020-35476 Public exploit Scanner template EPSS 85%

    OS Command Injection in OpenTSDB

    A remote code execution vulnerability occurs in OpenTSDB through 2.4.0 via command injection in the yrange parameter. The yrange value is written to a gnuplot file in the /tmp directory. This file is then executed via the mygnuplot.sh shell script. (tsd/Graph…

    net.opentsdb:opentsdb Maven