Skip to content
OpenAdvisories

Archive

17 December 2020

Vulnerabilities first published on this day (UTC), newest first.

← November 2020 2020 / December /17 January 2021 →
  1. 129
  2. 246
  3. 355
  4. 427
  5. 52
  6. 6 
  7. 723
  8. 8116
  9. 9130
  10. 1037
  11. 11120
  12. 126
  13. 13 
  14. 1490
  15. 15129
  16. 1645
  17. 1762
  18. 1866
  19. 19 
  20. 203
  21. 2152
  22. 2245
  23. 2341
  24. 2452
  25. 2510
  26. 2628
  27. 2713
  28. 2845
  29. 29105
  30. 3041
  31. 31133
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Unscored —
    CVE-2020-20139 Public exploit

    Cross Site Scripting (XSS) vulnerability in the Remote JSON component Under the Connect menu in Flexmonster Pivot Table…

  • Unscored —
    CVE-2020-20140 Public exploit

    Cross Site Scripting (XSS) vulnerability in Remote Report component under the Open menu in Flexmonster Pivot Table & Ch…

  • Unscored —
    CVE-2020-20141 Public exploit

    Cross Site Scripting (XSS) vulnerability in the To OLAP (XMLA) component Under the Connect menu in Flexmonster Pivot Ta…

  • Unscored —
    CVE-2020-20142 Public exploit

    Cross Site Scripting (XSS) vulnerability in the "To Remote CSV" component under "Open" Menu in Flexmonster Pivot Table …

  • Unscored —
    CVE-2020-35545 Public exploit

    Time-based SQL injection exists in Spotweb 1.4.9 via the query string.

    spotweb Ubuntu
  • Unscored —
    CVE-2020-35489 Public exploit EPSS 89%

    The contact-form-7 (aka Contact Form 7) plugin before 5.3.2 for WordPress allows Unrestricted File Upload and remote co…

  • Unscored —
    CVE-2020-27199 Public exploit

    The Magic Home Pro application 1.5.1 for Android allows Authentication Bypass. The security control that the applicatio…

  • Unscored —
    CVE-2020-35191 Public exploit

    The official drupal docker images before 8.5.10-fpm-alpine (Alpine specific) contain a blank password for a root user. …