Skip to content
OpenAdvisories

Archive

17 December 2020

Vulnerabilities first published on this day (UTC), newest first.

← November 2020 2020 / December /17 January 2021 →
  1. 129
  2. 246
  3. 355
  4. 427
  5. 52
  6. 6 
  7. 723
  8. 8116
  9. 9130
  10. 1037
  11. 11120
  12. 126
  13. 13 
  14. 1490
  15. 15129
  16. 1645
  17. 1762
  18. 1866
  19. 19 
  20. 203
  21. 2152
  22. 2245
  23. 2341
  24. 2452
  25. 2510
  26. 2628
  27. 2713
  28. 2845
  29. 29105
  30. 3041
  31. 31133
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • Medium 6.5
    CVE-2020-13516

    An information disclosure vulnerability exists in the WinRing0x64 Driver IRP 0x9c406144 functionality of NZXT CAM 4.8.0…

  • Medium 6.5
    CVE-2020-13517

    An information disclosure vulnerability exists in the WinRing0x64 Driver IRP 0x9c406104 functionality of NZXT CAM 4.8.0…

  • Medium 6.5
    CVE-2020-13518

    An information disclosure vulnerability exists in the WinRing0x64 Driver IRP 0x9c402084 functionality of NZXT CAM 4.8.0…

  • Medium 6.5
    CVE-2020-13511

    An information disclosure vulnerability exists in the WinRing0x64 Driver Privileged I/O Read IRPs functionality of NZXT…

  • Medium 6.5
    CVE-2020-13510

    An information disclosure vulnerability exists in the WinRing0x64 Driver Privileged I/O Read IRPs functionality of NZXT…

  • Medium 6.5
    CVE-2020-13509

    An information disclosure vulnerability exists in the WinRing0x64 Driver Privileged I/O Read IRPs functionality of NZXT…

  • Medium 4.8
    CVE-2020-13527

    An authentication bypass vulnerability exists in the Web Manager functionality of Lantronix XPort EDGE 3.0.0.0R11, 3.1.…

  • Medium 5.5
    CVE-2020-12518

    Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS: An attacker can use the knowledge gained by reading the insufficiently protected sensitive information to plan further attacks.

    On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use the knowledge gained by reading the insufficiently protected sensitive information to plan further attacks.

    Phoenix Contact AXC F 2152 Starterkit (1046568) AXC F 2152 (2404267) RFC 4072S (1051328 ICS / OT
  • Medium 6.5
    CVE-2020-12521

    Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS: A specially crafted LLDP packet may lead to a high system load in the PROFINET stack.

    On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS a specially crafted LLDP packet may lead to a high system load in the PROFINET stack. An attacker can cause failure of system services or a complete reboot.

    Phoenix Contact PLCnext Technology Starterkit (1188165) AXC F 1152 (1151412) AXC F 3152 (1069208) ICS / OT
  • Medium 5.4
    CVE-2020-12523

    Phoenix Contact mGuard Devices versions before 8.8.3: LAN ports get functional after reboot even if they are disabled in the device configuration

    On Phoenix Contact mGuard Devices versions before 8.8.3 LAN ports get functional after reboot even if they are disabled in the device configuration. For mGuard devices with integrated switch on the LAN side, single switch ports can be disabled by device confi…

    Phoenix Contact Innominate Innominate mGuard rs4000 4TX/TX VPN TC MGUARD RS4000 4G VZW VPN (1010461) ICS / OT
  • Medium 5.4
    CVE-2020-4845

    IBM Security Key Lifecycle Manager 3.0.1 and 4.0 is vulnerable to cross-site scripting. This vulnerability allows users…

    IBM Security Key Lifecycle Manager
  • Medium 6.1
    CVE-2020-15293

    Memory corruption in Bitdefender Hypervisor Introspection (VA-9336)

    Memory corruption in IntLixCrashDumpDmesg, IntLixTaskFetchCmdLine, IntLixFileReadDentry and IntLixFileGetPath due to insufficient guest-data input validation may lead to denial of service conditions.

    Bitdefender Hypervisor Introspection
  • Medium 5.5
    CVE-2020-15292

    Lack of validation on data read from guest memory in Bitdefender HVI (VA-9333)

    Lack of validation on data read from guest memory in IntPeGetDirectory, IntPeParseUnwindData, IntLogExceptionRecord, IntKsymExpandSymbol and IntLixTaskDumpTree may lead to out-of-bounds read or it could cause DoS due to integer-overflor (IntPeGetDirectory), T…

    Bitdefender Hypervisor Introspection
  • Medium 6.5
    CVE-2020-35177

    Enumeration of users in HashiCorp Vault

    HashiCorp Vault and Vault Enterprise 1.4.1 and newer allowed the enumeration of users via the LDAP auth method. Fixed in 1.5.6 and 1.6.1.

    github.com/hashicorp/vault vault Alpine Go