Archive

18 December 2020

Vulnerabilities first published on this day (UTC), newest first.

← November 2020 2020 / December /18 January 2021 →

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

Unscored —

CVE-2020-7200 Public exploit EPSS 82%

A potential security vulnerability has been identified in HPE Systems Insight Manager (SIM) version 7.6. The vulnerabil…

Dec 18, 2020
High 8.8

CVE-2020-13519 Public exploit

A privilege escalation vulnerability exists in the WinRing0x64 Driver IRP 0x9c402088 functionality of NZXT CAM 4.8.0. A…

Dec 18, 2020
Unscored —

CVE-2020-20277 Public exploit EPSS 26%

There are multiple unauthenticated directory traversal vulnerabilities in different FTP commands in uftpd FTP server ve…

Dec 18, 2020
Unscored —

CVE-2020-25901 Public exploit

Host Header Injection in Spiceworks 7.5.7.0 allowing the attacker to render arbitrary links that point to a malicious w…

Dec 18, 2020
Unscored —

CVE-2020-25495 Public exploit Scanner template

A reflected Cross-site scripting (XSS) vulnerability in Xinuo (formerly SCO) Openserver version 5 and 6 allows remote a…

Dec 18, 2020
Unscored —

CVE-2020-25494 Public exploit EPSS 39%

Xinuos (formerly SCO) Openserver v5 and v6 allows attackers to execute arbitrary commands via shell metacharacters in o…

Dec 18, 2020
High 8.1

CVE-2020-28052 Public exploit

Logic error in Legion of the Bouncy Castle BC Java

An issue was discovered in Legion of the Bouncy Castle BC Java 1.65 and 1.66. The OpenBSDBCrypt.checkPassword utility method compared incorrect data when checking the password, allowing incorrect passwords to indicate they were matching with previously hashed…

bouncycastle org.bouncycastle:bcprov-jdk14 org.bouncycastle:bcprov-jdk15on org.bouncycastle:bcprov-jdk15 Debian Maven

Dec 18, 2020