Skip to content
OpenAdvisories

Archive

18 December 2020

Vulnerabilities first published on this day (UTC), newest first.

9 results · Clear filters · Feed

  • High 8.8
    CVE-2020-13519 Public exploit

    A privilege escalation vulnerability exists in the WinRing0x64 Driver IRP 0x9c402088 functionality of NZXT CAM 4.8.0. A…

  • High 8.8

    A privilege escalation vulnerability exists in the WinRing0x64 Driver Privileged I/O Write IRPs functionality of NZXT C…

  • High 8.8

    A privilege escalation vulnerability exists in the WinRing0x64 Driver Privileged I/O Write IRPs functionality of NZXT C…

  • High 8.8

    A privilege escalation vulnerability exists in the WinRing0x64 Driver Privileged I/O Write IRPs functionality of NZXT C…

  • High 8.8

    A privilege escalation vulnerability exists in the WinRing0x64 Driver IRP 0x9c40a148 functionality of NZXT CAM 4.8.0. A…

  • High 8.9

    XSS in OpenSlides

    OpenSlides is a free, Web-based presentation and assembly system for managing and projecting agenda, motions, and elections of assemblies. OpenSlides version 3.2, due to unsufficient user input validation and escaping, it is vulnerable to persistant cross-sit…

  • High 8.8

    tangro Business Workflow before 1.18.1 requests a list of allowed filetypes from the server and restricts uploads to th…

  • High 8.1
    CVE-2020-28052 Public exploit

    Logic error in Legion of the Bouncy Castle BC Java

    An issue was discovered in Legion of the Bouncy Castle BC Java 1.65 and 1.66. The OpenBSDBCrypt.checkPassword utility method compared incorrect data when checking the password, allowing incorrect passwords to indicate they were matching with previously hashed…

  • High 8.8

    A arbitrary code execution vulnerability exists in the way that the Stove client improperly validates input value. An a…