Archive
18 December 2020
Vulnerabilities first published on this day (UTC), newest first.
66 results · Feed
-
Unscored —
An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos chipsets) software. They all…
-
Unscored —
An issue was discovered in the GPS daemon on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (non-Qualcomm chip…
-
Unscored —
An issue was discovered on Samsung mobile devices with Q(10.0) and R(11.0) (Qualcomm SM8250 chipsets) software. They al…
-
Unscored —
An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. There is a WebView SSL err…
-
Unscored —
An issue was discovered on LG mobile devices with Android OS 10 software. When a dual-screen configuration is supported…
-
Unscored —
MediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. Language::translateBlockExpiry itself does not escape in …
-
Unscored —
An issue was discovered in MediaWiki before 1.35.1. Missing users (accounts that don't exist) and hidden users (account…
-
Unscored —
MediaWiki before 1.35.1 blocks legitimate attempts to hide log entries in some situations. If one sets MediaWiki:Mainpa…
-
Unscored —
MediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. MediaWiki:blanknamespace potentially can be output as raw…
-
Unscored —
In MediaWiki before 1.35.1, the messages userrights-expiry-current and userrights-expiry-none can contain raw HTML. XSS…
-
Unscored —
In MediaWiki before 1.35.1, the combination of Html::rawElement and Message::text leads to XSS because the definition o…
-
Unscored —
The Bluetooth handset of Mitel MiVoice 6940 and 6930 MiNet phones with firmware before 1.5.3 could allow an unauthentic…
-
Unscored —
The Bluetooth handset of Mitel MiVoice 6873i, 6930, and 6940 SIP phones with firmware before 5.1.0.SP6 could allow an u…
-
Unscored —
The chat window of Mitel BusinessCTI Enterprise (MBC-E) Client for Windows before 6.4.11 and 7.x before 7.0.3 could all…
-
Unscored —
The SAS portal of Mitel MiCollab before 9.2 could allow an attacker to access user credentials due to improper input va…
-
Unscored —
The NuPoint Messenger Portal of Mitel MiCollab before 9.2 could allow an authenticated attacker to execute arbitrary sc…
-
Unscored —
The online help portal of Mitel MiCollab before 9.2 could allow an attacker to redirect a user to an unauthorized websi…
-
Unscored —
The AWV component of Mitel MiCollab before 9.2 could allow an attacker to view system information by sending arbitrary …
-
Unscored —
The AWV portal of Mitel MiCollab before 9.2 could allow an attacker to gain access to conference information by sending…
-
Unscored —
The AWV component of Mitel MiCollab before 9.2 could allow an attacker to gain access to a web conference due to insuff…
-
Unscored —
The NuPoint Messenger of Mitel MiCollab before 9.2 could allow an attacker with escalated privilege to access user file…
-
Unscored —
The Ignite portal in Mitel MiContact Center Business before 9.3.0.0 could allow a local attacker to view system informa…
-
High 8.1CVE-2020-28052 Public exploit
Logic error in Legion of the Bouncy Castle BC Java
An issue was discovered in Legion of the Bouncy Castle BC Java 1.65 and 1.66. The OpenBSDBCrypt.checkPassword utility method compared incorrect data when checking the password, allowing incorrect passwords to indicate they were matching with previously hashed…
-
High 8.8
A arbitrary code execution vulnerability exists in the way that the Stove client improperly validates input value. An a…
-
Critical 9.8
Remote code execution in DolphinScheduler
In DolphinScheduler 1.2.0 and 1.2.1, with mysql connectorj a remote code execution vulnerability exists when choosing mysql as database.
-
Unscored —
User credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila, resulting in potential p…