Skip to content
OpenAdvisories

Archive

21 December 2020

Vulnerabilities first published on this day (UTC), newest first.

← November 2020 2020 / December /21 January 2021 →
  1. 129
  2. 246
  3. 355
  4. 427
  5. 52
  6. 6 
  7. 723
  8. 8116
  9. 9130
  10. 1037
  11. 11120
  12. 126
  13. 13 
  14. 1490
  15. 15129
  16. 1645
  17. 1762
  18. 1866
  19. 19 
  20. 203
  21. 2152
  22. 2245
  23. 2341
  24. 2452
  25. 2510
  26. 2628
  27. 2713
  28. 2845
  29. 29105
  30. 3041
  31. 31133
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Low 2.7
    CVE-2020-4842

    IBM Security Secret Server 10.6 could allow a remote attacker to obtain sensitive information when a detailed technical…

    IBM Security Secret Server
  • Low —
    GHSA-8pfh-mm2g-hmc3

    Authenticated Server Side Request Forgery

    ### Impact Authenticated Server Side Request Forgery ### Patches We recommend to update to the current version 6.3.4.1. You can get the update to 6.3.4.1 regularly via the Auto-Updater or directly via the download overview. https://www.shopware.com/en/downloa…

    shopware/platform shopware/core Packagist
  • Low —
    GHSA-cq6h-w3mc-57f4

    Information exposure via query strings in URL

    ### Impact Information exposure via query strings in URL ### Patches We recommend to update to the current version 6.3.4.1. You can get the update to 6.3.4.1 regularly via the Auto-Updater or directly via the download overview. https://www.shopware.com/en/dow…

    shopware/platform shopware/core Packagist
  • Low —
    GHSA-5q58-x5h2-v5rx

    Authenticated Privilege Escalation

    ### Impact Authenticated Privilege Escalation ### Patches We recommend to update to the current version 6.3.4.1. You can get the update to 6.3.4.1 regularly via the Auto-Updater or directly via the download overview. https://www.shopware.com/en/download/#shop…

    shopware/platform shopware/core Packagist
  • Low 3.7
    CVE-2020-26422

    Buffer overflow in QUIC dissector in Wireshark 3.4.0 to 3.4.1 allows denial of service via packet injection or crafted …

    The Wireshark Foundation Wireshark wireshark wireshark Ubuntu Alpine