Skip to content
OpenAdvisories

Archive

21 December 2020

Vulnerabilities first published on this day (UTC), newest first.

← November 2020 2020 / December /21 January 2021 →
  1. 129
  2. 246
  3. 355
  4. 427
  5. 52
  6. 6 
  7. 723
  8. 8116
  9. 9130
  10. 1037
  11. 11120
  12. 126
  13. 13 
  14. 1490
  15. 15129
  16. 1645
  17. 1762
  18. 1866
  19. 19 
  20. 203
  21. 2152
  22. 2245
  23. 2341
  24. 2452
  25. 2510
  26. 2628
  27. 2713
  28. 2845
  29. 29105
  30. 3041
  31. 31133
All Critical High Medium Low Exploited only Public exploit

52 results · Feed

  • Unscored —
    CVE-2020-35497

    A flaw was found in ovirt-engine 4.4.3 and earlier allowing an authenticated user to read other users' personal informa…

  • Critical 9.8
    CVE-2020-27846

    XML Processing error in github.com/crewjam/saml

    A signature verification vulnerability exists in crewjam/saml. This flaw allows an attacker to bypass SAML Authentication. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

    github.com/crewjam/saml Go
  • Unscored —
    CVE-2020-3999

    VMware ESXi (7.0 prior to ESXi70U1c-17325551), VMware Workstation (16.x prior to 16.0 and 15.x prior to 15.5.7), VMware…

    Virtualization
  • Unscored —
    CVE-2019-16959

    SolarWinds Web Help Desk 12.7.0 allows CSV Injection, also known as Formula Injection, via a file attached to a ticket.

  • Unscored —
    CVE-2020-35276

    EgavilanMedia ECM Address Book 1.0 is affected by SQL injection. An attacker can bypass the Admin Login panel through S…

  • Unscored —
    CVE-2020-35275

    Coastercms v5.8.18 is affected by cross-site Scripting (XSS). A user can steal a cookie and make the user redirect to a…

  • Unscored —
    CVE-2020-35274

    DotCMS Add Template with admin panel 20.11 is affected by cross-site Scripting (XSS) to gain remote privileges. An atta…

  • Unscored —
    CVE-2020-35273

    EgavilanMedia User Registration & Login System with Admin Panel 1.0 is affected by Cross Site Request Forgery (CSRF) to…

  • Unscored —
    CVE-2020-26049

    Nifty-PM CPE 2.3 is affected by stored HTML injection. The impact is remote arbitrary code execution.

  • Unscored —
    CVE-2020-35590 Public exploit

    LimitLoginAttempts.php in the limit-login-attempts-reloaded plugin before 2.17.4 for WordPress allows a bypass of (per …

  • Unscored —
    CVE-2020-35589

    The limit-login-attempts-reloaded plugin before 2.17.4 for WordPress allows wp-admin/options-general.php?page=limit-log…

  • Unscored —
    CVE-2020-29447

    Affected versions of Atlassian Crucible allow remote attackers to impact the application's availability via a Denial of…

    Atlassian Crucible