Skip to content
OpenAdvisories

Archive

22 December 2020

Vulnerabilities first published on this day (UTC), newest first.

← November 2020 2020 / December /22 January 2021 →
  1. 129
  2. 246
  3. 355
  4. 427
  5. 52
  6. 6 
  7. 723
  8. 8116
  9. 9130
  10. 1037
  11. 11120
  12. 126
  13. 13 
  14. 1490
  15. 15129
  16. 1645
  17. 1762
  18. 1866
  19. 19 
  20. 203
  21. 2152
  22. 2245
  23. 2341
  24. 2452
  25. 2510
  26. 2628
  27. 2713
  28. 2845
  29. 29105
  30. 3041
  31. 31133
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.8
    CVE-2020-24675

    Weak Authentication in Symphony Plus

    In S+ Operations and S+ History, it is possible that an unauthenticated user could inject values to the Operations History server (or standalone S+ History server) and ultimately write values to the controlled process.

    ABB ABB Ability™ Symphony® Plus Operations ABB Ability™ Symphony® Plus Historian ICS / OT
  • Critical 9.8
    CVE-2020-24673

    SQL Injection in Symphony Plus

    In S+ Operations and S+ Historian, a successful SQL injection exploit can read sensitive data from the database, modify database data (Insert/Update/Delete), execute administration operations on the database (such as shutdown the DBMS), recover the content of…

    ABB ABB Ability™ Symphony® Plus Operations ABB Ability™ Symphony® Plus Historian ICS / OT
  • Critical 9.8
    CVE-2020-24683

    Authentication Bypass in Symphony Plus

    The affected versions of S+ Operations (version 2.1 SP1 and earlier) used an approach for user authentication which relies on validation at the client node (client-side authentication). This is not as secure as having the server validate a client application …

    ABB ABB Ability™ Symphony® Plus Operations ICS / OT
  • Critical 10.0
    CVE-2020-25066

    A heap-based buffer overflow in the Treck HTTP Server component before 6.0.1.68 allows remote attackers to cause a deni…

  • Critical 9.9
    CVE-2020-29396

    A sandboxing issue in Odoo Community 11.0 through 13.0 and Odoo Enterprise 11.0 through 13.0, when running with Python …

    Odoo Odoo Enterprise Odoo Community odoo Ubuntu
  • Critical 9.8
    CVE-2020-29583 Exploited Public exploit Scanner template EPSS 90%

    Firmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an unchangeable password. The …

    KEV Nov 3, 2021