Skip to content
OpenAdvisories

Archive

22 December 2020

Vulnerabilities first published on this day (UTC), newest first.

← November 2020 2020 / December /22 January 2021 →
  1. 129
  2. 246
  3. 355
  4. 427
  5. 52
  6. 6 
  7. 723
  8. 8116
  9. 9130
  10. 1037
  11. 11120
  12. 126
  13. 13 
  14. 1490
  15. 15129
  16. 1645
  17. 1762
  18. 1866
  19. 19 
  20. 203
  21. 2152
  22. 2245
  23. 2341
  24. 2452
  25. 2510
  26. 2628
  27. 2713
  28. 2845
  29. 29105
  30. 3041
  31. 31133
All Critical High Medium Low Exploited only Public exploit

45 results · Feed

  • High 8.2
    CVE-2018-15632

    Improper input validation in database creation logic in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and ea…

    Odoo Odoo Enterprise Odoo Community
  • Medium 5.6
    CVE-2020-28448

    Prototype Pollution

    This affects the package multi-ini before 2.1.1. It is possible to pollute an object's prototype by specifying the proto object as part of an array.

    multi-ini npm
  • Medium 5.6
    CVE-2020-28460

    Prototype Pollution

    This affects the package multi-ini before 2.1.2. It is possible to pollute an object's prototype by specifying the constructor.proto object as part of an array. This is a bypass of CVE-2020-28448.

    multi-ini npm
  • Unscored —
    RUSTSEC-2020-0109

    stderr is unmaintained; use eprintln instead

    The `stderr` crate is no longer maintained by its current owner. The author recommends using the `eprintln` macro from the standard library as a replacement.

    stderr crates.io
  • Critical 9.8
    CVE-2020-29583 Exploited Public exploit Scanner template EPSS 90%

    Firmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an unchangeable password. The …

    KEV Nov 3, 2021