Skip to content
OpenAdvisories

Archive

23 December 2020

Vulnerabilities first published on this day (UTC), newest first.

← November 2020 2020 / December /23 January 2021 →
  1. 129
  2. 246
  3. 355
  4. 427
  5. 52
  6. 6 
  7. 723
  8. 8116
  9. 9130
  10. 1037
  11. 11120
  12. 126
  13. 13 
  14. 1490
  15. 15129
  16. 1645
  17. 1762
  18. 1866
  19. 19 
  20. 203
  21. 2152
  22. 2245
  23. 2341
  24. 2452
  25. 2510
  26. 2628
  27. 2713
  28. 2845
  29. 29105
  30. 3041
  31. 31133
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.2
    CVE-2020-35136

    Dolibarr authenticated Remote Code Execution

    Dolibarr 12.0.3 is vulnerable to authenticated Remote Code Execution. An attacker who has the access the admin dashboard can manipulate the backup function by inserting a payload into the filename for the zipfilename_template parameter to admin/tools/dolibarr…

    dolibarr dolibarr/dolibarr Ubuntu Packagist
  • High 8.8
    CVE-2020-25198

    MOXA NPort IAW5000A-I/O Series

    The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower has incorrectly implemented protections from session fixation, which may allow an attacker to gain access to a session and hijack it by stealing the user’s cookies.

    Moxa NPort IAW5000A-I/O ICS / OT
  • High 8.8
    CVE-2020-25194

    MOXA NPort IAW5000A-I/O Series

    The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower has improper privilege management, which may allow an attacker with user privileges to perform requests with administrative privileges.

    Moxa NPort IAW5000A-I/O ICS / OT
  • High 7.5
    CVE-2020-25190

    MOXA NPort IAW5000A-I/O Series

    The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower stores and transmits the credentials of third-party services in cleartext.

    Moxa NPort IAW5000A-I/O ICS / OT