Skip to content
OpenAdvisories

Archive

29 December 2020

Vulnerabilities first published on this day (UTC), newest first.

← November 2020 2020 / December /29 January 2021 →
  1. 129
  2. 246
  3. 355
  4. 427
  5. 52
  6. 6 
  7. 723
  8. 8116
  9. 9130
  10. 1037
  11. 11120
  12. 126
  13. 13 
  14. 1490
  15. 15129
  16. 1645
  17. 1762
  18. 1866
  19. 19 
  20. 203
  21. 2152
  22. 2245
  23. 2341
  24. 2452
  25. 2510
  26. 2628
  27. 2713
  28. 2845
  29. 29105
  30. 3041
  31. 31133
All Critical High Medium Low Exploited only Public exploit

49 results · Clear filters · Feed

  • Medium 6.1
    CVE-2020-35837

    Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 …

  • Medium 6.1
    CVE-2020-35838

    Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 …

  • Medium 6.1
    CVE-2020-35839

    Certain NETGEAR devices are affected by Stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 …

  • Medium 6.9
    CVE-2020-35840

    Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010…

  • Medium 6.9
    CVE-2020-35841

    Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010…

  • Medium 6.9
    CVE-2020-35842

    Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010…

  • Medium 6.1
    CVE-2020-35774 Scanner template EPSS 86%

    TwitterServer Cross-site Scripting via /histograms endpoint

    server/handler/HistogramQueryHandler.scala in Twitter TwitterServer (aka twitter-server) before 20.12.0, in some configurations, allows XSS via the /histograms endpoint.

    com.twitter:twitter-server_2.12 Maven
  • Medium 4.8
    CVE-2020-29470 Public exploit

    OpenCart Cross-site Scripting (XSS) in the Subject field of mail.

    OpenCart 3.0.3.6 is affected by cross-site scripting (XSS) in the Subject field of mail. This vulnerability can allow an attacker to inject the XSS payload in the Subject field of the mail and each time any user will open that mail of the website, the XSS tri…

    opencart/opencart Packagist
  • Medium 4.8
    CVE-2020-29471 Public exploit

    OpenCart Stored Cross-Site Scripting

    OpenCart 3.0.3.6 is affected by cross-site scripting (XSS) in the Profile Image. An admin can upload a profile image as a malicious code using JavaScript. Whenever anyone will see the profile picture, the code will execute and XSS will trigger.

    opencart/opencart Packagist