Skip to content
OpenAdvisories

Archive

30 December 2020

Vulnerabilities first published on this day (UTC), newest first.

← November 2020 2020 / December /30 January 2021 →
  1. 129
  2. 246
  3. 355
  4. 427
  5. 52
  6. 6 
  7. 723
  8. 8116
  9. 9130
  10. 1037
  11. 11120
  12. 126
  13. 13 
  14. 1490
  15. 15129
  16. 1645
  17. 1762
  18. 1866
  19. 19 
  20. 203
  21. 2152
  22. 2245
  23. 2341
  24. 2452
  25. 2510
  26. 2628
  27. 2713
  28. 2845
  29. 29105
  30. 3041
  31. 31133
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 5.3
    CVE-2020-28413 Public exploit

    MantisBT SQL Injection via mc_project_get_users function

    In MantisBT 2.24.3, SQL Injection can occur in the parameter "access" of the mc_project_get_users function through the API SOAP.

    mantisbt/mantisbt Packagist
  • Unscored —
    CVE-2020-35737 Public exploit EPSS 10%

    In Correspondence Management System (corms) in Newgen eGov 12.0, an attacker can modify other users' profile informatio…

  • Medium 6.5
    CVE-2020-5811 Public exploit

    Authenticated path traversal in Umbraco CMS

    An authenticated path traversal vulnerability exists during package installation in Umbraco CMS <= 8.9.1 or current, which could result in arbitrary files being written outside of the site home and expected paths when installing an Umbraco package.

    UmbracoCms NuGet
  • Unscored —
    CVE-2020-29233 Public exploit

    WonderCMS 3.1.3 is affected by cross-site scripting (XSS) in the Page description component. This vulnerability can all…

  • Unscored —
    CVE-2020-29469 Public exploit

    WonderCMS 3.1.3 is affected by cross-site scripting (XSS) in the Menu component. This vulnerability can allow an attack…

  • Unscored —
    CVE-2020-35241 Public exploit

    FlatPress 1.0.3 is affected by cross-site scripting (XSS) in the Blog Content component. This vulnerability can allow a…

  • Unscored —
    CVE-2020-29477 Public exploit

    Invision Community 4.5.4 is affected by cross-site scripting (XSS) in the Field Name field. This vulnerability can allo…

  • Unscored —
    CVE-2020-35846 Public exploit Scanner template EPSS 93%

    Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php check function.

  • Unscored —
    CVE-2020-35848 Public exploit Scanner template EPSS 75%

    Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php newpassword function.

  • Unscored —
    CVE-2020-35847 Public exploit Scanner template EPSS 98%

    Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword function.