Skip to content
OpenAdvisories

Archive

31 December 2020

Vulnerabilities first published on this day (UTC), newest first.

← November 2020 2020 / December /31 January 2021 →
  1. 129
  2. 246
  3. 355
  4. 427
  5. 52
  6. 6 
  7. 723
  8. 8116
  9. 9130
  10. 1037
  11. 11120
  12. 126
  13. 13 
  14. 1490
  15. 15129
  16. 1645
  17. 1762
  18. 1866
  19. 19 
  20. 203
  21. 2152
  22. 2245
  23. 2341
  24. 2452
  25. 2510
  26. 2628
  27. 2713
  28. 2845
  29. 29105
  30. 3041
  31. 31133
All Critical High Medium Low Exploited only Public exploit

133 results · Feed

  • Unscored —
    CVE-2018-14067

    Green Packet WiMax DV-360 2.10.14-g1.0.6.1 devices allow Command Injection, with unauthenticated remote command executi…

  • Unscored —
    CVE-2016-9023

    Exponent CMS before 2.6.0 has improper input validation in cron/find_help.php.

  • Unscored —
    CVE-2016-9026

    Exponent CMS before 2.6.0 has improper input validation in fileController.php.

  • Unscored —
    CVE-2016-9025

    Exponent CMS before 2.6.0 has improper input validation in purchaseOrderController.php.

  • Unscored —
    CVE-2016-9022

    Exponent CMS before 2.6.0 has improper input validation in usersController.php.

  • Unscored —
    CVE-2016-9021

    Exponent CMS before 2.6.0 has improper input validation in storeController.php.

  • Unscored —
    CVE-2020-19664

    DrayTek Vigor2960 1.5.1 allows remote command execution via shell metacharacters in a toLogin2FA action to mainfunction…

  • Unscored —
    CVE-2020-17363

    USVN (aka User-friendly SVN) before 1.0.9 allows remote code execution via shell metacharacters in the number_start or …

  • Unscored —
    CVE-2019-20808

    In QEMU 4.1.0, an out-of-bounds read flaw was found in the ATI VGA implementation. It occurs in the ati_cursor_define()…

    qemu Debian
  • Unscored —
    CVE-2020-12658

    gssproxy (aka gss-proxy) before 0.8.3 does not unlock cond_mutex before pthread exit in gp_worker_main() in gp_workers.…

    gssproxy Debian
  • Unscored —
    CVE-2020-11947

    iscsi_aio_ioctl_cb in block/iscsi.c in QEMU 4.1.0 has a heap-based buffer over-read that may disclose unrelated informa…

    qemu qemu Debian Ubuntu
  • High 7.5
    CVE-2020-35857

    Stack consumption in trust-dns-server

    An issue was discovered in the trust-dns-server crate before 0.18.1 for Rust. DNS MX and SRV null targets are mishandled, causing stack consumption.

    trust-dns-server crates.io
  • High 7.5
    CVE-2020-13654 Public exploit

    Improper escaping in XWiki Platform

    XWiki Platform before 12.8 mishandles escaping in the property displayer.

    org.xwiki.platform:xwiki-platform-web Maven