Archive
December 2020
Vulnerabilities first published in this month (UTC), newest first.
95 results · Clear filters · Feed
-
Unscored —CVE-2017-20001 Public exploit
The AES encryption project 7.x and 8.x for Drupal does not sufficiently prevent attackers from decrypting data, aka SA-…
-
High 7.5CVE-2020-13654 Public exploit
Improper escaping in XWiki Platform
XWiki Platform before 12.8 mishandles escaping in the property displayer.
-
Medium 5.3CVE-2020-28413 Public exploit
MantisBT SQL Injection via mc_project_get_users function
In MantisBT 2.24.3, SQL Injection can occur in the parameter "access" of the mc_project_get_users function through the API SOAP.
-
Unscored —
In Correspondence Management System (corms) in Newgen eGov 12.0, an attacker can modify other users' profile informatio…
-
Medium 6.5CVE-2020-5811 Public exploit
Authenticated path traversal in Umbraco CMS
An authenticated path traversal vulnerability exists during package installation in Umbraco CMS <= 8.9.1 or current, which could result in arbitrary files being written outside of the site home and expected paths when installing an Umbraco package.
-
Unscored —CVE-2020-29233 Public exploit
WonderCMS 3.1.3 is affected by cross-site scripting (XSS) in the Page description component. This vulnerability can all…
-
Unscored —CVE-2020-29469 Public exploit
WonderCMS 3.1.3 is affected by cross-site scripting (XSS) in the Menu component. This vulnerability can allow an attack…
-
Unscored —CVE-2020-35241 Public exploit
FlatPress 1.0.3 is affected by cross-site scripting (XSS) in the Blog Content component. This vulnerability can allow a…
-
Unscored —CVE-2020-29477 Public exploit
Invision Community 4.5.4 is affected by cross-site scripting (XSS) in the Field Name field. This vulnerability can allo…
-
Unscored —
Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php check function.
-
Unscored —
Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php newpassword function.
-
Unscored —
Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword function.
-
Critical 9.8
SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands
The SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands. This vulnerability could allow a remote attacker to bypass authentication and execute API commands which may result in a compromise …
KEV Nov 3, 2021 -
Medium 4.8CVE-2020-29470 Public exploit
OpenCart Cross-site Scripting (XSS) in the Subject field of mail.
OpenCart 3.0.3.6 is affected by cross-site scripting (XSS) in the Subject field of mail. This vulnerability can allow an attacker to inject the XSS payload in the Subject field of the mail and each time any user will open that mail of the website, the XSS tri…
-
Medium 4.8CVE-2020-29471 Public exploit
OpenCart Stored Cross-Site Scripting
OpenCart 3.0.3.6 is affected by cross-site scripting (XSS) in the Profile Image. An admin can upload a profile image as a malicious code using JavaScript. Whenever anyone will see the profile picture, the code will execute and XSS will trigger.
-
Unscored —CVE-2020-29475 Public exploit
nopCommerce Store 4.30 is affected by cross-site scripting (XSS) in the Schedule tasks name field. This vulnerability c…
-
High 8.1CVE-2020-17533 Public exploit
Apache Accumulo Improper Handling of Insufficient Permissions
Apache Accumulo versions 1.5.0 through 1.10.0 and version 2.0.0 do not properly check the return value of some policy enforcement functions before permitting an authenticated user to perform certain administrative operations. Specifically, the return values o…
-
Medium 6.1
An XSS issue was discovered in Roundcube Webmail before 1.2.13, 1.3.x before 1.3.16, and 1.4.x before 1.4.10. The attac…
KEV Jun 22, 2023 -
Medium 6.1CVE-2020-29204 Public exploit
Cross-site Scripting in XXL-JOB
XXL-JOB 2.2.0 allows Stored XSS (in Add User) to bypass the 20-character limit via xxl-job-admin/src/main/java/com/xxl/job/admin/controller/UserController.java.
-
Unscored —
KLog Server 2.4.1 allows OS command injection via shell metacharacters in the actions/authenticate.php user parameter.
-
High 8.1
Serialization gadget exploit in jackson-databind
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka embedded Xalan in org.glassfish.web/javax.servlet.jsp.jstl).
-
Unscored —CVE-2020-8290 Public exploit
Backblaze for Windows and Backblaze for macOS before 7.0.0.439 suffer from improper privilege management in `bztransmit…
-
Unscored —CVE-2020-8289 Public exploit
Backblaze for Windows before 7.0.1.433 and Backblaze for macOS before 7.0.1.434 suffer from improper certificate valida…
-
Unscored —CVE-2020-35437 Public exploit
Subrion CMS 4.2.1 is affected by: Cross Site Scripting (XSS) through the avatar[path] parameter in a POST request to th…
-
Unscored —CVE-2020-35575 Public exploit
A password-disclosure issue in the web interface on certain TP-Link devices allows a remote attacker to get full admini…
-
Unscored —
Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to execute arbitrary commands or set a new pass…
-
Unscored —CVE-2020-28169 Public exploit
The td-agent-builder plugin before 2020-12-18 for Fluentd allows attackers to gain privileges because the bin directory…
-
Medium 6.1CVE-2020-35669 Public exploit
http before 0.13.3 vulnerable to header injection
An issue was discovered in the http package through 0.12.2 for Dart. If the attacker controls the HTTP method and the app is using Request directly, it's possible to achieve CRLF injection in an HTTP request.
-
Unscored —
Remote Command Execution (RCE) vulnerability in TerraMaster TOS <= 4.2.06 allow remote unauthenticated attackers to inj…
-
Unscored —
ACS Advanced Comment System 1.0 is affected by Directory Traversal via an advanced_component_system/index.php?ACS_path=…
-
Unscored —
An unauthenticated command-execution vulnerability exists in TerraMaster TOS through 4.2.06 via shell metacharacters in…
-
Critical 9.8
Firmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an unchangeable password. The …
KEV Nov 3, 2021 -
Unscored —CVE-2020-35151 Public exploit
The Online Marriage Registration System 1.0 post parameter "searchdata" in the user/search.php request is vulnerable to…
-
Unscored —
Arbitrary command execution can occur in Webmin through 1.962. Any user authorized for the Package Updates module can e…
-
Unscored —CVE-2020-21378 Public exploit
SQL injection vulnerability in SeaCMS 10.1 (2020.02.08) via the id parameter in an edit action to admin_members_group.p…
-
Unscored —CVE-2020-25860 Public exploit
The install.c module in the Pengutronix RAUC update client prior to version 1.5 has a Time-of-Check Time-of-Use vulnera…
-
Unscored —CVE-2020-35590 Public exploit
LimitLoginAttempts.php in the limit-login-attempts-reloaded plugin before 2.17.4 for WordPress allows a bypass of (per …
-
Unscored —
A potential security vulnerability has been identified in HPE Systems Insight Manager (SIM) version 7.6. The vulnerabil…
-
High 8.8CVE-2020-13519 Public exploit
A privilege escalation vulnerability exists in the WinRing0x64 Driver IRP 0x9c402088 functionality of NZXT CAM 4.8.0. A…
-
Unscored —
There are multiple unauthenticated directory traversal vulnerabilities in different FTP commands in uftpd FTP server ve…