Skip to content
OpenAdvisories

Archive

December 2020

Vulnerabilities first published in this month (UTC), newest first.

← November 2020 2020 / December January 2021 →
  1. 129
  2. 246
  3. 355
  4. 427
  5. 52
  6. 6 
  7. 723
  8. 8116
  9. 9130
  10. 1037
  11. 11120
  12. 126
  13. 13 
  14. 1490
  15. 15129
  16. 1645
  17. 1762
  18. 1866
  19. 19 
  20. 203
  21. 2152
  22. 2245
  23. 2341
  24. 2452
  25. 2510
  26. 2628
  27. 2713
  28. 2845
  29. 29105
  30. 3041
  31. 31133
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2020-10148 Exploited Public exploit EPSS 92%

    SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands

    The SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands. This vulnerability could allow a remote attacker to bypass authentication and execute API commands which may result in a compromise …

    SolarWinds Orion Platform
    KEV Nov 3, 2021
  • Medium 6.1
    CVE-2020-35730 Exploited Public exploit EPSS 33%

    An XSS issue was discovered in Roundcube Webmail before 1.2.13, 1.3.x before 1.3.16, and 1.4.x before 1.4.10. The attac…

    roundcube roundcube Debian Ubuntu
    KEV Jun 22, 2023
  • Critical 9.8
    CVE-2020-29583 Exploited Public exploit EPSS 90%

    Firmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an unchangeable password. The …

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2020-17530 Exploited Public exploit EPSS 96%

    Remote code execution in Apache Struts

    Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. Affected software : Apache Struts 2.0.0 - Struts 2.5.25.

    Apache Software Foundation Apache Struts org.apache.struts:struts2-core Maven
    KEV Nov 3, 2021
  • High 8.4
    CVE-2020-17144 Exploited Public exploit EPSS 37%

    Microsoft Exchange Remote Code Execution Vulnerability

    Microsoft Exchange Remote Code Execution Vulnerability

    Microsoft Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 31
    KEV Nov 3, 2021
  • High 7.8
    CVE-2020-27930 Exploited Public exploit EPSS 22%

    A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, wa…

    Apple macOS iOS and iPadOS watchOS macOS iOS
    KEV Nov 3, 2021
  • Medium 5.5
    CVE-2020-27950 Exploited Public exploit EPSS 17%

    A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watc…

    Apple macOS iOS and iPadOS watchOS macOS iOS
    KEV Nov 3, 2021