Archive

December 2020

Vulnerabilities first published in this month (UTC), newest first.

← November 2020 2020 / December January 2021 →

All Critical High Medium Low Exploited only Public exploit

204 results · Clear filters · Feed

High 7.5

CVE-2020-7792

Prototype Pollution

This affects all versions of package mout. The deepFillIn function can be used to 'fill missing properties recursively', while the deepMixIn 'mixes objects into the target object, recursively mixing existing child objects as well'. In both cases, the key used…

mout npm

Dec 11, 2020
High 7.3

CVE-2020-7788

Prototype Pollution

This affects the package ini before 1.3.6. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the prototype on the application. This can be exploited further depending on the context.

js-jquery nodejs-nodemon ini node-ini Debian Ubuntu Azure Linux npm

Dec 11, 2020
High 8.8

CVE-2020-13520

An out of bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 reconstructs paths from binary U…

Dec 11, 2020
High 7.5

CVE-2020-13530

A denial-of-service vulnerability exists in the Ethernet/IP server functionality of the EIP Stack Group OpENer 2.3 and …

Dec 11, 2020
High 7.0

CVE-2020-24440

Uncontrolled Search Path Element in Adobe Prelude for Windows

Adobe Prelude version 9.0.1 (and earlier) is affected by an uncontrolled search path element that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a ma…

Adobe Prelude

Dec 11, 2020
High 7.0

CVE-2020-24447

Uncontrolled Search Path Element vulnerability in Lightroom Classic 10.0

Adobe Lightroom Classic version 10.0 (and earlier) for Windows is affected by an uncontrolled search path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in t…

Adobe Lightroom

Dec 11, 2020
High 7.5

CVE-2020-7549

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340,…

Dec 11, 2020
High 8.4

CVE-2020-4829

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user to exploit a vulnerability in the ksu user command to gain root…

IBM AIX VIOS

Dec 10, 2020
High 7.5

CVE-2020-12516

WAGO: PLC families 750-88x and 750-352 prone to DoS attack

Older firmware versions (FW1 up to FW10) of the WAGO PLC family 750-88x and 750-352 are vulnerable for a special denial of service attack.

WAGO 750-882 750-852 750-881 ICS / OT

Dec 10, 2020
High 7.8

CVE-2020-17159

Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability

Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability

Microsoft Visual Studio Code Language Support for Java Extension

Dec 9, 2020
High 7.8

CVE-2020-17156

Visual Studio Remote Code Execution Vulnerability

Visual Studio Remote Code Execution Vulnerability

Microsoft Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3) Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)

Dec 9, 2020
High 8.8

CVE-2020-17158

Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability

Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability

Microsoft Dynamics 365 for Finance and Operations

Dec 9, 2020
High 8.8

CVE-2020-17152

Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability

Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability

Microsoft Dynamics 365 for Finance and Operations

Dec 9, 2020
High 7.8

CVE-2020-17150

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Microsoft Visual Studio Code TS-Lint Extension

Dec 9, 2020
High 7.8

CVE-2020-17148

Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability

Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability

Microsoft Visual Studio Code Remote - SSH Extension

Dec 9, 2020
High 8.7

CVE-2020-17147

Dynamics CRM Webclient Cross-site Scripting Vulnerability

Dynamics CRM Webclient Cross-site Scripting Vulnerability

Microsoft Microsoft Dynamics 365 (on-premises) version 9.0 Microsoft Dynamics 365 (on-premises) version 8.2

Dec 9, 2020
High 8.4

CVE-2020-17144 Exploited Public exploit EPSS 37%

Microsoft Exchange Remote Code Execution Vulnerability

Microsoft Exchange Remote Code Execution Vulnerability

Microsoft Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 31

Dec 9, 2020
KEV Nov 3, 2021
High 8.8

CVE-2020-17143 EPSS 71%

Microsoft Exchange Server Information Disclosure Vulnerability

Microsoft Exchange Server Information Disclosure Vulnerability

Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 7 Microsoft Exchange Server 2016 Cumulative Update 18

Dec 9, 2020
High 8.4

CVE-2020-17141

Microsoft Exchange Remote Code Execution Vulnerability

Microsoft Exchange Remote Code Execution Vulnerability

Microsoft Microsoft Exchange Server 2019 Cumulative Update 7 Microsoft Exchange Server 2016 Cumulative Update 18 Microsoft Exchange Server 2019 Cumulative Update 6

Dec 9, 2020
High 8.1

CVE-2020-17140 EPSS 15%

Windows SMB Information Disclosure Vulnerability

Windows SMB Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 9, 2020
High 7.8

CVE-2020-17139

Windows Overlay Filter Security Feature Bypass Vulnerability

Windows Overlay Filter Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 9, 2020
High 7.8

CVE-2020-17136 Public exploit EPSS 14%

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 9, 2020
High 7.8

CVE-2020-17137

DirectX Graphics Kernel Elevation of Privilege Vulnerability

DirectX Graphics Kernel Elevation of Privilege Vulnerability

Microsoft Windows 10 Version 20H2 Windows Server version 20H2 Windows 10 Version 2004 Windows

Dec 9, 2020
High 7.8

CVE-2020-17134

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 9, 2020
High 7.8

CVE-2020-17129

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft Excel 2016

Dec 9, 2020
High 7.8

CVE-2020-17128

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft Excel 2016

Dec 9, 2020
High 7.8

CVE-2020-17127

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Microsoft Excel 2010 Service Pack 2

Dec 9, 2020
High 7.8

CVE-2020-17124

Microsoft PowerPoint Remote Code Execution Vulnerability

Microsoft PowerPoint Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft Office 2019 for Mac

Dec 9, 2020
High 7.8

CVE-2020-17125

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft Excel 2016

Dec 9, 2020
High 7.8

CVE-2020-17122

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Microsoft Office 2010 Service Pack 2 Microsoft SharePoint Server 2010 Service Pack 2 Microsoft Office Web Apps 2010 Service Pack 2

Dec 9, 2020
High 7.8

CVE-2020-17123

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Office Online Server

Dec 9, 2020
High 8.8

CVE-2020-17121

Microsoft SharePoint Remote Code Execution Vulnerability

Microsoft SharePoint Remote Code Execution Vulnerability

Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Foundation 2013 Service Pack 1

Dec 9, 2020
High 8.1

CVE-2020-17118

Microsoft SharePoint Remote Code Execution Vulnerability

Microsoft SharePoint Remote Code Execution Vulnerability

Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Foundation 2013 Service Pack 1

Dec 9, 2020
High 8.0

CVE-2020-17115

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Foundation 2013 Service Pack 1

Dec 9, 2020
High 7.0

CVE-2020-17103 Public exploit EPSS 30%

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 9, 2020
High 7.5

CVE-2020-17096 EPSS 20%

Windows NTFS Remote Code Execution Vulnerability

Windows NTFS Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 9, 2020
High 8.5

CVE-2020-17095

Windows Hyper-V Remote Code Execution Vulnerability

Windows Hyper-V Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 9, 2020
High 7.8

CVE-2020-17092

Windows Network Connections Service Elevation of Privilege Vulnerability

Windows Network Connections Service Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 9, 2020
High 7.1

CVE-2020-17089

Microsoft SharePoint Elevation of Privilege Vulnerability

Microsoft SharePoint Elevation of Privilege Vulnerability

Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Foundation 2013 Service Pack 1

Dec 9, 2020
High 7.4

CVE-2020-17002

Azure SDK for C Security Feature Bypass Vulnerability

Azure SDK for C Security Feature Bypass Vulnerability

Microsoft azure-umqtt-c C SDK for Azure IoT azure-umqtt-c Release LTS_07_2020_Ref02

Dec 9, 2020