Skip to content
OpenAdvisories

Archive

December 2020

Vulnerabilities first published in this month (UTC), newest first.

← November 2020 2020 / December January 2021 →
  1. 129
  2. 246
  3. 355
  4. 427
  5. 52
  6. 6 
  7. 723
  8. 8116
  9. 9130
  10. 1037
  11. 11120
  12. 126
  13. 13 
  14. 1490
  15. 15129
  16. 1645
  17. 1762
  18. 1866
  19. 19 
  20. 203
  21. 2152
  22. 2245
  23. 2341
  24. 2452
  25. 2510
  26. 2628
  27. 2713
  28. 2845
  29. 29105
  30. 3041
  31. 31133
All Critical High Medium Low Exploited only Public exploit

256 results · Clear filters · Feed

  • Medium 4.8
    CVE-2020-35808

    Certain NETGEAR devices are affected by stored XSS. This affects D6100 before 1.0.0.63, DM200 before 1.0.0.61, R7800 be…

  • Medium 6.1
    CVE-2020-35809

    Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 …

  • Medium 6.1
    CVE-2020-35810

    Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 …

  • Medium 6.1
    CVE-2020-35811

    Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 …

  • Medium 6.1
    CVE-2020-35812

    Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 …

  • Medium 6.1
    CVE-2020-35813

    Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, RBK50 before 2.3.5.30, RBR50 be…

  • Medium 6.1
    CVE-2020-35814

    Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7800 before 1.0.2.74, R8900 be…

  • Medium 6.1
    CVE-2020-35815

    Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 …

  • Medium 6.1
    CVE-2020-35816

    Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 …

  • Medium 6.1
    CVE-2020-35817

    Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 …

  • Medium 6.1
    CVE-2020-35818

    Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 …

  • Medium 6.1
    CVE-2020-35819

    Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 …

  • Medium 6.1
    CVE-2020-35820

    Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 …

  • Medium 6.1
    CVE-2020-35821

    Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7800 before 1.0.2.74, R8900 be…

  • Medium 6.1
    CVE-2020-35822

    Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 …

  • Medium 6.1
    CVE-2020-35823

    Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 …

  • Medium 6.1
    CVE-2020-35824

    Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 …

  • Medium 6.1
    CVE-2020-35825

    Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 …

  • Medium 6.1
    CVE-2020-35826

    Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 …

  • Medium 6.1
    CVE-2020-35827

    Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, RBK50 before 2.3.5.30, RBR50 be…

  • Medium 6.1
    CVE-2020-35828

    Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, RBK20 before 2.3.5.26, RBR20 be…

  • Medium 6.1
    CVE-2020-35829

    Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7800 before 1.0.2.74, R8900 be…

  • Medium 6.1
    CVE-2020-35830

    Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 …

  • Medium 6.1
    CVE-2020-35831

    Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 …

  • Medium 6.1
    CVE-2020-35832

    Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 …

  • Medium 6.1
    CVE-2020-35833

    Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 …

  • Medium 6.1
    CVE-2020-35834

    Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 …

  • Medium 6.1
    CVE-2020-35835

    Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 …

  • Medium 6.1
    CVE-2020-35836

    Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 …

  • Medium 6.1
    CVE-2020-35837

    Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 …

  • Medium 6.1
    CVE-2020-35838

    Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 …

  • Medium 6.1
    CVE-2020-35839

    Certain NETGEAR devices are affected by Stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 …

  • Medium 6.9
    CVE-2020-35840

    Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010…

  • Medium 6.9
    CVE-2020-35841

    Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010…

  • Medium 6.9
    CVE-2020-35842

    Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010…

  • Medium 6.1
    CVE-2020-35774 Scanner template EPSS 86%

    TwitterServer Cross-site Scripting via /histograms endpoint

    server/handler/HistogramQueryHandler.scala in Twitter TwitterServer (aka twitter-server) before 20.12.0, in some configurations, allows XSS via the /histograms endpoint.

    com.twitter:twitter-server_2.12 Maven
  • Medium 4.8
    CVE-2020-29470 Public exploit

    OpenCart Cross-site Scripting (XSS) in the Subject field of mail.

    OpenCart 3.0.3.6 is affected by cross-site scripting (XSS) in the Subject field of mail. This vulnerability can allow an attacker to inject the XSS payload in the Subject field of the mail and each time any user will open that mail of the website, the XSS tri…

    opencart/opencart Packagist
  • Medium 4.8
    CVE-2020-29471 Public exploit

    OpenCart Stored Cross-Site Scripting

    OpenCart 3.0.3.6 is affected by cross-site scripting (XSS) in the Profile Image. An admin can upload a profile image as a malicious code using JavaScript. Whenever anyone will see the profile picture, the code will execute and XSS will trigger.

    opencart/opencart Packagist
  • Medium 6.1
    CVE-2020-35730 Exploited Public exploit EPSS 33%

    An XSS issue was discovered in Roundcube Webmail before 1.2.13, 1.3.x before 1.3.16, and 1.4.x before 1.4.10. The attac…

    roundcube roundcube Debian Ubuntu
    KEV Jun 22, 2023
  • Medium 6.5
    CVE-2020-29242

    dhowden tag panic due to out-of-bounds read

    dhowden tag before 2020-11-19 allows "panic: runtime error: index out of range" via readPICFrame.

    github.com/dhowden/tag Go