CVEs published December 3, 2020
55 CVEs were published on December 3, 2020: 1 critical, 6 high.
- Published
- 55
- Critical
- 1
- High
- 6
- Medium
- 6
- Low
- 0
- Unrated
- 42
- Now in CISA KEV
- 0
- Fix available
- 15
Most affected products
- ImageMagick
- 6
- WESEEK GROWI
- 3
- EC-CUBE CO. EC-CUBE · ec-cube/ec-cube
- 2
- Jenkins project Jenkins Chaos Monkey Plugin · io.jenkins.pl…
- 2
- kernel
- 2
- Pixar
- 2
- Webkit
- 2
- Allen-Bradley
- 1
- Apache Software Foundation Apache Tomcat · tomcat +1
- 1
- Canonical pulseaudio
- 1
Critical 1
High 6
- CVE-2020-13584An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.1 x64.Webkit
- CVE-2020-13543A code execution vulnerability exists in the WebSocket functionality of Webkit WebKitGTK 2.30.0.Webkit
- CVE-2020-13531A use-after-free vulnerability exists in a way Pixar OpenUSD 20.08 processes reference paths textual USD files.Pixar
- CVE-2020-14381A flaw was found in the Linux kernel’s futex implementation.kernel
- CVE-2020-6111An exploitable denial-of-service vulnerability exists in the IPv4 functionality of Allen-Bradley MicroLogix 1100 Programmable Logic ControllAllen-Bradley
- CVE-2020-26246Authorization bypass in Pimcorepimcore
Medium, low and unrated 48
- CVE-2020-16123Bypass of snapd pulseaudio restrictionsCanonical pulseaudio
- CVE-2018-21270Versions less than 0.0.6 of the Node.js stringstream module are vulnerable to an out-of-bounds read because of allocation of uninitialized bstringstream
- CVE-2020-26248Blind SQL injection during the CommentGrade processPrestaShop productcomments · prestashop/productcomments
- CVE-2020-29534An issue was discovered in the Linux kernel before 5.9.3.
- CVE-2020-29529HashiCorp go-slug up to 0.4.3 did not fully protect against directory traversal while unpacking tar archives, and protections could be bypasgithub.com/hashicorp/go-slug
- CVE-2020-23736There is a local denial of service vulnerability in DaDa accelerator 5.6.19.816,, attackers can use constructed programs to cause computer c
- CVE-2020-23738There is a local denial of service vulnerability in Advanced SystemCare 13 PRO 13.5.0.174.
- CVE-2020-17527Apache Tomcat: Request header mix-up between HTTP/2 streamsApache Software Foundation Apache Tomcat · tomcat +1
- CVE-2020-23741In AnyView (network police) network monitoring software 4.6.0.1, there is a local denial of service vulnerability in AnyView, attackers can
- CVE-2020-23740In DriverGenius 9.61.5480.28 there is a local privilege escalation vulnerability in the driver wizard, attackers can use constructed program
- CVE-2020-28175There is a local privilege escalation vulnerability in Alfredo Milani Comparetti SpeedFan 4.52.
- CVE-2020-23727There is a local denial of service vulnerability in the Antiy Zhijia Terminal Defense System 5.0.2.10121559 and an attacker can cause a comp
- CVE-2020-23726There is a local denial of service vulnerability in Wise Care 365 5.5.4, attackers can cause computer crash (BSOD).
- CVE-2020-13525The sort parameter in the download page /sysworkflow/en/neoclassic/reportTables/reportTables_Ajax is vulnerable to SQL injection in ProcessMProcessMaker
- CVE-2020-13524An out-of-bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 uses SPECS data from binary USD files.Pixar
- CVE-2020-23735In Saibo Cyber Game Accelerator 3.7.9 there is a local privilege escalation vulnerability.
- CVE-2020-25693A flaw was found in CImg in versions prior to 2.9.3.CImg
- CVE-2020-28251NETSCOUT AirMagnet Enterprise 11.1.4 build 37257 and earlier has a sensor escalated privileges vulnerability that can be exploited to provid
- CVE-2020-27778A flaw was found in Poppler in the way certain PDF files were converted into HTML.poppler
- CVE-2020-14351A flaw was found in the Linux kernel.kernel
- CVE-2020-27783A XSS vulnerability was discovered in python-lxml's clean module.python-lxml · lxml
- CVE-2020-28923An issue was discovered in Play Framework 2.8.0 through 2.8.4.com.typesafe.play:play
- CVE-2020-25649A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly.jackson-databind · com.fasterxml.jackson.core:jackson-datab…
- CVE-2020-28939OpenClinic version 0.8.2 is affected by a medical/test_new.php insecure file upload vulnerability.
- CVE-2020-28938OpenClinic version 0.8.2 is affected by a stored XSS vulnerability in lib/Check.php that allows users of the application to force actions on
- CVE-2020-2323Jenkins Chaos Monkey Plugin 0.4 and earlier does not perform permission checks in an HTTP endpoint, allowing attackers with Overall/Read perJenkins project Jenkins Chaos Monkey Plugin · io.jenkins.pl…
- CVE-2020-2324Jenkins CVS Plugin 2.16 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.Jenkins project Jenkins CVS Plugin · org.jenkins-ci.plugins…
- CVE-2020-2320Jenkins Plugin Installation Manager Tool 2.1.3 and earlier does not verify plugin downloads.Jenkins project Jenkins Plugin Installation Manager Tool ·…
- CVE-2020-2321A cross-site request forgery (CSRF) vulnerability in Jenkins Shelve Project Plugin 3.0 and earlier allows attackers to shelve, unshelve, or Jenkins project Jenkins Shelve Project Plugin · org.jenkins…
- CVE-2020-2322Jenkins Chaos Monkey Plugin 0.3 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/ReJenkins project Jenkins Chaos Monkey Plugin · io.jenkins.pl…
- CVE-2020-28937OpenClinic version 0.8.2 is affected by a missing authentication vulnerability that allows unauthenticated users to access any patient's med
- CVE-2020-6017Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long unreliable segments in function SNP_ReceiveUnreliableSegmentGame Networking Sockets
- CVE-2020-6021Check Point Endpoint Security Client for Windows before version E84.20 allows write access to the directory from which the installation repaCheck Point Endpoint Security Client for Windows
- CVE-2020-5680Improper input validation vulnerability in EC-CUBE versions from 3.0.5 to 3.0.18 allows a remote attacker to cause a denial-of-service (DoS)EC-CUBE CO. EC-CUBE · ec-cube/ec-cube
- CVE-2020-5677Reflected cross-site scripting vulnerability in GROWI v4.0.0 and earlier allows remote attackers to inject arbitrary script via unspecified WESEEK GROWI
- CVE-2020-5678Stored cross-site scripting vulnerability in GROWI v3.8.1 and earlier allows remote attackers to inject arbitrary script via unspecified vecWESEEK GROWI
- CVE-2020-5679Improper restriction of rendered UI layers or frames in EC-CUBE versions from 3.0.0 to 3.0.18 leads to clickjacking attacks.EC-CUBE CO. EC-CUBE · ec-cube/ec-cube
- CVE-2020-5638Cross-site scripting vulnerability in desknet's NEO (desknet's NEO Small License V5.5 R1.5 and earlier, and desknet's NEO Enterprise LicenseNEOJAPAN desknet's NEO
- CVE-2020-5676GROWI v4.1.3 and earlier allow remote attackers to obtain information which is not allowed to access via unspecified vectors.WESEEK GROWI
- CVE-2020-14318A flaw was found in the way samba handled file and directory permissions.samba
- CVE-2020-14339A flaw was found in libvirt, where it leaked a file descriptor for `/dev/mapper/control` into the QEMU process.libvirt
- CVE-2020-25711A flaw was found in infinispan 10 REST API, where authorization permissions are not checked while performing some server management operatioinfinispan · org.infinispan:infinispan-core
- CVE-2020-27759In IntensityCompare() of /MagickCore/quantize.c, a double value was being casted to int and returned, which in some cases caused a value outImageMagick
- CVE-2020-27760In `GammaImage()` of /MagickCore/enhance.c, depending on the `gamma` value, it's possible to trigger a divide-by-zero condition when a craftImageMagick
- CVE-2020-27761WritePALMImage() in /coders/palm.c used size_t casts in several areas of a calculation which could lead to values outside the range of repreImageMagick
- CVE-2020-27762A flaw was found in ImageMagick in coders/hdr.c.ImageMagick
- CVE-2020-27763A flaw was found in ImageMagick in MagickCore/resize.c.ImageMagick
- CVE-2020-27764In /MagickCore/statistic.c, there are several areas in ApplyEvaluateOperator() where a size_t cast should have been a ssize_t cast, which caImageMagick