CVEs published December 4, 2020
25 CVEs were published on December 4, 2020: 0 critical, 0 high.
- Published
- 25
- Critical
- 0
- High
- 0
- Medium
- 2
- Low
- 0
- Unrated
- 23
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- ImageMagick
- 10
- cabot
- 1
- Canonical snapcraft · snapcraft
- 1
- horizon
- 1
- Kaspersky Anti-Ransomware Tool
- 1
- Mitsubishi Electric GT21 model of GOT2000 series, GS21 mode…
- 1
Medium, low and unrated 25
- CVE-2020-28950The installer of Kaspersky Anti-Ransomware Tool (KART) prior to KART 4.0 Patch C was vulnerable to a DLL hijacking attack that allowed an atKaspersky Anti-Ransomware Tool
- CVE-2020-25449Cross Site Scripting (XSS) vulnerability in Arachnys Cabot 0.11.12 can be exploited via the Address column.cabot
- CVE-2020-25464Heap buffer overflow at moddable/xs/sources/xsDebug.c in Moddable SDK before before 20200903.
- CVE-2020-25465Null Pointer Dereference.
- CVE-2020-25461Invalid Memory Access in the fxProxyGetter function in moddable/xs/sources/xsProxy.c in Moddable SDK before OS200908 causes a denial of serv
- CVE-2020-25462Heap buffer overflow in the fxCheckArrowFunction function at moddable/xs/sources/xsSyntaxical.c:3562 in Moddable SDK before OS200903.
- CVE-2020-25463Invalid Memory Access in fxUTF8Decode at moddable/xs/sources/xsCommon.c:916 in Moddable SDK before OS200908 causes a denial of service (SEGV
- CVE-2020-27408OpenSIS Community Edition through 7.6 is affected by incorrect access controls for the file ResetUserInfo.php that allow an unauthenticated
- CVE-2020-27409OpenSIS Community Edition before 7.5 is affected by a cross-site scripting (XSS) vulnerability in SideForStudent.php via the modname paramet
- CVE-2020-5675Out-of-bounds read vulnerability in GT21 model of GOT2000 series (GT2107-WTBD V01.39.000 and earlier, GT2107-WTSD V01.39.000 and earlier, GTMitsubishi Electric GT21 model of GOT2000 series, GS21 mode…
- CVE-2020-29565An issue was discovered in OpenStack Horizon before 15.3.2, 16.x before 16.2.1, 17.x and 18.x before 18.3.3, 18.4.x, and 18.5.x.horizon
- CVE-2020-29562The iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4 text containing an irreversible character, f
- CVE-2020-28916hw/net/e1000e_core.c in QEMU 5.0.0 has an infinite loop via an RX descriptor with a NULL buffer address.
- CVE-2020-29561An issue was discovered in SonicBOOM riscv-boom 3.0.0.
- CVE-2020-27348snapcraft may build snaps with incorrect LD_LIBRARY_PATHCanonical snapcraft · snapcraft
- CVE-2020-27765A flaw was found in ImageMagick in MagickCore/segment.c.ImageMagick
- CVE-2020-27766A flaw was found in ImageMagick in MagickCore/statistic.c.ImageMagick
- CVE-2020-27767A flaw was found in ImageMagick in MagickCore/quantum.h.ImageMagick
- CVE-2020-27770Due to a missing check for 0 value of `replace_extent`, it is possible for offset `p` to overflow in SubstituteString(), causing potential iImageMagick
- CVE-2020-27771In RestoreMSCWarning() of /coders/pdf.c there are several areas where calls to GetPixelIndex() could result in values outside the range of rImageMagick
- CVE-2020-27772A flaw was found in ImageMagick in coders/bmp.c.ImageMagick
- CVE-2020-27773A flaw was found in ImageMagick in MagickCore/gem-private.h.ImageMagick
- CVE-2020-27774A flaw was found in ImageMagick in MagickCore/statistic.c.ImageMagick
- CVE-2020-27775A flaw was found in ImageMagick in MagickCore/quantum.h.ImageMagick
- CVE-2020-27776A flaw was found in ImageMagick in MagickCore/statistic.c.ImageMagick