CVEs published December 11, 2020
120 CVEs were published on December 11, 2020: 10 critical, 9 high. 2 are now in CISA KEV.
- Published
- 120
- Critical
- 10
- High
- 9
- Medium
- 17
- Low
- 4
- Unrated
- 80
- Now in CISA KEV
- 2
- Fix available
- 15
Most affected products
- GitLab CE/EE
- 5
- Web Server on Modicon M340, Legacy Offers Modicon Quantum a…
- 5
- BIG-IP
- 4
- Cisco Jabber
- 4
- Easergy T300
- 4
- The Wireshark Foundation Wireshark
- 4
- Aruba 9000 Gateway · Aruba 7000 Series Mobility Controll… +1
- 3
- Modicon M580, Modicon M340, Legacy Controllers Modicon Quan…
- 3
- Brocade Fabric OS
- 2
- EIP Stack Group
- 2
Critical 10
- CVE-2020-28439Command Injectioncorenlp-js-prefab
- CVE-2020-28440Command Injectioncorenlp-js-interface
- CVE-2020-27134Cisco Jabber Desktop and Mobile Client Software VulnerabilitiesCisco Jabber
- CVE-2020-27133Cisco Jabber Desktop and Mobile Client Software VulnerabilitiesCisco Jabber
- CVE-2020-27132Cisco Jabber Desktop and Mobile Client Software VulnerabilitiesCisco Jabber
- CVE-2020-27127Cisco Jabber Desktop and Mobile Client Software VulnerabilitiesCisco Jabber
- CVE-2020-29574An SQL injection vulnerability in the WebAdmin of Cyberoam OS through 2020-12-04 allows unauthenticated attackers to execute arbitrary SQL s
- CVE-2020-13556An out-of-bounds write vulnerability exists in the Ethernet/IP server functionality of EIP Stack Group OpENer 2.3 and development commit 8c7EIP Stack Group
- CVE-2020-17530Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution.Apache Software Foundation Apache Struts · org.apache.strut…
- CVE-2020-28214A CWE-760: Use of a One-Way Hash with a Predictable Salt vulnerability exists in Modicon M221 (all references, all versions), that could allModicon M221
High 9
- CVE-2020-7791Denial of Service (DoS)i18n
- CVE-2020-7793Regular Expression Denial of Service (ReDoS)ua-parser-js
- CVE-2020-7792Prototype Pollutionmout
- CVE-2020-7788Prototype Pollutionini
- CVE-2020-13520An out of bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 reconstructs paths from binary USD files.Pixar
- CVE-2020-13530A denial-of-service vulnerability exists in the Ethernet/IP server functionality of the EIP Stack Group OpENer 2.3 and development commit 8cEIP Stack Group
- CVE-2020-24440Uncontrolled Search Path Element in Adobe Prelude for WindowsAdobe Prelude
- CVE-2020-24447Uncontrolled Search Path Element vulnerability in Lightroom Classic 10.0Adobe Lightroom
- CVE-2020-7549A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340, Legacy Offers ModicoWeb Server on Modicon M340, Legacy Offers Modicon Quantum a…
Medium, low and unrated 101
- CVE-2020-29563An issue was discovered on Western Digital My Cloud OS 5 devices before 5.07.118.
- CVE-2020-29654Western Digital Dashboard before 3.2.2.9 allows DLL Hijacking that leads to compromise of the SYSTEM account.
- CVE-2020-35176In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial absolute pathname (omitting the initial /etc), even though it was inten
- CVE-2020-25112An issue was discovered in the IPv6 stack in Contiki through 3.0.
- CVE-2020-25111An issue was discovered in the IPv6 stack in Contiki through 3.0.
- CVE-2020-25110An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1.
- CVE-2020-25109An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1.
- CVE-2020-25108An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1.
- CVE-2020-25107An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1.
- CVE-2020-24383An issue was discovered in FNET through 4.6.4.
- CVE-2020-24341An issue was discovered in picoTCP and picoTCP-NG through 1.7.0.
- CVE-2020-24340An issue was discovered in picoTCP and picoTCP-NG through 1.7.0.
- CVE-2020-24339An issue was discovered in picoTCP and picoTCP-NG through 1.7.0.
- CVE-2020-24338An issue was discovered in picoTCP through 1.7.0.
- CVE-2020-24337An issue was discovered in picoTCP and picoTCP-NG through 1.7.0.
- CVE-2020-24336An issue was discovered in Contiki through 3.0 and Contiki-NG through 4.5.
- CVE-2020-24334The code that processes DNS responses in uIP through 1.0, as used in Contiki and Contiki-NG, does not check whether the number of responses
- CVE-2020-17470An issue was discovered in FNET through 4.6.4.
- CVE-2020-17469An issue was discovered in FNET through 4.6.4.
- CVE-2020-17468An issue was discovered in FNET through 4.6.4.
- CVE-2020-17467An issue was discovered in FNET through 4.6.4.
- CVE-2020-17445An issue was discovered in picoTCP 1.7.0.
- CVE-2020-17444An issue was discovered in picoTCP 1.7.0.
- CVE-2020-17443An issue was discovered in picoTCP 1.7.0.
- CVE-2020-17442An issue was discovered in picoTCP 1.7.0.
- CVE-2020-17441An issue was discovered in picoTCP 1.7.0.
- CVE-2020-17440An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products.
- CVE-2020-17439An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products.
- CVE-2020-17438An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products.
- CVE-2020-17437An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products.
- CVE-2020-35175Frappe Framework 12 and 13 does not properly validate the HTTP method for the frappe.client API.
- CVE-2020-13988An issue was discovered in Contiki through 3.0.
- CVE-2020-13987An issue was discovered in Contiki through 3.0.
- CVE-2020-13986An issue was discovered in Contiki through 3.0.
- CVE-2020-13985An issue was discovered in Contiki through 3.0.
- CVE-2020-13984An issue was discovered in Contiki through 3.0.
- CVE-2020-15375Brocade Fabric OS versions before v9.0.0, v8.2.2c, v8.2.1e, v8.1.2k, v8.2.0_CBN3, v7.4.2g contain an improper input validation weakness in tBrocade Fabric OS
- CVE-2020-15376Brocade Fabric OS versions before v9.0.0 and after version v8.1.0, configured in Virtual Fabric mode contain a weakness in the ldap implemenBrocade Fabric OS
- CVE-2020-29455A cross-Site Scripting (XSS) vulnerability in this.showInvalid and this.showInvalidCountry in SmartyStreets liveAddressPlugin.js 3.2 allows
- CVE-2020-27730In versions 3.0.0-3.9.0, 2.0.0-2.9.0, and 1.0.1, the NGINX Controller Agent does not use absolute paths when calling system utilities.NGINX Controller
- CVE-2020-19165PHPSHE 1.7 has SQL injection via the admin.php?mod=user&userlevel_id=1 userlevel_id[] parameter.
- CVE-2020-5949On BIG-IP versions 14.0.0-14.0.1 and 13.1.0-13.1.3.4, certain traffic pattern sent to a virtual server configured with an FTP profile can caBIG-IP
- CVE-2020-27713In certain configurations on version 13.1.3.4, when a BIG-IP AFM HTTP security profile is applied to a virtual server and the BIG-IP system BIG-IP
- CVE-2020-35149lib/utils.js in mquery before 3.2.3 allows a pollution attack because a special property (e.g., __proto__) can be copied during a merge or cmquery
- CVE-2020-5950On BIG-IP 14.1.0-14.1.2.6, undisclosed endpoints in iControl REST allow for a reflected XSS attack, which could lead to a complete compromisBIG-IP
- CVE-2020-5948On BIG-IP versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, undisclosed endBIG-IP
- CVE-2020-26418Memory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted captuThe Wireshark Foundation Wireshark
- CVE-2020-26421Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet The Wireshark Foundation Wireshark
- CVE-2020-26420Memory leak in RTPS protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capturThe Wireshark Foundation Wireshark
- CVE-2020-26419Memory leak in the dissection engine in Wireshark 3.4.0 allows denial of service via packet injection or crafted capture file.The Wireshark Foundation Wireshark
- CVE-2020-27825A use-after-free flaw was found in kernel/trace/ring_buffer.c in Linux kernel (before 5.10-rc1).kernel
- CVE-2020-26264LES Server DoS via GetProofsV2go-ethereum · github.com/ethereum/go-ethereum
- CVE-2020-26265Consensus flaw during block processinggo-ethereum · github.com/ethereum/go-ethereum
- CVE-2020-12148OS Command Injection - nslookup APISilver Peak Systems ECOS
- CVE-2020-15023Askey AP5100W devices through AP5100W_Dual_SIG_1.01.097 are affected by WPS PIN offline brute-force cracking.
- CVE-2020-12149OS Command Injection - Management File UploadSilver Peak Systems ECOS
- CVE-2020-15357Network Analysis functionality in Askey AP5100W_Dual_SIG_1.01.097 and all prior versions allows remote attackers to execute arbitrary comman
- CVE-2020-27508In two-factor authentication, the system also sending 2fa secret key in response, which enables an intruder to breach the 2fa security.
- CVE-2020-29254TikiWiki 21.2 allows templates to be edited without CSRF protection.
- CVE-2020-29591Versions of the Official registry Docker images through 2.7.0 contain a blank password for the root user.
- CVE-2020-4633IBM Resilient SOAR V38.0 could allow a remote attacker to execute arbitrary code on the system, caused by formula injection due to improper IBM Resilient
- CVE-2020-28838Cross Site Request Forgery (CSRF) in CART option in OpenCart Ltd.opencart/opencart
- CVE-2020-17515The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit.Apache Software Foundation Apache Airflow · apache-airflow
- CVE-2020-7790Arbitrary File Readspatie/browsershot
- CVE-2020-7789Command Injectionnode-notifier
- CVE-2020-35135The ultimate-category-excluder plugin before 1.2 for WordPress allows ultimate-category-excluder.php CSRF.
- CVE-2020-35132An XSS issue has been discovered in phpLDAPadmin before 1.2.6.2 that allows users to store malicious values that may be executed by other us
- CVE-2020-26411A potential DOS vulnerability was discovered in all versions of Gitlab starting from 13.4.x (>=13.4 to <13.4.7, >=13.5 to <13.5.5, and >=13.GitLab
- CVE-2020-35127Ignite Realtime Openfire 4.6.0 has plugins/bookmarks/create-bookmark.jsp Stored XSS.
- CVE-2020-27786A flaw was found in the Linux kernel’s implementation of MIDI, where an attacker with a local account and the permissions to issue ioctl comkernel
- CVE-2020-26408A limited information disclosure vulnerability exists in Gitlab CE/EE from >= 12.2 to <13.4.7, >=13.5 to <13.5.5, and >=13.6 to <13.6.2 thatGitLab CE/EE
- CVE-2020-35126Typesetter CMS 5.x through 5.1 allows admins to conduct Site Title persistent XSS attacks via an Admin/Configuration URI.
- CVE-2020-13357An issue was discovered in Gitlab CE/EE versions >= 13.1 to <13.4.7, >= 13.5 to <13.5.5, and >= 13.6 to <13.6.2 allowed an unauthorized userGitLab CE/EE
- CVE-2020-26412Removed group members were able to use the To-Do functionality to retrieve updated information on confidential epics starting in GitLab EE 1GitLab EE
- CVE-2020-26413An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4 before 13.6.2.GitLab CE/EE
- CVE-2020-26417Information disclosure via GraphQL in GitLab CE/EE 13.1 and later exposes private group and project membership.GitLab CE/EE
- CVE-2020-26416Information disclosure in Advanced Search component of GitLab EE starting from 8.4 results in exposure of search terms via Rails logs.GitLab EE
- CVE-2020-26415Information about the starred projects for private user profiles was exposed via the GraphQL API starting from 12.2 via the REST API.GitLab
- CVE-2020-27828There's a flaw in jasper's jpc encoder in versions prior to 2.0.23.jasper
- CVE-2020-9301Nolan Ray from Apple Information Security identified a security vulnerability in Spinnaker, all versions prior to version 1.23.4, 1.22.4 or Netflix Spinnaker
- CVE-2020-25191Incorrect permissions are set by default for an API entry-point of a specific service, allowing a non-authenticated user to trigger a functiCompactRIO
- CVE-2020-25838Unauthorized disclosure of sensitive information vulnerability in Micro Focus Filr product.Filr
- CVE-2020-24637Two vulnerabilities in ArubaOS GRUB2 implementation allows for an attacker to bypass secureboot.Aruba 9000 Gateway · Aruba 7000 Series Mobility Controll… +1
- CVE-2020-24633There are multiple buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending especially crafted paAruba 9000 Gateway · Aruba 7000 Series Mobility Controll… +1
- CVE-2020-24634An attacker is able to remotely inject arbitrary commands by sending especially crafted packets destined to the PAPI (Aruba Networks AP ManaAruba 9000 Gateway · Aruba 7000 Series Mobility Controll… +1
- CVE-2020-26409A DOS vulnerability exists in Gitlab CE/EE >=10.3, <13.4.7,>=13.5, <13.5.5,>=13.6, <13.6.2 that allows an attacker to trigger uncontrolled rGitLab CE/EE
- CVE-2020-7560A CWE-123: Write-what-where Condition vulnerability exists in EcoStruxure™ Control Expert (all versions) and Unity Pro (former name of EcoStEcoStruxure™ Control Expert (all versions) and Unity Pro (f…
- CVE-2020-7543A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers ModicModicon M580, Modicon M340, Legacy Controllers Modicon Quan…
- CVE-2020-7542A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers ModicModicon M580, Modicon M340, Legacy Controllers Modicon Quan…
- CVE-2020-7541A CWE-425: Direct Request ('Forced Browsing') vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and ModiWeb Server on Modicon M340, Legacy Offers Modicon Quantum a…
- CVE-2020-7540A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon QuantuWeb Server on Modicon M340, Legacy Offers Modicon Quantum a…
- CVE-2020-7539A CWE-754 Improper Check for Unusual or Exceptional Conditions vulnerability exists in the Web Server on Modicon M340, Legacy Offers ModiconWeb Server on Modicon M340, Legacy Offers Modicon Quantum a…
- CVE-2020-7537A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers ModicModicon M580, Modicon M340, Legacy Controllers Modicon Quan…
- CVE-2020-7535A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal' Vulnerability Type) vulnerability exists in the Web Web Server on Modicon M340, Legacy Offers Modicon Quantum a…
- CVE-2020-28220A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Modicon M258 Firmware (All versioModicon M258 Firmware (All versions prior to V5.0.4.11) and…
- CVE-2020-28219A CWE-522: Insufficiently Protected Credentials vulnerability exists in EcoStruxure Geo SCADA Expert 2019 (Original release and Monthly UpdaEcoStruxure Geo SCADA Expert 2019 (Original release and Mon…
- CVE-2020-28218A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists in Easergy T300 (firmware 2.7 and older), that would aEasergy T300
- CVE-2020-28217A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Easergy T300 (firmware 2.7 and older), that would allow an attacker Easergy T300
- CVE-2020-28216A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Easergy T300 (firmware 2.7 and older), that would allow an attacker Easergy T300
- CVE-2020-28215A CWE-862: Missing Authorization vulnerability exists in Easergy T300 (firmware 2.7 and older), that could cause a wide range of problems, iEasergy T300
- CVE-2020-7536A CWE-754:Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M340 CPUs (BMXP34* versions prior to V3.30) MModicon M340 CPUs (BMXP34* versions prior to V3.30) and Mod…