CVEs published December 14, 2020
90 CVEs were published on December 14, 2020: 3 critical, 8 high.
- Published
- 90
- Critical
- 3
- High
- 8
- Medium
- 2
- Low
- 1
- Unrated
- 76
- Now in CISA KEV
- 0
- Fix available
- 8
Most affected products
- Android
- 19
- Siemens XHQ
- 7
- https://github.com/curl/curl
- 6
- Siemens LOGO! 8 BM
- 6
- Gallagher Command Centre
- 3
- Medtronic Smart Model 25000 Patient Reader
- 3
- NEC Aterm SA3500G
- 3
- Apache Software Foundation Apache Airflow · apache-airflow
- 2
- Citrix Gateway Plug-in for Windows
- 2
- GE Healthcare Imaging and Ultrasound Products
- 2
Critical 3
- CVE-2020-29509The encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace prefixes during tokenization Golang Go · github.com/russellhaering/gosaml2
- CVE-2020-29511The encoding/xml package in Go (all versions) does not correctly preserve the semantics of element namespace prefixes during tokenization roGolang Go
- CVE-2020-29510The encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the semantics of directives during tokenization round-tGolang Go
High 8
- CVE-2020-8177curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a locahttps://github.com/curl/curl
- CVE-2020-8285curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.https://github.com/curl/curl
- CVE-2020-16103Type confusion in Gallagher Command Centre Server allows a remote attacker to crash the server or possibly cause remote code execution.Gallagher Command Centre
- CVE-2020-16102Improper Authentication vulnerability in Gallagher Command Centre Server allows an unauthenticated remote attacker to create items with invaGallagher Command Centre
- CVE-2020-16104SQL Injection vulnerability in Enterprise Data Interface of Gallagher Command Centre allows a remote attacker with 'Edit Enterprise Data IntGallagher Command Centre
- CVE-2020-27252Medtronic MyCareLink Smart Time-of-check Time-of-use Race ConditionMedtronic Smart Model 25000 Patient Reader
- CVE-2020-25187Medtronic MyCareLink Smart Heap-based Buffer OverflowMedtronic Smart Model 25000 Patient Reader
- CVE-2020-25183Medtronic MyCareLink Smart Improper AuthenticationMedtronic Smart Model 25000 Patient Reader
Medium, low and unrated 79
- CVE-2020-35460common/InputStreamHelper.java in Packwood MPXJ before 8.3.5 allows directory traversal in the zip stream handler flow, leading to the writinnet.sf.mpxj:mpxj
- CVE-2020-35457GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in g_option_group_add_entries.
- CVE-2020-0019In the Broadcom Nexus firmware, there is an insecure default password.Android
- CVE-2020-0016In the Broadcom Nexus firmware, there is an insecure default password.Android
- CVE-2020-0456There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-170378843Android
- CVE-2020-0455There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-170372514Android
- CVE-2020-0457There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-170367562Android
- CVE-2020-0463In sdp_server_handle_client_req of sdp_server.cc, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2020-0469In addEscrowToken of LockSettingsService.java, there is a possible loss of the synthetic password due to logic error.Android
- CVE-2020-0467In onUserStopped of Vpn.java, there is a possible resetting of user preferences due to a logic issue.Android
- CVE-2020-0470In extend_frame_highbd of restoration.c, there is a possible out of bounds write due to a heap buffer overflow.Android
- CVE-2020-0460In createNameCredentialDialog of CertInstaller.java, there exists the possibility of improperly installed certificates due to a logic error.Android
- CVE-2020-0465In various methods of hid-multitouch.c, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2020-0440In createVirtualDisplay of DisplayManagerService.java, there is a possible way to create a trusted virtual display due to a missing permissiAndroid
- CVE-2020-0458In SPDIFEncoder::writeBurstBufferBytes and related methods of SPDIFEncoder.cpp, there is a possible out of bounds write due to an integer ovAndroid
- CVE-2020-0459In sendConfiguredNetworkChangedBroadcast of WifiConfigManager.java, there is a possible leak of sensitive WiFi configuration data due to a mAndroid
- CVE-2020-0468In listen() and related functions of TelephonyRegistry.java, there is a possible permissions bypass of location permissions due to a missingAndroid
- CVE-2020-0444In audit_free_lsm_field of auditfilter.c, there is a possible bad kfree due to a logic error in audit_data_to_entry.Android
- CVE-2020-0464In resolv_cache_lookup of res_cache.cpp, there is a possible side channel information disclosure.Android
- CVE-2020-0466In do_epoll_ctl and ep_loop_check_proc of eventpoll.c, there is a possible use after free due to a logic error.Android
- CVE-2020-0099In addWindow of WindowManagerService.java, there is a possible window overlay attack due to an insecure default value.Android
- CVE-2020-25232A vulnerability has been identified in LOGO! 8 BM (incl.Siemens LOGO! 8 BM
- CVE-2020-25233A vulnerability has been identified in LOGO! 8 BM (incl.Siemens LOGO! 8 BM
- CVE-2020-25234A vulnerability has been identified in LOGO! 8 BM (incl.Siemens LOGO! 8 BM · Siemens LOGO! Soft Comfort
- CVE-2020-25235A vulnerability has been identified in LOGO! 8 BM (incl.Siemens LOGO! 8 BM
- CVE-2020-28396A vulnerability has been identified in SICAM A8000 CP-8000 (All versions < V16), SICAM A8000 CP-8021 (All versions < V16), SICAM A8000 CP-80Siemens SICAM A8000 CP-8000 · Siemens SICAM A8000 CP-8021 +1
- CVE-2019-19288A vulnerability has been identified in XHQ (All Versions < 6.1).Siemens XHQ
- CVE-2019-19289A vulnerability has been identified in XHQ (All Versions < 6.1).Siemens XHQ
- CVE-2020-15796A vulnerability has been identified in SIMATIC ET 200SP Open Controller (incl.Siemens SIMATIC ET 200SP Open Controller · Siemens SIMATIC…
- CVE-2020-25228A vulnerability has been identified in LOGO! 8 BM (incl.Siemens LOGO! 8 BM
- CVE-2020-25229A vulnerability has been identified in LOGO! 8 BM (incl.Siemens LOGO! 8 BM
- CVE-2020-25230A vulnerability has been identified in LOGO! 8 BM (incl.Siemens LOGO! 8 BM
- CVE-2020-25231A vulnerability has been identified in LOGO! 8 BM (incl.Siemens LOGO! 8 BM · Siemens LOGO! Soft Comfort
- CVE-2019-19283A vulnerability has been identified in XHQ (All Versions < 6.1).Siemens XHQ
- CVE-2019-19284A vulnerability has been identified in XHQ (All Versions < 6.1).Siemens XHQ
- CVE-2019-19285A vulnerability has been identified in XHQ (All Versions < 6.1).Siemens XHQ
- CVE-2019-19286A vulnerability has been identified in XHQ (All Versions < 6.1).Siemens XHQ
- CVE-2019-19287A vulnerability has been identified in XHQ (All Versions < 6.1).Siemens XHQ
- CVE-2020-20189SQL Injection vulnerability in NewPK 1.1 via the title parameter to admin\newpost.php.
- CVE-2020-14368A flaw was found in Eclipse Che in versions prior to 7.14.0 that impacts CodeReady Workspaces.eclipse
- CVE-2020-20184GateOne allows remote attackers to execute arbitrary commands via shell metacharacters in the port field when attempting an SSH connection.
- CVE-2020-29304A cross-site scripting (XSS) vulnerability exists in the SabaiApps WordPress Directories Pro plugin version 1.3.45 and previous, allows atta
- CVE-2020-29303A cross-site scripting (XSS) vulnerability in the SabaiApp Directories Pro plugin 1.3.45 for WordPress allows remote attackers to inject arb
- CVE-2020-20183Insecure direct object reference vulnerability in Zyxel’s P1302-T10 v3 with firmware version 2.00(ABBX.3) and earlier allows attackers to ga
- CVE-2020-8258Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-61.48 and 12.1-58.15Citrix Gateway Plug-in for Windows
- CVE-2020-8257Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-61.48 and 12.1-58.15Citrix Gateway Plug-in for Windows
- CVE-2020-8169curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over thhttps://github.com/curl/curl
- CVE-2020-8282A security issue was found in EdgePower 24V/54V firmware v1.7.0 and earlier where, due to missing CSRF protections, an attacker would have bEdgePower
- CVE-2020-8283An authorised user on a Windows host running Citrix Universal Print Server can perform arbitrary command execution as SYSTEM in CVAD versionCitrix Virtual Apps and Desktops
- CVE-2020-8286curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP responhttps://github.com/curl/curl
- CVE-2020-8231Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data.https://github.com/curl/curl
- CVE-2020-8284A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and thttps://github.com/curl/curl
- CVE-2020-28861OpenAsset Digital Asset Management (DAM) 12.0.19 and earlier failed to implement access controls on /Stream/ProjectsCSV endpoint, allowing u
- CVE-2020-28860OpenAssetDigital Asset Management (DAM) through 12.0.19 does not correctly sanitize user supplied input, incorporating it into its SQL queri
- CVE-2020-28859OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly sanitize user supplied input in multiple parameters and endpoint
- CVE-2020-28858OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly verify whether a request made to the application was intentional
- CVE-2020-28857OpenAsset Digital Asset Management (DAM) through 12.0.19, does not correctly sanitize user supplied input in multiple parameters and endpoin
- CVE-2020-20136QuantConnect Lean versions from 2.3.0.0 to 2.4.0.1 are affected by an insecure deserialization vulnerability due to insecure configuration oQuantConnect.Common
- CVE-2020-28856OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly determine the HTTP request's originating IP address, allowing at
- CVE-2020-15733URL Spoofing Vulnerability in Bitdefender SafePay (VA-8958)Bitdefender Antivirus Plus
- CVE-2020-35338The Web Administrative Interface in Mobile Viewpoint Wireless Multiplex Terminal (WMT) Playout Server 20.2.8 and earlier has a default accou
- CVE-2020-25175GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network.GE Healthcare Imaging and Ultrasound Products
- CVE-2020-25179GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network.GE Healthcare Imaging and Ultrasound Products
- CVE-2020-35382SQL Injection in Classbooking before 2.4.1 via the username field of a CSV file when adding a new user.
- CVE-2020-14268A vulnerability in the MIME message handling of the Notes client (versions 9 and 10) could potentially be exploited by an unauthenticated atHCL Notes
- CVE-2020-35378SQL Injection in the login page in Online Bus Ticket Reservation 1.0 allows attackers to execute arbitrary SQL commands and bypass authentic
- CVE-2020-14244A vulnerability in the MIME message handling of the Domino server (versions 9 and 10) could potentially be exploited by an unauthenticated aHCL Domino
- CVE-2020-29227An issue was discovered in Car Rental Management System 1.0.
- CVE-2020-17511In Airflow versions prior to 1.10.13, when creating a user using airflow CLI, the password gets logged in plain text in the Log table in AirApache Software Foundation Apache Airflow · apache-airflow
- CVE-2020-17513In Apache Airflow versions prior to 1.10.13, the Charts and Query View of the old (Flask-admin based) UI were vulnerable for SSRF attack.Apache Software Foundation Apache Airflow · apache-airflow
- CVE-2020-35236The GitLab Webhook Handler in amazee.io Lagoon before 1.12.3 has incorrect access control associated with project deletion.
- CVE-2020-5639Directory traversal vulnerability in FileZen versions from V3.0.0 to V4.2.2 allows remote attackers to upload an arbitrary file in a specifiSoliton Systems K.K. FileZen
- CVE-2020-5665Improper check or handling of exceptional conditions in MELSEC iQ-F series FX5U(C) CPU unit firmware version 1.060 and earlier allows an attMitsubishi Electric MELSEC iQ-F series FX5U(C) CPU unit
- CVE-2020-5637Improper validation of integrity check value vulnerability in Aterm SA3500G firmware versions prior to Ver.NEC Aterm SA3500G
- CVE-2020-5635Aterm SA3500G firmware versions prior to Ver.NEC Aterm SA3500G
- CVE-2020-5636Aterm SA3500G firmware versions prior to Ver.NEC Aterm SA3500G
- CVE-2020-35234The easy-wp-smtp plugin before 1.4.4 for WordPress allows Administrator account takeover, as exploited in the wild in December 2020.
- CVE-2020-35235vendor/elfinder/php/connector.minimal.php in the secure-file-manager plugin through 2.5 for WordPress loads elFinder code without proper acc
- CVE-2020-29669In the Macally WIFISD2-2A82 Media and Travel Router 2.000.010, the Guest user is able to reset its own password.