CVEs published December 20, 2020
2 CVEs were published on December 20, 2020: 0 critical, 0 high.
- Published
- 2
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 2
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 2
- CVE-2020-35579tindy2013 subconverter 0.6.4 has a /sub?target=%TARGET%&url=%URL%&config=%CONFIG% API endpoint that accepts an arbitrary %URL% value and lau
- CVE-2020-35573srs2.c in PostSRSd before 1.10 allows remote attackers to cause a denial of service (CPU consumption) via a long timestamp tag in an SRS add