Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: December 2020

74 records · 9 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2020-8539
    40Plan

    Kia Motors Head Unit with Software version: SOP.003.30.18.0703, SOP.005.7.181019, and SOP.007.1.191209 may allow an attacker to inject unaut

    HighCVSS 7.8WeaponizedEPSS 2%

    kia · head unit firmwareDec 1, 2020

  • CVE-2020-29279
    55Plan

    PHP remote file inclusion in the assign_resume_tpl method in Application/Common/Controller/BaseController.class.php in 74CMS before 6.0.48 a

    CriticalCVSS 9.8Proof of conceptEPSS 52%

    74cms · 74cmsDec 2, 2020

  • CVE-2020-26248
    36Monitor

    Blind SQL injection during the CommentGrade process

    HighCVSS 8.2Proof of conceptEPSS 12%

    prestashop · productcommentsDec 3, 2020

  • CVE-2020-25649
    35Monitor

    A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly.

    HighCVSS 7.5No exploitEPSS 17%

    fasterxml · jackson-databindDec 3, 2020

  • CVE-2020-17527
    37Monitor

    Apache Tomcat: Request header mix-up between HTTP/2 streams

    HighCVSS 7.5Proof of conceptEPSS 24%

    apache · tomcatDec 3, 2020

  • CVE-2020-13945
    48Plan

    In Apache APISIX, the user enabled the Admin API and deleted the Admin API access IP restriction rules.

    MediumCVSS 6.5WeaponizedEPSS 72%

    apache · apisixDec 7, 2020

  • CVE-2020-29597
    60This week

    IncomCMS 2.0 has a modules/uploader/showcase/script.php insecure file upload vulnerability.

    CriticalCVSS 9.8Proof of conceptEPSS 71%

    incomcms project · incomcmsDec 7, 2020

  • CVE-2020-27930
    68This week

    A memory corruption issue was addressed with improved input validation.

    HighCVSS 7.8KEVWeaponizedEPSS 22%

    apple · ipadosDec 8, 2020

  • CVE-2020-27932
    64This week

    A type confusion issue was addressed with improved state handling.

    HighCVSS 7.8KEVWeaponizedEPSS 10%

    apple · icloudDec 8, 2020

  • CVE-2020-27950
    57Plan

    A memory initialization issue was addressed.

    MediumCVSS 5.5KEVWeaponizedEPSS 16%

    apple · ipadosDec 8, 2020

  • CVE-2020-26950
    60This week

    In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an exploitable use-after-free condi

    HighCVSS 8.8WeaponizedEPSS 42%

    mozilla · firefoxDec 8, 2020

  • CVE-2020-17096
    36Monitor

    Windows NTFS Remote Code Execution Vulnerability

    HighCVSS 7.5No exploitEPSS 19%

    microsoft · windows 10Dec 9, 2020

  • CVE-2020-17103
    35Monitor

    Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

    HighCVSS 7.0Proof of conceptEPSS 22%

    microsoft · windows 10Dec 9, 2020

  • CVE-2020-17117
    41Plan

    Microsoft Exchange Remote Code Execution Vulnerability

    MediumCVSS 6.6No exploitEPSS 48%

    microsoft · exchange serverDec 9, 2020

  • CVE-2020-17132
    63This week

    Microsoft Exchange Remote Code Execution Vulnerability

    CriticalCVSS 9.1WeaponizedEPSS 89%

    microsoft · exchange serverDec 9, 2020

  • CVE-2020-17136
    40Plan

    Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

    HighCVSS 7.8WeaponizedEPSS 13%

    microsoft · windows 10Dec 9, 2020

  • CVE-2020-17140
    37Monitor

    Windows SMB Information Disclosure Vulnerability

    HighCVSS 8.1No exploitEPSS 15%

    microsoft · windows 10Dec 9, 2020

  • CVE-2020-17143
    56Plan

    Microsoft Exchange Server Information Disclosure Vulnerability

    HighCVSS 8.8No exploitEPSS 70%

    microsoft · exchange serverDec 9, 2020

  • CVE-2020-17144
    74This week

    Microsoft Exchange Remote Code Execution Vulnerability

    HighCVSS 8.4KEVWeaponizedEPSS 36%

    microsoft · exchange serverDec 9, 2020

  • CVE-2020-17530
    98Now

    Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution.

    CriticalCVSS 9.8KEVWeaponizedEPSS 95%

    apache · strutsDec 10, 2020

  • CVE-2020-26413
    31Monitor

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4 before 13.6.2.

    MediumCVSS 5.3Proof of conceptEPSS 34%

    gitlab · gitlabDec 11, 2020

  • CVE-2020-17515
    29Monitor

    The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit.

    MediumCVSS 6.1No exploitEPSS 16%

    apache · airflowDec 11, 2020

  • CVE-2020-29574
    70This week

    An SQL injection vulnerability in the WebAdmin of Cyberoam OS through 2020-12-04 allows unauthenticated attackers to execute arbitrary SQL s

    CriticalCVSS 9.8KEVWeaponizedEPSS 4%

    sophos · cyberoamosDec 11, 2020

  • CVE-2020-17438
    45Plan

    An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products.

    CriticalCVSS 9.8No exploitEPSS 19%

    uip project · uipDec 11, 2020

  • CVE-2020-24336
    57Plan

    An issue was discovered in Contiki through 3.0 and Contiki-NG through 4.5.

    CriticalCVSS 9.8No exploitEPSS 59%

    contiki-ng · contiki-ngDec 11, 2020

  • CVE-2020-24338
    50Plan

    An issue was discovered in picoTCP through 1.7.0.

    CriticalCVSS 9.8No exploitEPSS 37%

    altran · picotcpDec 11, 2020

  • CVE-2020-25107
    55Plan

    An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1.

    CriticalCVSS 9.8No exploitEPSS 53%

    ethernut · nut\/osDec 11, 2020

  • CVE-2020-25108
    55Plan

    An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1.

    CriticalCVSS 9.8No exploitEPSS 53%

    ethernut · nut\/osDec 11, 2020

  • CVE-2020-25109
    55Plan

    An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1.

    CriticalCVSS 9.8No exploitEPSS 53%

    ethernut · nut\/osDec 11, 2020

  • CVE-2020-25110
    55Plan

    An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1.

    CriticalCVSS 9.8No exploitEPSS 53%

    ethernut · nut\/osDec 11, 2020

  • CVE-2020-25111
    45Plan

    An issue was discovered in the IPv6 stack in Contiki through 3.0.

    CriticalCVSS 9.8No exploitEPSS 20%

    contiki-os · contiki-osDec 11, 2020

  • CVE-2020-25112
    47Plan

    An issue was discovered in the IPv6 stack in Contiki through 3.0.

    CriticalCVSS 9.8No exploitEPSS 27%

    contiki-os · contiki-osDec 11, 2020

  • CVE-2020-35234
    60This week

    The easy-wp-smtp plugin before 1.4.4 for WordPress allows Administrator account takeover, as exploited in the wild in December 2020.

    HighCVSS 7.5WeaponizedEPSS 60%

    wp-ecommerce · easy wp smtpDec 13, 2020

  • CVE-2020-35235
    40Plan

    vendor/elfinder/php/connector.minimal.php in the secure-file-manager plugin through 2.5 for WordPress loads elFinder code without proper acc

    HighCVSS 8.8No exploitEPSS 18%

    themexa · secure file managerDec 13, 2020

  • CVE-2020-29227
    44Plan

    An issue was discovered in Car Rental Management System 1.0.

    CriticalCVSS 9.8Proof of conceptEPSS 16%

    car rental management system project · car rental management systemDec 14, 2020

  • CVE-2020-35338
    42Plan

    The Web Administrative Interface in Mobile Viewpoint Wireless Multiplex Terminal (WMT) Playout Server 20.2.8 and earlier has a default accou

    CriticalCVSS 9.8Proof of conceptEPSS 11%

    mobileviewpoint · wireless multiplex terminal playout serverDec 14, 2020

  • CVE-2020-10770
    42Plan

    A flaw was found in Keycloak before 13.0.0, where it is possible to force the server to call out an unverified URL using the OIDC parameter

    MediumCVSS 5.3Proof of conceptEPSS 69%

    redhat · keycloakDec 15, 2020

  • CVE-2020-26258
    55Plan

    Server-Side Forgery Request can be activated unmarshalling with XStream

    HighCVSS 7.7Proof of conceptEPSS 81%

    xstream · xstreamDec 16, 2020

  • CVE-2020-26259
    52Plan

    XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling

    MediumCVSS 6.8Proof of conceptEPSS 82%

    xstream · xstreamDec 16, 2020

  • CVE-2020-35476
    65This week

    A remote code execution vulnerability occurs in OpenTSDB through 2.4.0 via command injection in the yrange parameter.

    CriticalCVSS 9.8WeaponizedEPSS 85%

    opentsdb · opentsdbDec 16, 2020

  • CVE-2020-29607
    38Monitor

    A file upload restriction bypass vulnerability in Pluck CMS before 4.7.13 allows an admin privileged user to gain access in the host through

    HighCVSS 7.2Proof of conceptEPSS 33%

    pluck-cms · pluckDec 16, 2020

  • CVE-2020-35489
    67This week

    The contact-form-7 (aka Contact Form 7) plugin before 5.3.2 for WordPress allows Unrestricted File Upload and remote code execution because

    CriticalCVSS 10.0Proof of conceptEPSS 89%

    rocklobster · contact form 7Dec 17, 2020

  • CVE-2020-8466
    58Plan

    A command injection vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2, with the improved password hashing method

    CriticalCVSS 9.8No exploitEPSS 64%

    trendmicro · interscan web security virtual applianceDec 17, 2020

  • CVE-2020-25494
    51Plan

    Xinuos (formerly SCO) Openserver v5 and v6 allows attackers to execute arbitrary commands via shell metacharacters in outputform or toclevel

    CriticalCVSS 9.8Proof of conceptEPSS 39%

    xinuos · openserverDec 18, 2020

  • CVE-2020-20277
    47Plan

    There are multiple unauthenticated directory traversal vulnerabilities in different FTP commands in uftpd FTP server versions 2.7 to 2.10 du

    CriticalCVSS 9.8Proof of conceptEPSS 26%

    troglobit · uftpdDec 18, 2020

  • CVE-2020-7200
    64This week

    A potential security vulnerability has been identified in HPE Systems Insight Manager (SIM) version 7.6.

    CriticalCVSS 9.8WeaponizedEPSS 81%

    hp · systems insight managerDec 18, 2020

  • CVE-2020-17526
    37Monitor

    Incorrect Session Validation in Apache Airflow Webserver versions prior to 1.10.14 with default config allows a malicious airflow user on si

    HighCVSS 7.7Proof of conceptEPSS 23%

    apache · airflowDec 21, 2020

  • CVE-2020-35606
    43Plan

    Arbitrary command execution can occur in Webmin through 1.962.

    HighCVSS 8.8Proof of conceptEPSS 28%

    webmin · webminDec 21, 2020

  • CVE-2018-15641
    21Monitor

    Cross-site scripting (XSS) issue in web module in Odoo Community 11.0 through 14.0 and Odoo Enterprise 11.0 through 14.0, allows remote auth

    MediumCVSS 5.4No exploitEPSS 0%

    odoo · odooDec 22, 2020

  • CVE-2020-13557
    56Plan

    A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527.

    HighCVSS 8.8No exploitEPSS 70%

    foxitsoftware · foxit readerDec 22, 2020

  • CVE-2020-24581
    36Monitor

    An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55.

    HighCVSS 8.0No exploitEPSS 13%

    dlink · dsl2888a firmwareDec 22, 2020

  • CVE-2020-29583
    96Now

    Firmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an unchangeable password.

    CriticalCVSS 9.8KEVWeaponizedEPSS 90%

    zyxel · usg20-vpn firmwareDec 22, 2020

  • CVE-2020-28070
    46Plan

    SourceCodester Alumni Management System 1.0 is affected by SQL injection causing arbitrary remote code execution from GET input in view_even

    CriticalCVSS 9.8No exploitEPSS 22%

    alumni management system project · alumni management systemDec 23, 2020

  • CVE-2020-35598
    36Monitor

    ACS Advanced Comment System 1.0 is affected by Directory Traversal via an advanced_component_system/index.php?ACS_path=..%2f URI.

    HighCVSS 7.5Proof of conceptEPSS 20%

    advanced comment system project · advanced comment systemDec 23, 2020

  • CVE-2020-35665
    63This week

    An unauthenticated command-execution vulnerability exists in TerraMaster TOS through 4.2.06 via shell metacharacters in the Event parameter

    CriticalCVSS 9.8WeaponizedEPSS 78%

    terra-master · terramaster operating systemDec 23, 2020

  • CVE-2020-28185
    26Monitor

    User Enumeration vulnerability in TerraMaster TOS <= 4.2.06 allows remote unauthenticated attackers to identify valid users within the syste

    MediumCVSS 5.3Proof of conceptEPSS 18%

    terra-master · tosDec 24, 2020

  • CVE-2020-28187
    44Plan

    Multiple directory traversal vulnerabilities in TerraMaster TOS <= 4.2.06 allow remote authenticated attackers to read, edit or delete any f

    CriticalCVSS 9.8No exploitEPSS 16%

    terra-master · tosDec 24, 2020

  • CVE-2020-28188
    68This week

    Remote Command Execution (RCE) vulnerability in TerraMaster TOS <= 4.2.06 allow remote unauthenticated attackers to inject OS commands via /

    CriticalCVSS 9.8WeaponizedEPSS 96%

    terra-master · tosDec 24, 2020

  • CVE-2020-35713
    49Plan

    Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to execute arbitrary commands or set a new password via shell metach

    CriticalCVSS 9.8Proof of conceptEPSS 32%

    linksys · re6500 firmwareDec 25, 2020

  • CVE-2020-35728
    36Monitor

    FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wl

    HighCVSS 8.1Proof of conceptEPSS 12%

    fasterxml · jackson-databindDec 27, 2020

  • CVE-2020-35729
    65This week

    KLog Server 2.4.1 allows OS command injection via shell metacharacters in the actions/authenticate.php user parameter.

    CriticalCVSS 9.8WeaponizedEPSS 88%

    klogserver · klog serverDec 27, 2020

  • CVE-2020-35736
    35Monitor

    GateOne 1.1 allows arbitrary file download without authentication via /downloads/..

    HighCVSS 7.5Proof of conceptEPSS 15%

    liftoffsoftware · gateoneDec 27, 2020

  • CVE-2020-35613
    48Plan

    [20201104] - Core - SQL injection in com_users list view

    CriticalCVSS 9.8No exploitEPSS 28%

    joomla · joomla\!Dec 28, 2020

  • CVE-2020-35730
    64This week

    An XSS issue was discovered in Roundcube Webmail before 1.2.13, 1.3.x before 1.3.16, and 1.4.x before 1.4.10.

    MediumCVSS 6.1KEVWeaponizedEPSS 32%

    roundcube · webmailDec 28, 2020

  • CVE-2020-5801
    39Monitor

    An attacker can craft and send an OpenNamespace message to port 4241 with valid session-id that triggers an unhandled exception in CFTLDMana

    HighCVSS 7.5No exploitEPSS 29%

    rockwellautomation · factorytalk linxDec 29, 2020

  • CVE-2020-5802
    43Plan

    An attacker-controlled memory allocation size can be passed to the C++ new operator in RnaDaSvr.dll by sending a specially crafted Configure

    HighCVSS 7.5No exploitEPSS 44%

    rockwellautomation · factorytalk linxDec 29, 2020

  • CVE-2020-5807
    42Plan

    An unauthenticated remote attacker can send data to RsvcHost.exe listening on TCP port 5241 to add entries in the FactoryTalk Diagnostics ev

    HighCVSS 7.5No exploitEPSS 39%

    rockwellautomation · factorytalk diagnosticsDec 29, 2020

  • CVE-2020-35774
    47Plan

    server/handler/HistogramQueryHandler.scala in Twitter TwitterServer (aka twitter-server) before 20.12.0, in some configurations, allows XSS

    MediumCVSS 5.4Proof of conceptEPSS 85%

    twitter · twitter-serverDec 29, 2020

  • CVE-2020-10148
    97Now

    SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands

    CriticalCVSS 9.8KEVWeaponizedEPSS 91%

    solarwinds · orion platformDec 29, 2020

  • CVE-2020-35846
    67This week

    Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php check function.

    CriticalCVSS 9.8WeaponizedEPSS 93%

    agentejo · cockpitDec 29, 2020

  • CVE-2020-35847
    68This week

    Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword function.

    CriticalCVSS 9.8WeaponizedEPSS 98%

    agentejo · cockpitDec 29, 2020

  • CVE-2020-35848
    61This week

    Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php newpassword function.

    CriticalCVSS 9.8Proof of conceptEPSS 74%

    agentejo · cockpitDec 29, 2020

  • CVE-2020-5810
    40Plan

    A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or current.

    MediumCVSS 5.4No exploitEPSS 61%

    umbraco · umbraco cmsDec 30, 2020

  • CVE-2020-35737
    33Monitor

    In Correspondence Management System (corms) in Newgen eGov 12.0, an attacker can modify other users' profile information by manipulating the

    HighCVSS 7.5Proof of conceptEPSS 10%

    newgensoft · egovDec 30, 2020