CVEs published in January 2021

1,871 vulnerabilities, 212 critical, 9 exploited.

• debian linux, linux kernel +1 more nbd_add_socket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndb_queue_rq use... CVE-2021-3348 Fix available 7.0 HighJanuary 31, 2021
• getadigital nested-object-assign Prototype Pollution CVE-2021-23329 Fix available 7.5 HighJanuary 31, 2021
• outer cgi project cgi Uninitialized memory access in outer_cgi CVE-2021-30454 Fix available 9.8 CriticalJanuary 31, 2021
• nano arena project arena Use after free in nano_arena CVE-2021-28032 Fix available 9.8 CriticalJanuary 31, 2021
• segv_handler openSUSE Security update for segv_handler openSUSE-SU-2021:0207-1 Fix available No scoreJanuary 30, 2021
• postscript project postscript Read on uninitialized buffer in postscript CVE-2021-26953 Fix available 7.5 HighJanuary 30, 2021
• segv_handler openSUSE Security update for segv_handler openSUSE-SU-2021:0198-1 Fix available No scoreJanuary 30, 2021
• madshi madcodehook, cisco advanced malware protection, morphisec unified threat prevention platform +2 more A TOCTOU vulnerability exists in madCodeHook before 2020-07-16 that allows local attackers to... CVE-2020-14418 7.0 HighJanuary 30, 2021
• nim-lang nim Security update for nim CVE-2020-15690 Fix available 9.8 CriticalJanuary 30, 2021
• terra-master tos TerraMaster TOS before 4.1.29 has Invalid Parameter Checking that leads to code injection as root... CVE-2020-15568 Public exploit EPSS 29.0% 9.8 CriticalJanuary 30, 2021
• cryptofuzz OSS-Fuzz Stack-buffer-overflow in kdf_sshkdf_set_ctx_params OSV-2021-257 Fix available No scoreJanuary 30, 2021
• htslib OSS-Fuzz Heap-buffer-overflow in safe_ltf8_get OSV-2021-251 Fix available No scoreJanuary 30, 2021
• libonig Debian libonig - regression update DLA-2431-2 Fix available No scoreJanuary 30, 2021
• ckeditor ckeditor5 Regular expression Denial of Service in Markdown plugin CVE-2021-21254 Fix available 6.5 MediumJanuary 29, 2021
• less-openui5 project less-openui5 Arbitrary code execution in less-openui5 CVE-2021-21316 Fix available 6.3 MediumJanuary 29, 2021
• socialiteproviders/steam Packagist Steam Socialite Provider v1 does not correctly validate openid server GHSA-hhw9-35p2-q2c5 Fix available No scoreJanuary 29, 2021
• d-link dir-825 r1 devices, dlink dir-825 r1 firmware +1 more An issue was discovered on D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20. A buffer... CVE-2020-29557 In KEV EPSS 55.7% 9.8 CriticalJanuary 29, 2021
• apache druid Authenticated users can override system configurations in their requests which allows them to execute arbitrary code. CVE-2021-25646 Public exploitFix available EPSS 99.1% 8.8 HighJanuary 29, 2021
• hitachi vantara pentaho The Analysis Report in Hitachi Vantara Pentaho through 7.x - 8.x contains a stored Cross-site... CVE-2020-24666 5.4 MediumJanuary 29, 2021
• hitachi vantara pentaho The dashboard Editor in Hitachi Vantara Pentaho through 7.x - 8.x contains a reflected Cross-site... CVE-2020-24664 5.4 MediumJanuary 29, 2021
• hitachi vantara pentaho The Dashboard Editor in Hitachi Vantara Pentaho through 7.x - 8.x contains a reflected Cross-site... CVE-2020-24670 5.4 MediumJanuary 29, 2021
• hpe cloudline cl3100 gen10 server firmware, cloudline cl4100 gen10 server firmware, cloudline cl5200 gen9 server firmware +2 more +4 more The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline... CVE-2021-25136 7.8 HighJanuary 29, 2021
• hitachi vantara pentaho The New Analysis Report in Hitachi Vantara Pentaho through 7.x - 8.x contains a DOM-based Cross... CVE-2020-24669 5.4 MediumJanuary 29, 2021
• hpe cloudline cl3100 gen10 server firmware, cloudline cl4100 gen10 server firmware, cloudline cl5200 gen9 server firmware +2 more +4 more The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline... CVE-2021-25135 7.8 HighJanuary 29, 2021
• hpe cloudline cl3100 gen10 server firmware, cloudline cl4100 gen10 server firmware, cloudline cl5200 gen9 server firmware +2 more +4 more The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline... CVE-2021-25134 7.8 HighJanuary 29, 2021
• hpe cloudline cl3100 gen10 server firmware, cloudline cl4100 gen10 server firmware, cloudline cl5200 gen9 server firmware +2 more +4 more The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline... CVE-2021-25137 7.8 HighJanuary 29, 2021
• hitachi vantara pentaho The Dashboard Editor in Hitachi Vantara Pentaho through 7.x - 8.x contains an XML Entity... CVE-2020-24665 6.5 MediumJanuary 29, 2021
• hpe cloudline cl3100 gen10 server firmware, cloudline cl4100 gen10 server firmware, cloudline cl5200 gen9 server firmware +2 more +4 more The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline... CVE-2021-25130 7.8 HighJanuary 29, 2021
• hpe cloudline cl3100 gen10 server firmware, cloudline cl4100 gen10 server firmware, cloudline cl5200 gen9 server firmware +2 more +4 more The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline... CVE-2021-25133 7.8 HighJanuary 29, 2021
• hpe cloudline cl3100 gen10 server firmware, cloudline cl4100 gen10 server firmware, cloudline cl5200 gen9 server firmware +2 more +4 more The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline... CVE-2021-25132 7.8 HighJanuary 29, 2021
• hpe cloudline cl3100 gen10 server firmware, cloudline cl4100 gen10 server firmware, cloudline cl5200 gen9 server firmware +2 more +4 more The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline... CVE-2021-25131 7.8 HighJanuary 29, 2021
• hpe cloudline cl3100 gen10 server firmware, cloudline cl4100 gen10 server firmware, cloudline cl5200 gen9 server firmware +2 more +4 more The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline... CVE-2021-25128 7.8 HighJanuary 29, 2021
• hpe cloudline cl3100 gen10 server firmware, cloudline cl4100 gen10 server firmware, cloudline cl5200 gen9 server firmware +2 more +4 more The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline... CVE-2021-25127 7.8 HighJanuary 29, 2021
• flarum/tags Packagist Users can edit the tags of any discussion GHSA-32wx-4gxx-h48f Fix available No scoreJanuary 29, 2021
• hpe cloudline cl3100 gen10 server firmware, cloudline cl4100 gen10 server firmware, cloudline cl5200 gen9 server firmware +2 more +4 more The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline... CVE-2021-25129 7.8 HighJanuary 29, 2021
• hpe cloudline cl3100 gen10 server firmware, cloudline cl4100 gen10 server firmware, cloudline cl5200 gen9 server firmware +2 more +4 more The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline... CVE-2021-25125 7.8 HighJanuary 29, 2021
• hpe cloudline cl3100 gen10 server firmware, cloudline cl4100 gen10 server firmware, cloudline cl5200 gen9 server firmware +2 more +4 more The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline... CVE-2021-25126 7.8 HighJanuary 29, 2021
• hpe cloudline cl3100 gen10 server firmware, cloudline cl4100 gen10 server firmware, cloudline cl5200 gen9 server firmware +2 more +4 more The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline... CVE-2021-25124 7.8 HighJanuary 29, 2021
• hpe cloudline cl3100 gen10 server firmware, cloudline cl4100 gen10 server firmware, cloudline cl5200 gen9 server firmware +2 more +4 more The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline... CVE-2021-25138 7.8 HighJanuary 29, 2021
• debian linux, linux kernel, fedoraproject fedora +2 more An issue was discovered in the Linux kernel through 5.10.11. PI futexes have a kernel stack use... CVE-2021-3347 Public exploitFix available 7.8 HighJanuary 29, 2021
• nic foris Foris before 101.1.1, as used in Turris OS, lacks certain HTML escaping in the login template. CVE-2021-3346 9.8 CriticalJanuary 29, 2021
• iniparserjs project iniparserjs Prototype Pollution CVE-2021-23328 5.6 MediumJanuary 29, 2021
• mitsubishielectric rh12frh55 firmware, rh12frh85 firmware, rh12rfh70 firmware +30 more +32 more Resource management errors vulnerability in a robot controller of MELFA FR Series(controller ... CVE-2021-20586 7.5 HighJanuary 29, 2021
• gnupg libgcrypt, oracle communications billing and revenue management +1 more _gcry_md_block_write in cipher/hash-common.c in Libgcrypt before 1.9.1 has a heap-based buffer... CVE-2021-3345 Public exploitFix available 7.8 HighJanuary 29, 2021
• ziv automation 4cct-ea6-334126bf, zivautomation 4cct-ea6-334126bf firmware +1 more ZIV AUTOMATION 4CCT Denial of Service vulnerability CVE-2021-25909 8.6 HighJanuary 29, 2021
• ziv automation 4cct-ea6-334126bf, zivautomation 4cct-ea6-334126bf firmware +1 more ZIV AUTOMATION 4CCT vulnerable to improper authentication CVE-2021-25910 8.0 HighJanuary 29, 2021
• hpe cloudline cl3100 gen10 server firmware, cloudline cl4100 gen10 server firmware, cloudline cl5200 gen9 server firmware +2 more +4 more The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline... CVE-2021-25123 7.8 HighJanuary 29, 2021
• ncollide2d crates.io ncollide2d is unmaintained RUSTSEC-2021-0151 No scoreJanuary 29, 2021
• ncollide3d crates.io ncollide3d is unmaintained RUSTSEC-2021-0150 No scoreJanuary 29, 2021
• nphysics2d crates.io nphysics2d is unmaintained RUSTSEC-2021-0149 No scoreJanuary 29, 2021
• Show olderLoading…