CVEs published in January 2021
1,871 vulnerabilities, 212 critical, 9 exploited.
- mk-authMK-AUTH through 19.01 K4.9 allows XSS via the admin/logs_ajax.php tipo parameter. An attacker can...4.8 Medium
- ffmpeg, debian linux +1 moredecode_frame in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in...7.5 High
wolfsslOSS-FuzzHeap-buffer-overflow in sp_tohexNo scoreqemuOSS-FuzzHeap-buffer-overflow in ldl_he_pNo scorec-blosc2OSS-FuzzUNKNOWN READ in blosc_dNo score- dovecot, debian linux, fedoraproject fedora +2 moreDovecot before 2.3.13 has Improper Input Validation in lda, lmtp, and imap, leading to an...7.5 High
- dovecot, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Dovecot before 2.3.13. By using IMAP IDLE, an authenticated attacker...6.8 Medium
- gnu glibc, broadcom fabric operating system, debian linux +8 more +10 moreThe iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid...5.9 Medium
- ffmpegtrack_header in libavformat/vividas.c in FFmpeg 4.3.1 has an out-of-bounds write because of...6.5 Medium
- treasuredata fluent bitflb_gzip_compress in flb_gzip.c in Fluent Bit before 1.6.4 has an out-of-bounds write because it...7.8 High
- binjs io project io'Read' on uninitialized memory may cause UB9.8 Critical
- bronzedb-protocol project bronzedb-protocol`Read` on uninitialized buffer can cause UB (impl of `ReadKVExt`)9.8 Critical
- loopringThe sellTokenForLRC function in the vault protocol in the smart contract implementation for...7.5 High
- seal finance project financeThe breed function in the smart contract implementation for Farm in Seal Finance (Seal), an...7.5 High
- drivergenius firmwareMyDrivers64.sys in DriverGenius 9.61.3708.3054 allows attackers to cause a system crash via the...5.5 Medium
- php-fusionlogin.php in PHPFusion (aka PHP-Fusion) Andromeda 9.x before 2020-12-30 generates error messages...6.5 Medium
- mk-authMK-AUTH through 19.01 K4.9 allows remote attackers to obtain sensitive information (e.g., a CPF...4.3 Medium
- stableyieldcredit project stableyieldcreditThe _deposit function in the smart contract implementation for Stable Yield Credit (yCREDIT), an...7.5 High
- cdr project cdrRead of uninitialized memory in cdr9.8 Critical
- bra project braOut of bounds read in bra9.1 Critical
- golang textIn x/text in Go 1.15.4, a "slice bounds out of range" panic occurs in language...7.5 High
- golang goIn x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage...7.5 High
- seopanel seo panelSeo Panel 4.8.0 allows reflected XSS via the seo/seopanel/login.php?sec=forgot email parameter.6.1 Medium
privoxyopenSUSESecurity update for privoxyNo score- cache project cacheNull pointer deference in cache7.5 High
- electronjs zonotezonote through 0.4.0 allows XSS via a crafted note, with resultant Remote Code Execution (because...9.0 Critical
- pagelayerAn issue was discovered in the PageLayer plugin before 1.1.2 for WordPress. The...8.8 High
- elegantthemes divi, divi builder, extra +2 moreAn issue was discovered in the Divi Builder plugin, Divi theme, and Divi Extra theme before 4.5.3...9.9 Critical
- semperplugins all in one seo packAn issue was discovered in the All in One SEO Pack plugin before 3.6.2 for WordPress. The SEO...5.4 Medium
- pagelayerAn issue was discovered in the PageLayer plugin before 1.1.2 for WordPress. Nearly all of the...7.4 High
- xclonerAn issue was discovered in the XCloner Backup and Restore plugin before 4.2.13 for WordPress. It...9.9 Critical
- expresstech quiz and survey masterAn issue was discovered in the Quiz and Survey Master plugin before 7.0.1 for WordPress. It made...10.0 Critical
- xclonerAn issue was discovered in the XCloner Backup and Restore plugin before 4.2.153 for WordPress. It...9.8 Critical
- expresstech quiz and survey masterAn issue was discovered in the Quiz and Survey Master plugin before 7.0.1 for WordPress. It...9.9 Critical
- pickplugins team showcase, post grid +1 morePHP Object injection vulnerabilities in the Team Showcase plugin before 1.22.16 for WordPress...7.5 High
- pickplugins post grid, team showcase +1 morePHP Object injection vulnerabilities in the Post Grid plugin before 2.0.73 for WordPress allow...7.5 High
- pickplugins team showcase, post grid +1 moreStored Cross-Site Scripting (XSS) vulnerabilities in the Team Showcase plugin before 1.22.16 for...7.5 High
- pickplugins post grid, team showcase +1 moreStored Cross-Site Scripting (XSS) vulnerabilities in the Post Grid plugin before 2.0.73 for...7.5 High
- vasyltech advanced access managerThe Advanced Access Manager plugin before 6.6.2 for WordPress allows privilege escalation on...7.5 High
- vasyltech advanced access managerThe Advanced Access Manager plugin before 6.6.2 for WordPress displays the unfiltered user object...4.3 Medium
- thenewsletterplugin newsletterA Reflected Authenticated Cross-Site Scripting (XSS) vulnerability in the Newsletter plugin...6.5 Medium
- tribulant newsletterInsecure Deserialization in the Newsletter plugin before 6.8.2 for WordPress allows authenticated...7.5 High
openexrOSS-FuzzHeap-buffer-overflow in Imf_2_5::FastHufDecoder::decodeNo score- google androidIn onCreate of SlicePermissionActivity.java, there is a possible misleading string displayed due...5.0 Medium
- google androidIn enforceDumpPermissionForPackage of ActivityManagerService.java, there is a possible way to...5.5 Medium
- google androidIn is_device_locked and set_device_locked of keystore_keymaster_enforcement.h, there is a...4.7 Medium
- google androidIn checkCallerIsSystemOr of CompanionDeviceManagerService.java, there is a possible way to get a...7.3 High
- google androidIn appendEventsToCacheLocked of SensorEventConnection.cpp, there is a possible out of bounds...7.8 High
- google androidIn createOrUpdate of Permission.java and related code, there is possible permission escalation...7.8 High
- google androidIn avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible out of bounds write due to a...9.8 Critical
- Show moreLoading…