CVEs published in January 2021
1,871 vulnerabilities, 212 critical, 9 exploited.
- debian linux, linux kernel, fedoraproject fedora +2 more +4 moremwifiex_cmd_802_11_ad_hoc_start in drivers/net/wireless/marvell/mwifiex/join.c in the Linux...8.8 High
libarchiveOSS-FuzzHeap-buffer-overflow in read_bits_16No scoreminidlnaDebianminidlna - regression updateNo scoreprivoxySUSESecurity update for privoxyNo scoreprivoxySUSESecurity update for privoxyNo score- dell cpg biosSelect Dell Client Commercial and Consumer platforms support a BIOS password reset capability...5.1 Medium
- dell wyse management suiteDell Wyse Management Suite versions prior to 3.1 contain an open redirect vulnerability. A remote...6.1 Medium
- dell wyse management suiteDell Wyse Management Suite versions prior to 3.1 contain a stored cross-site scripting...5.4 Medium
- dell wyse management suiteDell Wyse Management Suite versions prior to 3.1 contain a stored cross-site scripting...4.8 Medium
- dell wyse thinos, wyse proprietary os (thinos) +1 moreDell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability....10.0 Critical
- dell wyse thinos, wyse proprietary os (thinos) +1 moreDell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability....10.0 Critical
- mikrotik routerosIn MikroTik RouterOS through 2021-01-04, the hotspot login page is vulnerable to reflected XSS...6.1 Medium
- @angular compilerExposure of server configuration7.4 High
- htmlsanitizer project htmlsanitizerPossible XSS bypass if style tag is allowed6.1 Medium
- chatter-social creeperPotential Malware Discovered (Possible False Positive)3.1 Low
- asus dsl-n17u firmwareThe ASUS DSL-N17U modem with firmware 1.1.0.2 allows attackers to access the admin interface by...9.8 Critical
- ultimatemember ultimate memberAn issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka...10.0 Critical
- ultimatemember ultimate memberAn issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka...9.9 Critical
- ultimatemember ultimate memberAn issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka...10.0 Critical
- pearson vue testing systemThe Application Wrapper in Pearson VUE VTS Installer 2.3.1911 has Full Control permissions for...7.8 High
- cse bookstore project bookstoreCSE Bookstore version 1.0 is vulnerable to time-based blind, boolean-based blind and OR error...9.8 Critical
vlcMageiaUpdated vlc packages features security improvementsNo score- gnu binutils, broadcom brocade fabric operating system, netapp cloud backup +5 more +7 moreThere's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils which could allow an...5.5 Medium
- gnu binutils, broadcom brocade fabric operating system firmware, fedoraproject fedora +5 more +7 moreThere's a flaw in bfd_pef_scan_start_address() of bfd/pef.c in binutils which could allow an...5.5 Medium
- gnu binutils, broadcom brocade fabric operating system firmware, fedoraproject fedora +5 more +7 moreThere's a flaw in binutils /bfd/pef.c. An attacker who is able to submit a crafted input file to...5.5 Medium
- gnu binutils, broadcom brocade fabric operating system firmware, fedoraproject fedora +5 more +7 moreThere's a flaw in binutils /opcodes/tic4x-dis.c. An attacker who is able to submit a crafted...6.1 Medium
- gnu binutils, broadcom brocade fabric operating system firmware, fedoraproject fedora +5 more +7 moreA flaw exists in binutils in bfd/pef.c. An attacker who is able to submit a crafted PEF file to...5.5 Medium
- veno file manager project file managerVeno File Manager 3.5.6 is affected by a directory traversal vulnerability. Using the traversal...7.5 High
- ibm curam social program management, curam spm +1 moreIBM Curam Social Program Management 7.0.9 and 7.0.11 is vulnerable to cross-site request forgery...6.5 Medium
- ibm cloud pak systemIBM Cloud Pak System 2.3 could allow a local privileged attacker to upload arbitrary files. By...6.7 Medium
- ibm cloud pak systemIBM Cloud Pak System 2.3 has insufficient logout controls which could allow an authenticated...4.7 Medium
- ibm cloud pak systemIBM Cloud Pak System 2.3 could allow l local privileged user to disclose sensitive information...2.3 Low
- ibm cloud pak systemIBM Cloud Pak System 2.3 is vulnerable to cross-site request forgery which could allow an...4.3 Medium
- ibm cloud pak systemIBM Cloud Pak System 2.3 is vulnerable to cross-site scripting. This vulnerability allows users...5.5 Medium
- ibm cloud pak systemIBM Cloud Pak System 2.3 could reveal credential information in the HTTP response to a local...4.4 Medium
- ibm cloud pak systemIBM Cloud Pak System 2.3 Self Service Console could allow a privilege escalation by capturing the...4.7 Medium
- ibm cloud pak systemIBM Cloud Pak System 2.3 is vulnerable to cross-site scripting. This vulnerability allows users...4.8 Medium
- ibm cloud pak systemIBM Cloud Pak System 2.3 is vulnerable to cross-site scripting. This vulnerability allows users...4.8 Medium
python-aptUbuntupython-apt regressionNo scoreinterfaces2crates.iointerfaces2 is unmaintained, use interfaces insteadNo score- endian trait project traitDouble free in endian_trait7.5 High
- fil-ocl project fil-oclDouble free in fil-ocl7.5 High
- kamadak-exif project kamadak-exif, kamadak exif-rs +1 moreInfinite loop in parsing PNG files in5.7 Medium
- rust-lang mdbookXSS in mdBook's search page8.2 High
- djv project djvRemote Code Execution (RCE)9.8 Critical
- asciitable.js project asciitable.jsPrototype Pollution7.5 High
- solarwinds web help deskSolarWinds Web Help Desk 12.7.0 allows XSS via a CSV template file with a crafted Location Name...5.4 Medium
- solarwinds web help deskSolarWinds Web Help Desk 12.7.0 allows XSS via the Request Type parameter of a ticket.5.4 Medium
- getlaminas laminas-http, zend framework +1 moreRemote code execution in zendframework and laminas-http9.8 Critical
- mk-authMK-AUTH through 19.01 K4.9 allows CSRF for password changes via the central/executar_central.php...8.8 High
- Show moreLoading…