CVEs published in January 2021
1,871 vulnerabilities, 212 critical, 9 exploited.
- veritas resiliency platformAn issue was discovered in Veritas Resiliency Platform 3.4 and 3.5. It leverages OpenSSL on...9.3 Critical
- veritas netbackup, opscenter +1 moreAn issue was discovered in Veritas NetBackup through 8.3.0.1 and OpsCenter through 8.3.0.1....9.3 Critical
serenityOSS-FuzzStack-buffer-overflow in JS::Heap::gather_conservative_rootsNo score- nodejs node, node.js, debian linux +3 more +5 moreNode.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in...6.5 Medium
- nodejs node, node.js, debian linux +3 more +5 moreNode.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 are vulnerable to a use-after-free bug...8.1 High
- cairographics cairoA flaw was found in cairo's image-compositor.c in all versions prior to 1.17.4. This flaw allows...7.8 High
- mcafee network security management (nsm), network security management +1 moreNetwork Security Management (NSM) - Cross Site Request Forgery vulnerability6.6 Medium
- invisioncommunity ips community suiteInvision Community IPS Community Suite before 4.5.4.2 allows XSS during the quoting of a post or...6.1 Medium
- gigamon gigavue-osGigaVUE-OS (GVOS) 5.4 - 5.9 stores a Redis database password in plaintext.4.7 Medium
- gigamon gigavue-osGigaVUE-OS (GVOS) 5.4 - 5.9 uses a weak algorithm for a hash stored in internal database.2.3 Low
- dell powermax os, unisphere, unisphere for powermax +2 moreDell EMC Unisphere for PowerMax versions prior to 9.1.0.9, Dell EMC Unisphere for PowerMax...6.3 Medium
- dell powerstore, emc powerstore firmware +1 moreDell EMC PowerStore versions prior to 1.0.3.0.5.007 contain a Plain-Text Password Storage...7.5 High
- dell powerstore, emc powerstore firmware +1 moreDell EMC PowerStore versions prior to 1.0.3.0.5.007 contain a Plain-Text Password Storage...6.4 Medium
- dell powerstore, emc powerstore firmware +1 moreDell EMC PowerStore versions prior to 1.0.3.0.5.007 contain a Plain-Text Password Storage...7.5 High
- dell unity, emc unity operating environment, emc unity vsa operating environment +1 more +3 moreDell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0.4.0.5.012 contain a Denial of...7.5 High
- dell unity, emc unity operating environment, emc unity vsa operating environment +1 more +3 moreDell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0.4.0.5.012 contains a plain-text...6.4 Medium
- dell unity, emc unity operating environment, emc unity vsa operating environment +1 more +3 moreDell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0.4.0.5.012 contain a plain-text...6.4 Medium
- dell emc isilon onefs, emc powerscale onefs, powerscale onefs +2 moreDell EMC Isilon OneFS versions 8.1 and later and Dell EMC PowerScale OneFS version 9.0.0 contain...7.0 High
- 1234n minicmsDirectory traversal vulnerability in page_edit.php in MiniCMS V1.10 allows remote attackers to...7.5 High
- 1234n minicmsDirectory traversal vulnerability in post-edit.php in MiniCMS V1.10 allows remote attackers to...9.8 Critical
- vikisolutions veraAn issue was discovered in Viki Vera 4.9.1.26180. A user without access to a project could...8.1 High
- vikisolutions veraAn issue was discovered in Viki Vera 4.9.1.26180. An attacker could set a user's last name to an...5.4 Medium
- gjson project gjsongithub.com/tidwall/gjson is vulnerable to Denial of service7.5 High
- gjson project gjsonImproper Validation of Array Index in GJSON7.5 High
- orangehrmSQL injection in the Buzz module of OrangeHRM through 4.6 allows remote authenticated attackers...8.1 High
- veritas desktop and laptop optionVeritas Desktop and Laptop Option (DLO) before 9.5 disclosed operational information on the...5.3 Medium
- google androidAn issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Broadcom...8.8 High
- google androidAn issue was discovered on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11.0) ...5.5 Medium
- google androidAn issue was discovered in the fingerprint scanner on Samsung Note20 mobile devices with Q(10.0)...5.5 Medium
- uclouvain openjpeg, debian linux, oracle outside in technology +2 moreA flaw was found in openjpeg's src/lib/openjp2/t2.c in versions prior to 2.4.0. This flaw allows...7.8 High
- google androidAn issue was discovered on LG mobile devices with Android OS 10 software. There was no write...5.5 Medium
- lukashinsch spring-boot-actuator-logviewDirectory Traversal7.7 High
- broadcom ca service catalog, ca technologies, a broadcom company service catalog +1 moreCA Service Catalog 17.2 and 17.3 contain a vulnerability in the default configuration of the...7.5 High
- ispconfigISPConfig before 3.2.2 allows SQL injection.9.8 Critical
- win911 mobile-911 server, win-911 +1 moreAn exploitable local privilege elevation vulnerability exists in the file system permissions of...9.3 Critical
- win-911An exploitable local privilege elevation vulnerability exists in the file system permissions of...9.3 Critical
- win-911An exploitable local privilege elevation vulnerability exists in the file system permissions of...9.3 Critical
- ibm api connectIBM API Connect 5.0.0.0 through 5.0.8.10 could potentially leak sensitive information or allow...7.4 High
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2,...8.8 High
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2,...5.3 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2,...8.8 High
- thedaylightstudio fuel cmsFUEL CMS 1.4.11 has stored XSS in Blocks/Navigation/Site variables. This could lead to cookie...5.4 Medium
- thedaylightstudio fuel cmsFUEL CMS 1.4.11 allows SQL Injection via parameter 'name' in /fuel/permissions/create/....9.8 Critical
- hp integrated lights-out 4, integrated lights-out 5 +1 moreA potential security vulnerability has been identified in HPE Integrated Lights-Out 5 (iLO 5) and...5.3 Medium
- nxlogThe fileop module of the NXLog service in NXLog Community Edition 2.10.2150 allows remote...7.5 High
- csv-sniffer project csv-snifferUse of Uninitialized Resource in csv-sniffer.9.8 Critical
- apache flinkApache Flink directory traversal attack: reading remote files through the REST API7.5 High
- apache flinkApache Flink directory traversal attack: remote file writing through the REST API7.5 High
- ipeak ipeakcmsipeak Infosystems ibexwebCMS (aka IPeakCMS) 3.5 is vulnerable to an unauthenticated Boolean-based...9.8 Critical
- lanproxy project lanproxyffay lanproxy 0.1 allows Directory Traversal to read /../conf/config.properties to obtain...7.5 High
- Show moreLoading…