CVEs published in January 2021
1,871 vulnerabilities, 212 critical, 9 exploited.
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databind8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databind8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databind8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +37 more +39 moreUnsafe Deserialization in jackson-databind8.1 High
- fasterxml jackson-databind, debian linux, netapp service level manager +55 more +57 moreUnsafe Deserialization in jackson-databind8.1 High
- beetel 777vr1 firmwareCross Site Scripting (XSS) vulnerability in Beetel router 777VR1 can be exploited via the NTP...4.8 Medium
- digisol dg-hr3400 firmwareCross Site Scripting (XSS) vulnerability in Digisol DG-HR3400 can be exploited via the NTP server...6.1 Medium
- rails https://github.com/rails/rails, rubyonrails rails +1 moreCross-site scripting in actionpack6.1 Medium
- nextcloud contactsA missing file type check in Nextcloud Contacts 3.4.0 allows a malicious user to upload SVG files...5.4 Medium
- citrix secure mailCitrix Secure Mail for Android before 20.11.0 suffers from Improper Control of Generation of Code...6.5 Medium
- citrix secure mailCitrix Secure Mail for Android before 20.11.0 suffers from improper access control allowing...4.3 Medium
- nextcloud contactsA missing file type check in Nextcloud Contacts 3.3.0 allows a malicious user to upload malicious...5.4 Medium
- tp-link tl-wr840n firmwareoal_ipt_addBridgeIsolationRules on TP-Link TL-WR840N 6_EU_0.9.1_4.16 devices allows OS command...9.8 Critical
- sesame-system web-sesameA misconfiguration in Web-Sesame 2020.1.1.3375 allows an unauthenticated attacker to download the...5.3 Medium
- tiny tinymceCross-site scripting vulnerability in TinyMCE6.1 Medium
tinymcenpmRegex denial of service vulnerability in codesample pluginNo score- courtbouillon cairosvgRegular Expression Denial of Service in CairoSVG5.7 Medium
- zohocorp manageengine desktop centralZoho ManageEngine Desktop Central 10.0.430 allows HTML injection via a modified Report Name in a...5.4 Medium
- solarwinds web help deskSolarWinds Web Help Desk 12.7.0 allows HTML injection via a Comment in a Help Request ticket.5.4 Medium
- wolfsslRsaPad_PSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain...9.8 Critical
- red lion controls crimson 3.1, redlion crimson +1 moreAn attacker could send a specially crafted message to Crimson 3.1 (Build versions prior to 3119...5.3 Medium
- red lion controls crimson 3.1, redlion crimson +1 moreA NULL pointer deference vulnerability has been identified in the protocol converter. An attacker...7.5 High
- red lion controls crimson 3.1, redlion crimson +1 moreThe default configuration of Crimson 3.1 (Build versions prior to 3119.001) allows a user to be...9.1 Critical
- softmaker officeAn exploitable signed conversion vulnerability exists in the TextMaker document parsing...8.8 High
- softmaker officeAn exploitable sign extension vulnerability exists in the TextMaker document parsing...8.8 High
- ithemes securityThe iThemes Security (formerly Better WP Security) plugin before 7.7.0 for WordPress does not...7.5 High
- limit login attempts project login attemptsThe Limit Login Attempts plugin before 1.7.1 for WordPress does not clear auth cookies upon a...9.8 Critical
- ninjaforms ninja formsThe Ninja Forms plugin before 3.4.28 for WordPress lacks escaping for submissions-table fields.5.3 Medium
- ninjaforms ninja formsThe Ninja Forms plugin before 3.4.27.1 for WordPress allows attackers to bypass validation via...5.3 Medium
- ninjaforms ninja formsThe Ninja Forms plugin before 3.4.27.1 for WordPress allows CSRF via services integration.6.5 Medium
- advancedcustomfields advanced custom fieldsThe Advanced Custom Fields plugin before 5.8.12 for WordPress mishandles the escaping of strings...6.1 Medium
- elementor website builderThe Elementor Website Builder plugin before 3.0.14 for WordPress does not properly restrict SVG...6.1 Medium
- mendix mendixssoMendixSSO <= 2.1.1 contains endpoints that make use of the openid handler, which is suffering...6.1 Medium
- ultimatemember ultimate memberThe Ultimate Member plugin before 2.1.13 for WordPress mishandles hidden name="timestamp" fields...5.3 Medium
- proofpoint insider threat managementrcdsvc in the Proofpoint Insider Threat Management Windows Agent (formerly ObserveIT Windows...8.8 High
- proofpoint insider threat management serverThe Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains...9.8 Critical
- proofpoint insider threat management serverThe Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains...7.2 High
- proofpoint insider threat management serverThe Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains...9.8 Critical
- proofpoint insider threat management serverThe Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains...9.8 Critical
- ibm websphere extreme scaleIBM WebSphere eXtreme Scale 8.6.1 stores sensitive information in URL parameters. This may lead...3.7 Low
- clickhouse-driver project clickhouse-driverArbitrary code execution in clickhouse-driver9.8 Critical
- calamine project calamineOut of bounds write in calamine9.8 Critical
- veritas system recoveryAn issue was discovered in Veritas System Recovery before 21.2. On start-up, it loads the OpenSSL...9.3 Critical
- veritas aptare it analyticsAn issue was discovered in Veritas APTARE 10.4 before 10.4P9 and 10.5 before 10.5P3. By default,...8.8 High
- veritas cloudpoint, netbackup cloudpoint +1 moreAn issue was discovered in Veritas CloudPoint before 8.3.0.1+hotfix. The CloudPoint Windows Agent...9.3 Critical
- veritas netbackup, opscenter +1 moreAn issue was discovered in Veritas NetBackup and OpsCenter through 8.3.0.1. NetBackup processes...9.3 Critical
- veritas enterprise vaultAn issue was discovered in Veritas Enterprise Vault through 14.0. On start-up, it loads the...9.3 Critical
- veritas desktop and laptop optionAn issue was discovered in Veritas Desktop and Laptop Option (DLO) before 9.4. On start-up, it...9.3 Critical
- veritas infoscale, infoscale operations manager, storage foundation +1 more +3 moreAn issue was discovered in Veritas InfoScale 7.x through 7.4.2 on Windows, Storage Foundation...9.3 Critical
- veritas backup execAn issue was discovered in the server in Veritas Backup Exec through 16.2, 20.6 before hotfix...9.3 Critical
- Show moreLoading…