CVEs published in January 2021
1,871 vulnerabilities, 212 critical, 9 exploited.
- ibm emptoris strategic supply management, emptoris sourcing +1 moreIBM Emptoris Strategic Supply Management 10.1.0, 10.1.1, and 10.1.3 is vulnerable to stored cross...6.4 Medium
- ibm emptoris strategic supply managementIBM Emptoris Strategic Supply Management 10.1.0, 10.1.1, and 10.1.3 transmits sensitive...5.9 Medium
- ibm emptoris contract managementIBM Emptoris Contract Management 10.1.3 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- code-industry master pdf editor, foxitsoftware foxit reader, phantompdf +10 more +12 moreThe Portable Document Format (PDF) specification does not provide any information regarding the...5.3 Medium
- redhat jboss core services httpdA flaw was found in JBCS httpd in version 2.4.37 SP3, where it uses a back-end worker SSL...5.4 Medium
- rockwellautomation rslinxA denial-of-service vulnerability exists in the Ethernet/IP server functionality of Rockwell...7.5 High
- linux infiniband hfi1 driver, kernel +1 moreA use after free in the Linux kernel infiniband hfi1 driver in versions prior to 5.10-rc6 was...4.4 Medium
- eaton easysoft, easysoft software +1 moreFile parsing Type Confusion Remote code execution vulerability5.8 Medium
- eaton easysoft, easysoft software +1 moreFile parsing Out-Of-Bounds read remote code execution5.8 Medium
- foxitsoftware phantompdf, reader +1 moreFoxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction...8.1 High
- foxitsoftware phantompdf, reader +1 moreFoxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a race condition...8.1 High
- foxitsoftware phantompdf, reader +1 moreFoxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyCheckLicence...8.1 High
- foxitsoftware phantompdf, reader +1 moreFoxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a...8.1 High
- foxitsoftware phantompdf, reader +1 moreFoxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction...8.1 High
- foxitsoftware phantompdf, reader +1 moreFoxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyCPDFAction...8.1 High
- foxitsoftware phantompdf, reader +1 moreFoxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction...8.1 High
- foxitsoftware phantompdf, reader +1 moreFoxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a...8.1 High
- foxitsoftware pdf activexFoxit PDF ActiveX before 5.5.1 allows remote code execution via command injection because of the...7.8 High
- liferay portalLiferay Portal Vulnerable to Cross-Site Scripting (XSS) via User Name Parameter6.1 Medium
- ftsafe k13, k21, k40 +42 more +44 moreAn electromagnetic-wave side-channel issue was discovered on NXP SmartMX / P5x security...4.2 Medium
- monocmsMonoCMS Blog 1.0 is affected by incorrect access control that can lead to remote arbitrary code...7.2 High
- restaurant reservation system project reservation systemRestaurant Reservation System 1.0 suffers from an authenticated SQL injection vulnerability,...8.8 High
- evolucare ecs imaging** UNSUPPORTED WHEN ASSIGNED ** EVOLUCARE ECSIMAGING (aka ECS Imaging) through 6.21.5 has an OS...9.8 Critical
- mozilla firefox, firefox mobile +1 moreWhen a malicious application installed on the user's device broadcast an Intent to Firefox for...6.5 Medium
- mozilla firefox, firefox mobile +1 moreBy attempting to connect a website using an unresponsive port, an attacker could have controlled...6.5 Medium
- cutesoft cute editorCute Editor for ASP.NET 6.4 is vulnerable to reflected cross-site scripting (XSS) caused by...6.1 Medium
- quixplorer project quixplorerQuixplorer <=2.4.1 is vulnerable to reflected cross-site scripting (XSS) caused by improper...4.7 Medium
- krpanoThe default installation of Krpano Panorama Viewer version <=1.20.8 is vulnerable to Reflected...6.1 Medium
- krpanoThe default installation of Krpano Panorama Viewer version <=1.20.8 is prone to Reflected XSS due...6.1 Medium
- formstoneFormstone Vulnerable to Reflected XSS6.1 Medium
- gfx-auxil project gfx-auxilReading on uninitialized buffer may cause UB ( `gfx_auxil::read_spirv()` )9.8 Critical
- ash-rs ashUse of Uninitialized Resource in ash.9.8 Critical
- columnar project columnarcolumnar: Read on uninitialized buffer may cause UB (ColumnarReadExt::read_typed_vec())9.8 Critical
- flumedb project flumedbUse of Uninitialized Resource in flumedb.9.8 Critical
- bam project bamLoading a bgzip block can write out of bounds if size overflows.9.8 Critical
- av-data project av-dataNull pointer deference in av-data7.5 High
c-blosc2OSS-FuzzUNKNOWN READ in blosc_getitemNo scorec-blosc2OSS-FuzzUNKNOWN READ in frame_get_metalayersNo scorec-blosc2OSS-FuzzSegv on unknown address in frame_get_lazychunkNo score- debian linux, nvidia gpu display driver, gpu driver +2 moreNVIDIA GPU Display Driver for Linux, all versions, contains a vulnerability in the kernel mode...7.1 High
- nvidia gpu display driver, gpu driver +1 moreNVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the...5.5 Medium
- nvidia gpu display driver, gpu driver +1 moreNVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the...7.8 High
- google chromeUse after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to...8.8 High
- cisco jabberCisco Jabber Desktop and Mobile Client Software Vulnerabilities9.9 Critical
- fasterxml jackson-databind, debian linux, netapp cloud backup +54 more +56 moreUnsafe Deserialization in jackson-databind8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 moreUnsafe Deserialization in jackson-databind8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 moreUnsafe Deserialization in jackson-databind8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databind8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 moreUnsafe Deserialization in jackson-databind8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databind8.1 High
- Show moreLoading…