CVEs published in January 2021
1,871 vulnerabilities, 212 critical, 9 exploited.
- innokasmedical vital signs monitor vc150 firmwareInnokas Yhtymä Oy Vital Signs Monitor VC150 prior to Version 1.7.15 A stored cross-site scripting...5.4 Medium
- marvell qconvergeconslole guiIn Marvell QConvergeConsole GUI <= 5.5.0.74, credentials are stored in cleartext in tomcat-users...8.8 High
- marvell qconvergeconslole guiMarvell QConvergeConsole GUI <= 5.5.0.74 is affected by a path traversal vulnerability. The...8.1 High
- nvidia virtual gpu managerNVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which input data is not...5.5 Medium
- nvidia virtual gpu managerNVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which input data is not...7.1 High
- nvidia virtual gpu managerNVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which it obtains a value from...7.1 High
- nvidia virtual gpu managerNVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which an input offset is not...7.8 High
- nvidia virtual gpu managerNVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which an input data length is...7.1 High
- nvidia virtual gpu managerNVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which a race condition may...6.3 Medium
- nvidia virtual gpu software, virtual gpu manager +1 moreNVIDIA vGPU software contains a vulnerability in the guest kernel mode driver and vGPU plugin, in...7.1 High
- nvidia virtual gpu managerNVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which an input index is not...7.8 High
- nvidia virtual gpu software, virtual gpu manager +1 moreNVIDIA vGPU software contains a vulnerability in the guest kernel mode driver and vGPU plugin, in...7.1 High
- nvidia virtual gpu managerNVIDIA Virtual GPU Manager NVIDIA vGPU manager contains a vulnerability in the vGPU plugin in...7.8 High
- ibm engineering requirements quality assistant, engineering requirements quality assistant on-premises +1 moreIBM Engineering Requirements Quality Assistant On-Premises could allow an authenticated user to...4.3 Medium
- ibm engineering requirements quality assistant, engineering requirements quality assistant on-premises +1 moreIBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting....5.4 Medium
- ibm engineering requirements quality assistant, engineering requirements quality assistant on-premises +1 moreIBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting....5.4 Medium
- ibm engineering requirements quality assistant, engineering requirements quality assistant on-premises +1 moreIBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting....5.4 Medium
- ibm security verify privilege managerIBM Security Verify Privilege Manager 10.8 is vulnerable to an XML External Entity Injection (XXE...5.7 Medium
- concretecms concrete cmsThe Express Entries Dashboard in Concrete5 8.5.4 allows stored XSS via the name field of a new...4.8 Medium
c-aresMageiaUpdated c-ares packages fix security vulnerabilitiesNo scoredashMageiaUpdated dash packages fix a security vulnerabilityNo score- ts-process-promises project ts-process-promisescommand_injection9.8 Critical
- buns project bunsCommand Injection9.8 Critical
- servo smallvecBuffer overflow in SmallVec::insert_many9.8 Critical
- pwntools project pwntoolsImproper Control of Generation of Code ('Code Injection')8.1 High
- totalonlinesolutions advanced webhost billing systemAdvanced Webhost Billing System 3.7.0 is affected by Cross Site Request Forgery (CSRF) attacks...4.3 Medium
- dlink dsl-2888a firmwareAn issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55....7.5 High
- invisioncommunity ips community suiteInvision Community IPS Community Suite before 4.5.4.2 allows SQL Injection via the Downloads REST...8.8 High
- nvidia gpu display driver, gpu driver +1 moreNVIDIA GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel mode...5.3 Medium
- nvidia gpu display driver, gpu driver +1 moreNVIDIA GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel mode...5.5 Medium
- nvidia gpu display driver, gpu driver +1 moreNVIDIA GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel mode...8.4 High
serenityOSS-FuzzHeap-buffer-overflow in TTF::be_u16No scorec-blosc2OSS-FuzzHeap-buffer-overflow in ZSTD_createDDict_advancedNo scoreigraphOSS-FuzzHeap-use-after-free in igraph_read_graph_gmlNo score- socket engine.ioResource exhaustion in engine.io7.5 High
- socket socket.io-parserResource exhaustion in socket.io-parser7.5 High
- thecodingmachine gotenbergA directory traversal vulnerability in the Markdown engine of Gotenberg through 6.2.1 allows an...7.5 High
- thecodingmachine gotenbergA directory traversal vulnerability in file upload function of Gotenberg through 6.2.1 allows an...9.8 Critical
- thecodingmachine gotenbergAn incomplete-cleanup vulnerability in the Office rendering engine of Gotenberg through 6.2.1...9.8 Critical
- thecodingmachine gotenbergIn Gotenberg through 6.2.1, insecure permissions for tini (writable by user gotenberg)...9.8 Critical
- barco transform nBarco TransForm NDN-210 Lite, NDN-210 Pro, NDN-211 Lite, and NDN-211 Pro before 3.8 allows...9.8 Critical
- sparkdevnetwork rock rmsRock RMS version before 8.6 is vulnerable to account takeover by tampering with the user ID...9.8 Critical
- sparkdevnetwork rock rmsRock RMS versions before 8.10 and versions 9.0 through 9.3 fails to properly validate files...9.8 Critical
- phpgurukul hospital management systemPHPGURUKUL Hospital Management System V 4.0 does not properly restrict access to admin/dashboard...8.8 High
- mercusys mercury x18g firmwareMERCUSYS Mercury X18G 1.0.5 devices allow Directory Traversal via ../ in conjunction with a...5.3 Medium
- mercusys mercury x18g firmwareMERCUSYS Mercury X18G 1.0.5 devices allow Directory Traversal via ../ to the UPnP server, as...5.3 Medium
- foxitsoftware foxit reader, gonitro nitro pro, nitro reader +14 more +16 moreThe Portable Document Format (PDF) specification does not provide any information regarding the...5.3 Medium
- ibm emptoris strategic supply managementIBM Emptoris Strategic Supply Management 10.1.3 uses weaker than expected cryptographic...5.9 Medium
- ibm emptoris contract management, emptoris spend analysis +1 moreIBM Emptoris Contract Management and IBM Emptoris Spend Analysis 10.1.0, 10.1.1, and 10.1.3 could...5.3 Medium
- ibm emptoris sourcingIBM Emptoris Sourcing 10.1.0, 10.1.1, and 10.1.3 is vulnerable to web cache poisoning, caused by...6.5 Medium
- Show moreLoading…