CVEs published in January 2021
1,871 vulnerabilities, 212 critical, 9 exploited.
- quest policy authority for unified communications** UNSUPPORTED WHEN ASSIGNED ** Stored XSS in Quest Policy Authority 8.1.2.200 allows remote...5.4 Medium
- quest policy authority for unified communications** UNSUPPORTED WHEN ASSIGNED ** Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote...6.1 Medium
- quest policy authority for unified communications** UNSUPPORTED WHEN ASSIGNED ** Reflected XSS in Quest Policy Authority version 8.1.2.200 allows...6.1 Medium
- quest policy authority for unified communications** UNSUPPORTED WHEN ASSIGNED ** Server Side Request Forgery (SSRF) in Web Compliance Manager in...9.8 Critical
- quest policy authority for unified communications** UNSUPPORTED WHEN ASSIGNED ** Reflected XSS in Web Compliance Manager in Quest Policy Authority...6.1 Medium
- quest policy authority for unified communications** UNSUPPORTED WHEN ASSIGNED ** Reflected XSS in Web Compliance Manager in Quest Policy Authority...6.1 Medium
clamavOSS-FuzzHeap-buffer-overflow in rijndaelDecryptNo score- redcarpet project redcarpet, debian linux +1 moreInjection in Redcarpet6.8 Medium
- coturn, fedoraproject fedora +1 moreLoopback bypass in Coturn7.2 High
abydosMageia,converseenMageia,imagemagickMageia +9 more +11 moreUpdated imagemagick packages fix security vulnerabilitiesNo score- basic dsp matrix project dsp matrixDouble free in basic_dsp_matrix7.5 High
- glsl-layout project glsl-layoutDouble free in glsl-layout7.5 High
yaraOSS-FuzzHeap-buffer-overflow in dotnet_parse_tilde_2No scoreopenh264OSS-FuzzHeap-buffer-overflow in WelsDec::CopyRectBlock4ColsNo score- sonicwall netextenderSonicWall NetExtender Windows client vulnerable to unquoted service path vulnerability, this...5.3 Medium
- sonicwall sma100, sma 100 firmware +1 moreA vulnerability in SonicWall SMA100 appliance allow an authenticated management-user to perform...7.2 High
igraphOSS-FuzzHeap-use-after-free in igraph_vector_ptr_sizeNo score- ibm collaborative lifecycle management, doors next, engineering lifecycle optimization +13 more +15 moreIBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ibm collaborative lifecycle management, doors next, engineering lifecycle optimization +13 more +15 moreIBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ibm collaborative lifecycle management, doors next, engineering lifecycle optimization +13 more +15 moreIBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows...4.6 Medium
- ibm collaborative lifecycle management, doors next, engineering lifecycle optimization +13 more +15 moreIBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a...4.3 Medium
- ibm collaborative lifecycle management, doors next, engineering lifecycle optimization +13 more +15 moreIBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a...4.3 Medium
- ibm spectrum protect plusIBM Spectrum Protect Plus 10.1.0 through 10.1.6 may allow unauthenticated and unauthorized access...5.3 Medium
- ibm spectrum protect plusIBM Spectrum Protect Plus 10.1.0 through 10.1.6 does not invalidate session after a password...4.0 Medium
- ibm spectrum protect plusIBM Spectrum Protect Plus 10.1.0 through 10.1.6 could allow a remote attacker to hijack the...6.1 Medium
- ibm spectrum protect plusIBM Spectrum Protect Plus 10.1.0 through 10.1.6 is vulnerable to HTTP header injection, caused by...6.5 Medium
- ibm spectrum protect plusIBM Spectrum Protect Plus 10.1.0 through 10.1.6 may include sensitive information in its URLs...3.7 Low
- ibm spectrum protect plus, spectrum protect +1 moreIBM Spectrum Protect Plus 10.1.0 through 10.1.6 may allow a local user to obtain access to...2.9 Low
- dell cpg bios, inspiron 5675 firmware +1 moreDell Inspiron 5675 BIOS versions prior to 1.4.1 contain a UEFI BIOS RuntimeServices overwrite...6.8 Medium
- ceph, fedoraproject fedora, redhat ceph storage +2 moreA flaw was found in ceph in versions prior to 16.y.z where ceph stores mgr module passwords in...4.4 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in audio in Google Chrome prior to 87.0.4280.141 allowed a remote attacker...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUser after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote...9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in audio in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in Skia in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Blink in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in WebUI in Google Chrome prior to 87.0.4280.141 allowed an...9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker...9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in payments in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who...9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in media in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had...9.6 Critical
- debian linux, google chrome, fedoraproject fedora +2 moreUse after free in drag and drop in Google Chrome on Linux prior to 87.0.4280.141 allowed a remote...9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in autofill in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who...9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient data validation in networking in Google Chrome prior to 87.0.4280.141 allowed a...8.8 High
- videolan vlc media player, debian linux +1 moreA vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers...7.8 High
- rocket.chatAn email address enumeration vulnerability exists in the password reset function of Rocket.Chat...5.3 Medium
- barco transform nThe NDN-210 has a web administration panel which is made available over https. There is a command...7.2 High
- barco transform nThe NDN-210 has a web administration panel which is made available over https. There is a command...7.2 High
- barco transform nBarco TransForm N before 3.8 allows Command Injection (issue 2 of 4). The NDN-210 has a web...7.2 High
- agentejo cockpitCockpit before 0.6.1 allows an attacker to inject custom PHP code and achieve Remote Command...9.8 Critical
- netapp element os, hci management node, hci storage node +1 more +3 moreElement OS versions prior to 1.8P1 and 12.2 are susceptible to a vulnerability that could allow...9.8 Critical
- innokasmedical vital signs monitor vc150 firmwareInnokas Yhtymä Oy Vital Signs Monitor VC150 prior to Version 1.7.15 HL7 v2.x injection...5.3 Medium
- Show moreLoading…