CVEs published in January 2021
1,871 vulnerabilities, 212 critical, 9 exploited.
- sap se netweaver as abap, sap netweaver application server abap +1 moreSAP NetWeaver AS ABAP, versions 740, 750, 751, 752, 753, 754, 755, allows an unauthenticated...7.5 High
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PSD file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated RLE file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated RLE file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SGI file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received...4.3 Medium
- m2crypto project m2crypto, fedoraproject fedora, redhat enterprise linux +1 more +3 moreA flaw was found in all released versions of m2crypto, where they are vulnerable to...5.9 Medium
- hcl commerce, hcltechsw hcl commerce +1 moreInformation disclosure vulnerability in HCL Commerce 9.0.1.9 through 9.0.1.14 and 9.1 through 9.1...7.5 High
- hcl commerce, hcltechsw hcl commerce +1 moreSecurity vulnerability in HCL Commerce 9.0.0.5 through 9.0.0.13, 9.0.1.0 through 9.0.1.14 and 9.1...9.8 Critical
- red hat single sign-onThe "Test Connection" available in v7.x of the Red Hat Single Sign On application console can...2.7 Low
- sap cla-assistantIn CLA-Assistant, versions before 2.8.5, due to improper access control an authenticated user could access API endpoints which are not intended to be used by the user. This could impact the integrity…6.5 Medium
- vanderbilt redcapREDCap 10.3.4 contains a XSS vulnerability in the ToDoList function with parameter sort. The...6.1 Medium
- vanderbilt redcapREDCap 10.3.4 contains a SQL injection vulnerability in the ToDoList function via sort parameter....9.8 Critical
- facade ignitionUnauthenticated remote code execution in Ignition9.8 Critical
- clusterlabs hawkAn issue was discovered in ClusterLabs Hawk 2.x through 2.3.0-x. There is a Ruby shell code...9.8 Critical
xdg-utilsUbuntuxdg-utils regressionNo score- arenavec project arenavecDouble free in arenavec7.5 High
- arenavec project arenavecOut of bounds write in arenavec7.5 High
- containers project containersDouble free in containers9.8 Critical
- clusterlabs crmsh, debian linux +1 moreClusterLabs crmsh vulnerable to shell code injection7.8 High
- sudo project sudo, fedoraproject fedora, netapp hci management node +1 more +3 moreselinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to...7.8 High
- python pillow, fedoraproject fedora +1 morePillow Out-of-bounds Read5.4 Medium
- python pillow, fedoraproject fedora +1 morePillow Out-of-bounds Write8.8 High
- python pillow, debian linux, fedoraproject fedora +2 morePillow Out-of-bounds Read7.1 High
- open-xchange appsuiteOX App Suite through 7.10.4 allows XSS via the app loading mechanism (the PATH_INFO to the ...6.1 Medium
- open-xchange appsuiteOX App Suite through 7.10.3 allows SSRF because GET requests are sent to arbitrary domain names...5.4 Medium
libgit2OSS-FuzzHeap-buffer-overflow in git__strntol64No scorelibgit2OSS-FuzzHeap-buffer-overflow in git_buf_vprintfNo scoreharfbuzzOSS-FuzzHeap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned shortNo score- safervpnSaferVPN for Windows Ver 5.0.3.3 through 5.0.4.15 could allow local privilege escalation from low...7.8 High
- espressif esp-idfEspressif ESP-IDF 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.7, 3.2.x through 3.2.3, 3.3.x...7.5 High
popplerOSS-FuzzHeap-buffer-overflow in BaseMemStream<char const>::getCharNo score- sudo project sudo, debian linux, fedoraproject fedora +3 more +5 moreThe sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform...2.5 Low
- linux kernelA flaw was found in the Linux kernel's implementation of string matching within a packet. A...4.4 Medium
- siemens scalance x-200rna switch family, scalance x-300 switch family (incl. x408 and siplus net variants), scalance xr324-12m firmware +7 more +9 moreA vulnerability has been identified in SCALANCE X-300 switch family (incl. X408 and SIPLUS NET...5.9 Medium
- siemens scalance x-200 switch family (incl. siplus net variants), scalance x-200irt switch family (incl. siplus net variants), scalance x-200rna switch family +66 more +68 moreA vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) ...5.9 Medium
- debian linux, linux kernel, fedoraproject fedora +2 moreIn drivers/target/target_core_xcopy.c in the Linux kernel before 5.10.7, insufficient identifier...8.1 High
- r-project cranThe R programming language’s default package manager CRAN is affected by a path traversal...9.8 Critical
- flask-middleware flask-security-tooCSRF can expose users authentication token in Flask-Security-Too7.4 High
- google androidIn onAuthenticated of AuthenticationClient.java, there is a possible tapjacking attack when...7.8 High
- google androidIn tun_get_user of tun.c, there is possible memory corruption due to a use after free. This could...6.7 Medium
- live555 liblivemediaIn Live Networks, Inc., liblivemedia version 20200625, there is a potential buffer overflow bug...9.8 Critical
- wdja cmsCross-site request forgery (CSRF) in admin/global/manage.php in WDJA CMS 1.5 allows remote...6.1 Medium
- freyrscada iec-60879-5-104 server simulatorA denial-of-service vulnerability exists in the traffic-logging functionality of FreyrSCADA IEC...5.9 Medium
- Show moreLoading…