CVEs published in January 2021
1,871 vulnerabilities, 212 critical, 9 exploited.
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +26 more +28 moreRemote Procedure Call Runtime Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 2004, windows 10 version 20h2, windows server version 2004 +3 more +5 moreWindows Projected File System FS Filter Driver Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1803, windows 10 version 1809, windows 10 version 1909 +9 more +11 moreWindows Event Tracing Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +26 more +28 moreWindows Installer Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +26 more +28 moreRemote Procedure Call Runtime Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +26 more +28 moreWindows CSC Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +26 more +28 moreRemote Procedure Call Runtime Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +26 more +28 moreWindows Fax Compose Form Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +23 more +25 moreTPM Device Driver Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +26 more +28 moreWindows CSC Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +26 more +28 moreWindows CSC Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +26 more +28 moreWindows CSC Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +26 more +28 moreWindows CSC Service Elevation of Privilege Vulnerability7.8 High
- microsoft visual studio 2015 update 3, visual studio 2017 version 15.9 (includes 15.0 - 15.8), visual studio 2019 version 16.0 +20 more +22 moreDiagnostics Hub Standard Collector Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +18 more +20 moreWindows Runtime C++ Template Library Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +26 more +28 moreActive Template Library Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +17 more +19 moreMicrosoft splwow64 Elevation of Privilege Vulnerability7.8 High
- microsoft defender, security essentials, system center 2012 endpoint protection +3 more +5 moreMicrosoft Defender Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1803, windows 10 version 1809, windows 10 version 1909 +9 more +11 moreWindows WLAN Service Elevation of Privilege Vulnerability6.6 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 1909 +10 more +12 moreWindows Docker Information Disclosure Vulnerability5.0 Medium
- microsoft hevc video extensionsHEVC Video Extensions Remote Code Execution Vulnerability7.8 High
- microsoft hevc video extensionsHEVC Video Extensions Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1803, windows 10 version 1809 +11 more +13 moreWindows AppX Deployment Extensions Elevation of Privilege Vulnerability7.8 High
- microsoft sharepoint server, sharepoint enterprise server 2016, sharepoint foundation 2013 service pack 1 +3 more +5 moreMicrosoft SharePoint Server Spoofing Vulnerability4.6 Medium
- microsoft windows 10 version 1803, windows 10 version 1809, windows 10 version 1909 +9 more +11 moreWindows Bluetooth Security Feature Bypass Vulnerability7.7 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +17 more +19 moreWindows DNS Query Information Disclosure Vulnerability5.5 Medium
- microsoft sql server 2012 for x64-based systems service pack 4 (qfe), sql server 2012 service pack 4 (qfe), sql server 2014 service pack 3 (cu 4) +8 more +10 moreMicrosoft SQL Elevation of Privilege Vulnerability8.8 High
- rails admin project adminrails_admin ruby gem XSS vulnerability6.1 Medium
- combodo itopInformation disclosure vulnerability in iTop7.7 High
- mubuMubu 2.2.1 allows local users to gain privileges to execute commands, aka CNVD-2020-68878.7.8 High
- sean-barton elementor contact form dbThe Elementor Contact Form DB plugin before 1.6 for WordPress allows CSRF via backend admin pages.6.5 Medium
- carbonite server backup portalOpenText Carbonite Server Backup Portal before 8.8.7 allows XSS by an authenticated user via...5.4 Medium
- tibco ebx add-onsTIBCO EBX EXML External Entity7.1 High
- ibm api connectIBM API Connect 5.0.0.0 through 5.0.8.10 is vulnerable to stored cross-site scripting. This...6.4 Medium
- hcl software workload automationIBM Workload Automation 9.5 stores the server path in URLs that could aid in further attacks...4.3 Medium
- hcl software workload automationIBM Workload Automation 9.5 stores sensitive information in HTML comments that could aid in...4.3 Medium
- sap netweaver master data managementWhen security guidelines for SAP NetWeaver Master Data Management, versions 7.10, 710, and 710...5.3 Medium
- sap business warehouse, sap se bw/4hana, sap bw\/4hana +2 moreSAP Business Warehouse, versions 700, 701, 702, 711, 730, 731, 740, 750, 782 and SAP BW/4HANA,...9.9 Critical
- sap commerce cloudSAP Commerce Cloud, versions - 1808, 1811, 1905, 2005, 2011, allows an authenticated attacker to...5.4 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received...4.3 Medium
- sap banking services, sap se banking services (generic market data) +1 moreSAP Banking Services (Generic Market Data) 400, 450, and 500 does not perform necessary...4.3 Medium
- sap se epm add-in for microsoft office, epm add-in for sap analysis office, sap enterprise performance management +2 moreSAP EPM Add-in for Microsoft Office, version - 1010 and SAP EPM Add-in for SAP Analysis Office,...3.6 Low
- sap business warehouseThe BW Database Interface allows an attacker with low privileges to execute any crafted database...9.9 Critical
- sap business warehouseThe BW Database Interface does not perform necessary authorization checks for an authenticated...6.5 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received...4.3 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (web intelligence html interface) +1 moreSAP BusinessObjects Business Intelligence platform, versions 410, 420, allows an authenticated...5.4 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received...4.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received...4.3 Medium
- sap se gui for windows, sap graphical user interface +1 moreSAP GUI for Windows, version - 7.60, allows an attacker to spoof logon credentials for...5.3 Medium
- sap 3d visual enterprise viewerSAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received...4.3 Medium
- Show moreLoading…