CVEs published in January 2021
1,871 vulnerabilities, 212 critical, 9 exploited.
- loxone miniserver gen 1 firmwareLoxone Miniserver devices with firmware before 11.1 (aka 11.1.9.3) are unable to use an...9.8 Critical
- huawei emui, magic ui +1 moreThere is a heap overflow vulnerability in some Huawei smartphone, attackers can exploit this...9.8 Critical
- ibm security guardium insightsIBM Security Guardium Insights 2.0.2 stores user credentials in plain in clear text which can be...4.1 Medium
- ibm security guardium insightsIBM Security Guardium Insights 2.0.2 stores user credentials in plain in clear text which can be...4.4 Medium
- ibm security guardium insightsIBM Security Guardium Insights 2.0.2 could allow a remote attacker to obtain sensitive...5.3 Medium
- ibm security guardium insightsIBM Security Guardium Insights 2.0.2 could allow a remote attacker to obtain sensitive...5.3 Medium
- ibm security guardium insightsIBM Security Guardium Insights 2.0.2 does not set the secure attribute on authorization tokens or...4.3 Medium
- ibm security guardium insightsIBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that...5.9 Medium
- ibm security guardium insightsIBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that...5.9 Medium
- ibm security guardium insightsIBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that...5.9 Medium
- palo alto networks pan-osPAN-OS: Configuration secrets for log forwarding may be logged in system logs4.4 Medium
- palo alto networks pan-osPAN-OS: Information exposure in Ethernet data frame construction (Etherleak)4.3 Medium
- thinkadminThinkAdmin insecure unserialize vulnerability9.8 Critical
- ibm security guardium data encryptionIBM Security Guardium Data Encryption (GDE) 3.0.0.2 specifies permissions for a security-critical...4.2 Medium
- ibm security guardium data encryptionIBM Security Guardium Data Encryption (GDE) 3.0.0.2 stores sensitive information in URL...3.7 Low
- ibm security guardium data encryptionIBM Security Guardium Data Encryption (GDE) 3.0.0.2 uses weaker than expected cryptographic...5.9 Medium
- combodo itopXSS in the breadcrumbs6.8 Medium
- combodo itopSession fixation6.1 Medium
- combodo itopSQL query displayed on portal error4.3 Medium
- php-fusion phpfusionPHPFusion version 9.03.90 is vulnerable to CSRF attack which leads to deletion of all shoutbox...4.3 Medium
- combodo itopAdmin pages are cached and can be embedded6.8 Medium
- git-big-picture project git-big-picturegit-big-picture Code Execution9.8 Critical
- jenkins bumblebee hp alm, jenkins project bumblebee hp alm plugin +1 moreCredentials stored in plain text by Jenkins Bumblebee HP ALM Plugin5.5 Medium
- jenkins tics, jenkins project tics plugin +1 moreXSS vulnerability in Jenkins TICS Plugin6.1 Medium
- jenkins tracetronic ecu-test, jenkins project tracetronic ecu-test plugin +1 moreCredentials stored in plain text by Jenkins TraceTronic ECU-TEST Plugin5.5 Medium
- jenkinsStored XSS vulnerability in Jenkins on new item page5.4 Medium
- jenkinsReflected XSS vulnerability in Jenkins markup formatter preview6.1 Medium
- jenkinsMissing permission check for paths with specific prefix in Jenkins5.3 Medium
- jenkinsStored XSS vulnerability in Jenkins button labels5.4 Medium
- jenkinsExcessive memory allocation in graph URLs leads to denial of service in Jenkins6.5 Medium
- jenkinsArbitrary file existence check in file fingerprints in Jenkins4.3 Medium
- jenkinsPath traversal vulnerability in Jenkins agent names8.0 High
- jenkinsImproper handling of REST API XML deserialization errors in Jenkins8.0 High
- jenkinsXSS vulnerability in Jenkins notification bar5.4 Medium
- jenkinsArbitrary file read vulnerability in workspace browsers in Jenkins6.5 Medium
- owasp json-sanitizerUncaught Exception leading to Denial of Service in json-sanitizer7.5 High
- owasp json-sanitizerArbitrary code injection in json-sanitizer9.8 Critical
- 1c 1c\The Web server in 1C:Enterprise 8 before 8.3.17.1851 sends base64 encoded credentials in the...7.5 High
- tcmu-runner project tcmu-runnerIn Open-iSCSI tcmu-runner 1.3.x, 1.4.x, and 1.5.x through 1.5.2, xcopy_locate_udev in...8.1 High
- sky co., ltd. skysea client viewUntrusted search path vulnerability in the installer of SKYSEA Client View Ver.1.020.05b to Ver...7.8 High
- nec univerge sv8500 firmware, univerge sv9500 firmware, nec corporation univerge sv9500/sv8500 series +2 moreIncorrect implementation of authentication algorithm issue in UNIVERGE SV9500 series from V1 to...7.5 High
- nec univerge sv8500 firmware, univerge sv9500 firmware, nec corporation univerge sv9500/sv8500 series +2 moreUNIVERGE SV9500 series from V1 to V7and SV8500 series from S6 to S8 allows an attacker to execute...9.8 Critical
- nec baseboard management controller, nec corporation multiple nec products where baseboard management controller (bmc) firmware rev1.09 and earlier is applied +1 moreMultiple NEC products (Express5800/T110j, Express5800/T110j-S, Express5800/T110j (2nd-Gen),...9.8 Critical
- soundresearch dchu model software component modulesThe SECOMN service in Sound Research DCHU model software component modules (APO) through 2.0.9.17...7.8 High
- jupyter jupyterhubCross-Site Request Forgery in JupyterHub4.5 Medium
curlOSS-FuzzHeap-buffer-overflow in rtsp_rtp_readwriteNo scoreopen62541OSS-FuzzHeap-use-after-free in UInt32_encodeBinaryNo scoreglibOSS-FuzzHeap-buffer-overflow in g_variant_serialiser_is_stringNo scorelibrawspeedOSS-FuzzHeap-buffer-overflow in rawspeed::TableLookUp::setTableNo scorefreetype2OSS-FuzzHeap-buffer-overflow in pcf_get_encodingsNo score- Show moreLoading…