CVEs published in January 2021
1,871 vulnerabilities, 212 critical, 9 exploited.
mupdfOSS-FuzzUse-of-uninitialized-value in fz_is_empty_irectNo scoreboostOSS-FuzzUNKNOWN READ in boost::re_detail_NUMBER::basic_regex_creator<char, boost::regex_traits<char, booNo scoremupdfOSS-FuzzUse-of-uninitialized-value in MatShaperEval16No scoremupdfOSS-FuzzUse-of-uninitialized-value in template_affine_N_lerpNo scorewgetOSS-FuzzNegative-size-param in get_urls_cssNo scoremupdfOSS-FuzzUse-of-uninitialized-value in evictNo scoremupdfOSS-FuzzUse-of-uninitialized-value in cf2_glyphpath_lineToNo scoremupdfOSS-FuzzUse-of-uninitialized-value in fz_unpack_tileNo scoremupdfOSS-FuzzUse-of-uninitialized-value in jbig2_arith_byteinNo scoremupdfOSS-FuzzHeap-use-after-free in fz_drop_key_storableNo scoreenvoyOSS-FuzzNull-dereference READNo scorematioOSS-FuzzHeap-buffer-overflow in H5MM_xstrdupNo scoremupdfOSS-FuzzUNKNOWN READ in template_affine_color_N_lerpNo scoremupdfOSS-FuzzUse-of-uninitialized-value in jbig2_arith_decodeNo scoregnutlsOSS-FuzzHeap-use-after-free in gnutls_x509_crl_deinitNo scorewiresharkOSS-FuzzUNKNOWN READ in _gcry_aes_cbc_encNo scoremupdfOSS-FuzzUse-of-uninitialized-value in fz_paint_triangleNo scoremupdfOSS-FuzzUse-of-uninitialized-value in fz_unpack_tileNo scorefileOSS-FuzzHeap-buffer-overflow in cdf_file_property_infoNo scoremupdfOSS-FuzzUse-of-uninitialized-value in pdf_load_versionNo scoremupdfOSS-FuzzUse-of-uninitialized-value in pdf_lexNo scoremupdfOSS-FuzzUse-of-uninitialized-value in jbig2_decode_symbol_dictNo scoremupdfOSS-FuzzStack-buffer-overflow in pdf_lookup_cmap_fullNo scorewgetOSS-FuzzHeap-buffer-overflow in xstrdupNo scoremupdfOSS-FuzzUse-of-uninitialized-value in fz_drop_hash_tableNo scoremupdfOSS-FuzzUse-of-uninitialized-value in pdf_lexNo scorewgetOSS-FuzzHeap-buffer-overflow in ftp_parse_winnt_lsNo scorefileOSS-FuzzHeap-buffer-overflow in mprintNo scorematioOSS-FuzzHeap-buffer-overflow in H5HL__fl_deserializeNo scoremupdfOSS-FuzzUse-of-uninitialized-value in cf2_glyphpath_lineToNo scoremupdfOSS-FuzzHeap-use-after-free in add_rangeNo scoremupdfOSS-FuzzHeap-use-after-free in fz_fin_cached_color_converterNo scorelibtsmOSS-FuzzBad-cast to const std::__1::__less<unsigned long, unsigned long> *_startNo scoremupdfOSS-FuzzHeap-use-after-free in fz_drop_key_storableNo scoremupdfOSS-FuzzUse-of-uninitialized-value in fz_keep_impNo scoremupdfOSS-FuzzUse-of-uninitialized-value in sfnt_open_fontNo scorelibtsmOSS-FuzzGlobal-buffer-overflow in vte_write_debugNo scorewiresharkOSS-FuzzGlobal-buffer-overflow in csnStreamDissectorNo scoremupdfOSS-FuzzUse-of-uninitialized-value in _cmsReadHeaderNo score- eclipse hono, the eclipse foundation eclipse hono +1 moreThe Eclipse Hono AMQP and MQTT protocol adapters do not check whether an authenticated gateway...8.8 High
- eclipse hawkbit, the eclipse foundation eclipse hawkbit +1 moreCross-site Scripting in Eclipse Hawkbit6.1 Medium
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 more +4 moreA NULL pointer dereference flaw was found in the Linux kernel’s GPU Nouveau driver functionality...4.4 Medium
- dell avamar, emc avamar server, emc integrated data protection appliance +2 moreDELL EMC Avamar Server, versions 19.1, 19.2, 19.3, contain an OS Command Injection Vulnerability...10.0 Critical
- dell avamar, emc avamar server, emc integrated data protection appliance +2 moreDell EMC Avamar Server, versions 19.1, 19.2, 19.3, contain a Path Traversal Vulnerability in PDM....8.7 High
- dell avamar, emc avamar server, emc integrated data protection appliance +2 moreDELL EMC Avamar Server, versions 19.1, 19.2, 19.3, contain a SQL Injection Vulnerability in...10.0 Critical
- google chrome, chrome media +1 moreUse after free in Media in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to...8.8 High
- google chromeScript injection in iOSWeb in Google Chrome on iOS prior to 84.0.4147.105 allowed a remote...6.1 Medium
- google chromeUse after Free in Payments in Google Chrome on Android prior to 87.0.4280.66 allowed a remote...9.6 Critical
- elastic elasticsearch, oracle communications cloud native core automated test suite +1 moreInsufficiently Protected Credentials in Elasticsearch4.8 Medium
- fortinet fortiwebA blind SQL injection in the user interface of FortiWeb 6.3.0 through 6.3.7 and version before 6...9.8 Critical
- Show moreLoading…