CVEs published in January 2021
1,871 vulnerabilities, 212 critical, 9 exploited.
- juniper junos os evolvedJunos OS Evolved: Receipt of certain valid BGP update packets from BGP peers may cause RPD to core when using REGEX.6.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In bidirectional LSP configurations, on MPLS egress router RPD may core upon receipt of specific malformed RSVP packet.8.8 High
- juniper junos, juniper networks junos os +1 moreNFX250, NFX350, QFX5K Series, EX2300 Series, EX3400 Series, EX4300 Multigigabit, EX4600 Series: Certain genuine traffic received by the Junos OS device will be discarded instead of forwarded.7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: NFX Series, SRX Series: PFE may crash upon receipt of specific packet when SSL Proxy is configured.7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: Dynamic filter fails to match IPv6 prefix5.8 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: dexp Local Privilege Escalation vulnerabilities in SUID binaries7.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: EX and QFX5K Series: Storm Control does not work as expected when Redundant Trunk Group is configured8.6 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series, EX9200 Series: Trio-based MPC memory leak when Integrated Routing and Bridging (IRB) interface is mapped to a VPLS instance or a Bridge-Domain7.5 High
- owncloudownCloud (Core) before 10.5 allows XSS in login page 'forgot password.'6.1 Medium
- presstigers simple board jobDirectory traversal vulnerability in class-simple_job_board_resume_download_handler.php in the...7.7 High
- foliovision fv flowplayer video playerCross-site scripting (XSS) vulnerability in models/list-table.php in the FV Flowplayer Video...5.4 Medium
- imagemagick, fedoraproject fedora, redhat enterprise linux desktop +2 moreIn ImageMagick versions before 7.0.9-0, there are outside the range of representable values of...3.3 Low
- imagemagick, debian linux +1 moreIn ImageMagick, there is an outside the range of representable values of type 'unsigned int' at...3.3 Low
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 12.4. The regex used...4.3 Medium
- gitlabAn attacker could cause a Prometheus denial of service in GitLab 13.7+ by sending an HTTP request...5.3 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 12.1. Incorrect...5.3 Medium
- gitlabInsufficient validation of authentication parameters in GitLab Pages for GitLab 11.5+ allows an...7.3 High
- gitlabA regular expression denial of service issue has been discovered in NuGet API affecting all...4.3 Medium
- erlang erlang\/otp, fedoraproject fedora +1 moreAn issue was discovered in Erlang/OTP before 23.2.2. The ssl application 10.2 accepts and trusts...7.5 High
- solarwinds web help deskSolarWinds Web Help Desk 12.7.0 allows XSS via a Schedule Name.5.4 Medium
- flatcoreAn issue was discovered in flatCore before 2.0.0 build 139. A reflected XSS vulnerability was...4.8 Medium
- flatcoreAn issue was discovered in flatCore before 2.0.0 build 139. A time-based blind SQL injection was...6.5 Medium
- flatcoreAn issue was discovered in flatCore before 2.0.0 build 139. A stored XSS vulnerability was...4.8 Medium
- flatcoreAn issue was discovered in flatCore before 2.0.0 build 139. A local file disclosure vulnerability...4.9 Medium
- enviragallery envira galleryA stored cross-site scripting (XSS) issue in Envira Gallery Lite before 1.8.3.3 allows remote...5.4 Medium
- enviragallery envira galleryA stored cross-site scripting (XSS) issue in Envira Gallery Lite before 1.8.3.3 allows remote...5.4 Medium
fileOSS-FuzzHeap-buffer-overflow in mcopyNo scorelibtsmOSS-FuzzGlobal-buffer-overflow in vte_write_debugNo scorefileOSS-FuzzUNKNOWN READ in mprintNo scorelibtsmOSS-FuzzGlobal-buffer-overflow in vte_write_debugNo scorelibtsmOSS-FuzzGlobal-buffer-overflow in vte_write_debugNo scorelibtsmOSS-FuzzGlobal-buffer-overflow in vte_write_debugNo scorefileOSS-FuzzUNKNOWN READ in file_regexecNo scorelibtsmOSS-FuzzGlobal-buffer-overflow in vte_write_debugNo scoremupdfOSS-FuzzUse-of-uninitialized-value in lex_whiteNo scorewgetOSS-FuzzHeap-buffer-overflow in xstrndupNo scorelcmsOSS-FuzzHeap-buffer-overflow in TetrahedralInterpFloatNo scoremupdfOSS-FuzzUse-of-uninitialized-value in fz_expand_indexed_pixmapNo scoremupdfOSS-FuzzUse-of-uninitialized-value in jbig2_huffman_getNo scoremupdfOSS-FuzzUse-of-uninitialized-value in CachedXFORM4to3No scoremupdfOSS-FuzzUse-of-uninitialized-value in fz_drop_key_storableNo scoremupdfOSS-FuzzStack-buffer-underflow in ps_indexNo scoremupdfOSS-FuzzUNKNOWN READ in jbig2_decode_mmr_initNo scorewiresharkOSS-FuzzGlobal-buffer-overflow in csnStreamDissectorNo scoremupdfOSS-FuzzUNKNOWN READ in jpx_read_imageNo scoremupdfOSS-FuzzUse-of-uninitialized-value in cf2_glyphpath_pushPrevElemNo scoreboostOSS-FuzzUNKNOWN READ in boost::sub_match<std::__1::__wrap_iter<char const*> >::sub_matchNo scoremupdfOSS-FuzzUse-of-uninitialized-value in jbig2_immediate_generic_regionNo scoremupdfOSS-FuzzUse-of-uninitialized-value in fz_adjust_ft_glyph_widthNo scorefileOSS-FuzzHeap-buffer-overflow in mprintNo score- Show moreLoading…