CVEs published in January 2021
1,871 vulnerabilities, 212 critical, 9 exploited.
- mcafee agent, mcafee, llc mcafee agent +1 moreImproper Authorization vulnerability in MA5.5 Medium
- bottlepy bottle, debian linux +1 moreWeb Cache Poisoning6.8 Medium
- opendesign drawings software development kit, siemens comos, jt2go +1 more +3 moreAn issue was discovered in Open Design Alliance Drawings SDK before 2021.12. A memory allocation...7.8 High
- opendesign drawings software development kit, siemens comos, jt2go +1 more +3 moreAn issue was discovered in Open Design Alliance Drawings SDK before 2021.12. A memory corruption...7.8 High
- opendesign drawings software development kit, siemens comos, jt2go +1 more +3 moreAn issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A NULL pointer...7.8 High
- opendesign drawings software development kit, siemens comos, jt2go +1 more +3 moreAn issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A NULL pointer...7.8 High
- opendesign drawings software development kit, siemens comos, jt2go +1 more +3 moreAn issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A NULL pointer...7.8 High
- opendesign drawings software development kit, siemens comos, jt2go +1 more +3 moreAn issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A stack-based buffer...7.8 High
- opencatsOpenCATS through 0.9.5-3 unsafely deserializes index.php?m=activity requests, leading to remote...9.8 Critical
- opencatsOpenCATS through 0.9.5-3 has multiple Cross-site Scripting (XSS) issues.6.1 Medium
- asus dsl-n14u b1 firmwareAn issue was discovered on ASUS DSL-N14U-B1 1.1.2.3_805 devices. An attacker can upload arbitrary...7.5 High
- atlassian crucible, fisheye +1 moreAffected versions of Atlassian Fisheye & Crucible allow remote attackers to browse local files...5.3 Medium
- freedesktop gst-plugins-bad, gstreamer +1 moreA flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when...9.8 Critical
- quali cloudshellAn issue was discovered in Quali CloudShell 9.3. An XSS vulnerability in the login page allows an...6.1 Medium
chromium-browser-stableMageiaUpdated chromium-browser-stable packages fix security vulnerabilitiesNo scorecaribouMageiaUpdated caribou packages fix a security vulnerabilityNo score- lazy-init project lazy-initOut of bounds read in lazy-init5.3 Medium
- netsia seba\+Netsia SEBA+ through 0.16.1 build 70-e669dcd7 allows remote attackers to discover session cookies...7.5 High
c-blosc2OSS-FuzzHeap-buffer-overflow in blosc_getitemNo scoreopen-iscsiopenSUSESecurity update for open-iscsiNo scoreluaOSS-FuzzHeap-use-after-free in lua_closeslotNo scoreopenh264OSS-FuzzHeap-buffer-overflow in WelsDec::NeedErrorConNo score- malwarebytesAn issue was discovered in Malwarebytes before 4.0 on macOS. A malicious application was able to...7.0 High
- dockerDocker Desktop Community before 2.5.0.0 on macOS mishandles certificate checking, leading to...7.8 High
- onedev project onedevPre-Auth Arbitrary File Upload10.0 Critical
- onedev project onedevPre-Auth Access token leak8.6 High
- onedev project onedevPost-Auth Unsafe Deserialization on BasePage (AJAX)9.6 Critical
- onedev project onedevPost-Auth Unsafe Yaml deserialization9.6 Critical
- onedev project onedevPost-Auth Arbitrary Code execution via Groovy script injection9.6 Critical
- onedev project onedevPost-Auth External Entity Expansion (XXE)7.7 High
- onedev project onedevZipSlip Arbitrary File Upload7.7 High
- onedev project onedevPre-Auth Unsafe Deserialization on AttachmentUploadServet10.0 Critical
- onedev project onedevPre-Auth Unsafe Deserialization on KubernetesResource10.0 Critical
- onedev project onedevPre-Auth SSTI via Bean validation message tampering10.0 Critical
- arubanetworks airwave glassThere is a vulnerability caused by insufficient input validation that allows for arbitrary...9.8 Critical
- arubanetworks airwave glassThere is a vulnerability caused by unsafe Java deserialization that allows for arbitrary command...9.8 Critical
- arubanetworks airwave glassMultiple authenticated remote command executions are possible in Airwave Glass before 1.3.3 via...7.2 High
- arubanetworks airwave glassIn Aruba AirWave Glass before 1.3.3, there is a Server-Side Request Forgery vulnerability through...7.5 High
- git-lfs, git large file storage project large file storage +1 moreGit LFS can execute a Git binary from the current directory on Windows7.2 High
- juniper junos, juniper networks junos os +1 moreJunos OS: telnetd.real Local Privilege Escalation vulnerabilities in SUID binaries7.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Upon receipt of certain protocol packets with invalid payloads a self-propagating Denial of Service may occur.7.4 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX Series: Traffic loop Denial of Service (DoS) upon receipt of specific IP multicast traffic6.5 Medium
- juniper junos spaceJunos Space: Shared secrets stored in recoverable format and directly exposed through the UI6.8 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Command injection vulnerability in 'request system software' CLI command6.7 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Command injection vulnerability in license-check daemon7.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: EX Series and QFX Series: Memory leak issue processing specific DHCP packets7.4 High
- juniper junos, juniper networks junos os +1 moreJunos OS: EX Series, QFX Series, SRX Branch Series, MX Series: Memory leak in packet forwarding engine due to 802.1X authenticator port interface flaps6.5 Medium
- juniper contrail networkingContrail Networking: Administrator credentials are exposed in a plaintext file5.0 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Upon receipt of a specific BGP FlowSpec message network traffic may be disrupted.10.0 Critical
- juniper junos, juniper networks junos os +1 moreJunos OS: Privilege escalation in J-Web due to arbitrary command and code execution via information disclosure from another users active session6.8 Medium
- Show moreLoading…