CVEs published in January 2021
1,871 vulnerabilities, 212 critical, 9 exploited.
- netapp clustered data ontapClustered Data ONTAP versions prior to 9.3P20 and 9.5 are susceptible to a vulnerability which...6.5 Medium
- kaspersky tinycheckIn TinyCheck before commits 9fd360d and ea53de8, the installation script of the tool contained hard-coded credentials to the backend part of the tool. This information could be used by an attacker for…9.8 Critical
- fasterxml jackson-databind, apache nifi, debian linux +6 more +8 moreDeserialization of untrusted data in jackson-databind8.1 High
- sooil anydana-a firmware, anydana-i firmware, diabecare rs firmware +2 moreSOOIL Developments Co Ltd DiabecareRS,AnyDana-i & AnyDana-A, the communication protocol of the...5.7 Medium
- sooil anydana-a firmware, anydana-i firmware, diabecare rs firmware +2 moreSOOIL Developments CoLtd DiabecareRS, AnyDana-i, AnyDana-A, The communication protocol of the...5.7 Medium
- sooil anydana-a firmware, anydana-i firmware, diabecare rs firmware +2 moreSOOIL Developments CoLtd DiabecareRS, AnyDana-i ,AnyDana-A, communication protocol of the insulin...5.7 Medium
- misp-project mispMISP 2.4.136 has XSS via a crafted URL to the app/View/Elements/global_menu.ctp user homepage...6.1 Medium
- microfocus application lifecycle managementXML External Entity Injection vulnerability in Micro Focus Application Lifecycle Management ...8.1 High
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager before 14 build 14880 allows an authenticated SQL...8.8 High
resource-agentsMageiaUpdated resource-agents packages fix security vulnerabilitiesNo score- misp-project mispThe default setting of MISP 2.4.136 did not enable the requirements (aka...9.1 Critical
- misp-project mispMISP 2.4.136 has Stored XSS in the galaxy cluster view via a cluster name to app/View...6.1 Medium
- misp-project mispMISP 2.4.136 has XSS via galaxy cluster element values to app/View/GalaxyElements/ajax/index.ctp....6.1 Medium
- ibm planning analyticsIBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused...5.9 Medium
- ibm planning analyticsIBM Planning Analytics 2.0 could allow an attacker to obtain sensitive information due to an...5.3 Medium
- ibm planning analyticsIBM Planning Analytics 2.0 allows web pages to be stored locally which can be read by another...4.0 Medium
- files fat clientFiles.com Fat Client 3.3.6 allows authentication bypass because the client continues to have...7.5 High
- fastify fastify-csrfCross-site Request Forgery (CSRF)5.9 Medium
- jointjsDenial of Service (DoS)5.9 Medium
- jointjsPrototype Pollution7.3 High
- socket socket.ioInsecure Defaults5.3 Medium
- d-link dcs-5220 firmware** UNSUPPORTED WHEN ASSIGNED ** D-Link DCS-5220 devices have a buffer overflow. NOTE: This...8.0 High
- mutt, debian linux, fedoraproject fedora +2 morerfc822.c in Mutt through 2.0.4 allows remote attackers to cause a denial of service (mailbox...6.5 Medium
- anchorcms anchor cmsA CSRF vulnerability exists in Anchor CMS 0.12.7 anchor/views/users/edit.php that can change the...8.8 High
- acquia mauticMautic stored Cross-site Scripting (XSS)9.0 Critical
- mauticMautic stored Cross-site Scripting (XSS)9.0 Critical
- microchip libraries for applications, ietf public key cryptography standards \#1 +1 moreBleichenbacher's attack on PKCS #1 v1.5 padding for RSA in Microchip Libraries for Applications...5.9 Medium
- pixelimityPixelimity 1.0 has cross-site request forgery via the admin/setting.php data [Password] parameter.6.8 Medium
- amazon aws sdk for javascipt, aws shared configuration file loader +1 morePrototype Pollution7.3 High
- greensock animation platformPrototype Pollution7.5 High
- immer project immerPrototype Pollution7.5 High
- hgiga oaklouds openid, oaksv20 oaklouds-mol course v3 2.0, oaksv30 oaklouds-mol course v3 3.0 +2 moreHGiga OAKloud Portal - SQL injection -28.8 High
- hgiga oaklouds openid, oaksv20 oaklouds-document v3 2.0, oaksv30 oaklouds-document v3 3.0 +2 moreHGiga OAKloud Portal - SQL injection -19.8 Critical
- hgiga oaklouds portal, oaksv20 oaklouds-document v3, oaksv30 oaklouds-document v3 +2 moreHGiga OAKloud Portal - Security Misconfiguration5.3 Medium
- debian linux, linux kernel, fedoraproject fedora +2 more** DISPUTED ** fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8, when there is an NFS export...6.5 Medium
- weseek growi, weseek, inc. growi v4.2 series +1 moreCross-site scripting vulnerability in GROWI (v4.2 Series) versions prior to v4.2.3 allows remote...6.1 Medium
- atlassian confluence server, confluence data center +1 moreAffected versions of Atlassian Confluence Server and Data Center allow remote attackers to impact...6.5 Medium
tesseract-ocrOSS-FuzzHeap-use-after-free in __libcpp_strpbrkNo score- python, debian linux, fedoraproject fedora +10 more +12 morePython 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may...9.8 Critical
- dnsmasq, debian linux, fedoraproject fedora +2 moreA flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in...5.9 Medium
- dnsmasq, arista eos, debian linux +1 more +3 moreA flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check...3.7 Low
- dnsmasq, arista eos, debian linux +1 more +3 moreA flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query,...3.7 Low
- dnsmasq, arista eos, debian linux +1 more +3 moreA flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query,...3.7 Low
- dnsmasq, debian linux, fedoraproject fedora +2 moreA flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in...5.9 Medium
- dnsmasq, debian linux, fedoraproject fedora +2 moreA flaw was found in dnsmasq before 2.83. A buffer overflow vulnerability was discovered in the...8.1 High
- dnsmasq, debian linux, fedoraproject fedora +2 moreA flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in...8.1 High
- libsdl simple directmedia layer, debian linux, fedoraproject fedora +2 moreSDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer over-read in...5.4 Medium
- libsdl simple directmedia layer, debian linux, fedoraproject fedora +1 more +3 moreSDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy...7.8 High
- debian linux, drupal, fedoraproject fedora +1 more +3 moreDirectory Traversal in Archive_Tar7.5 High
- mantisbt source integrationAn issue was discovered in the Source Integration plugin before 2.4.1 for MantisBT. An attacker...5.3 Medium
- Show moreLoading…