CVEs published in January 2021
1,871 vulnerabilities, 212 critical, 9 exploited.
- oracle workflow, data integrator, enterprise manager ops center +2 moreVulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist)....8.2 High
- oracle mysql, oracle corporation mysql server, netapp oncommand insight +2 more +4 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: PAM Auth Plugin)....4.9 Medium
- oracle business intelligence publisher, oracle corporation bi publisher (formerly xml publisher) +1 moreVulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: BI...7.6 High
- oracle mysql, fedoraproject fedora, mariadb +4 more +6 moreVulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions...5.9 Medium
- oracle mysql, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions...4.2 Medium
- oracle business intelligence, oracle corporation business intelligence enterprise edition +1 moreVulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion...4.7 Medium
- oracle server bizlogic script, oracle corporation siebel core - server framework +1 moreVulnerability in the Siebel Core - Server BizLogic Script product of Oracle Siebel CRM (component...4.3 Medium
- oracle business intelligence, oracle corporation business intelligence enterprise edition +1 moreVulnerability in the Business Intelligence Enterprise Edition product of Oracle Fusion Middleware...5.4 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication)....4.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....4.9 Medium
- oracle database server, oracle corporation database - enterprise edition +1 moreVulnerability in the Unified Audit component of Oracle Database Server. Supported versions that...2.4 Low
- oracle zfs storage appliance, enterprise manager ops center, hyperion infrastructure technology +1 more +3 moreVulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: RAS...5.0 Medium
- oracle hospitality reporting and analyticsVulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and...8.1 High
- oracle weblogic server, agile engineering data management, hyperion infrastructure technology +1 more +3 moreVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web...2.4 Low
- oracle weblogic serverVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web...6.5 Medium
- oracle weblogic server, enterprise repository +1 moreVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web...9.8 Critical
- oracle database server, enterprise manager ops center, hyperion infrastructure technology +2 more +4 moreVulnerability in the Java VM component of Oracle Database Server. Supported versions that are...4.8 Medium
- oracle coherence, utilities framework +1 moreVulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core...9.8 Critical
- the-guild graphql-toolsCommand Injection6.3 Medium
- eclipse vert.x-webCross-Site Request Forgery in Vert.x-Web framework8.8 High
- prestashopThe store system in PrestaShop 1.7.7.0 allows time-based boolean SQL injection via the module...9.8 Critical
out-referencecrates.io`out_reference::Out::from_raw` should be `unsafe`No score- raw-cpuid project raw-cpuidOptional `Deserialize` implementations lacking validation9.8 Critical
- derive-com-impl project derive-com-implQueryInterface should call AddRef before returning pointer7.5 High
- raw-cpuid project raw-cpuidError on unsupported architectures in raw-cpuid5.5 Medium
- raw-cpuid project raw-cpuidSoundness issue in raw-cpuid7.5 High
- xwikiCross Site Scripting (XSS) in XWiki5.4 Medium
- rocketgenius gravityformsGravity Forms stored HTML injection vulnerability5.4 Medium
- rocketgenius gravityformsGravity Forms stored Cross-Site Scripting (XSS) vulnerability in the survey feature5.4 Medium
- rocketgenius gravityformsGravity Forms stored Cross-Site Scripting (XSS) vulnerability4.8 Medium
- tufin securechangeTufin SecureChange prior to R19.3 HF3 and R20-1 HF1 are vulnerable to stored XSS. The successful...6.1 Medium
- tufin securechangeTufin SecureChange prior to R19.3 HF3 and R20-1 HF1 are vulnerable to stored XSS. The successful...4.8 Medium
- nagios log serverNagios Log Server 2.1.7 contains a cross-site scripting (XSS) vulnerability in /nagioslogserver...6.1 Medium
- open-emr openemrOpenEMR 5.0.1 allows an authenticated attacker to upload and execute malicious PHP scripts...8.8 High
- vtiger crmVtiger CRM v7.2.0 allows an attacker to display hidden files, list directories by using ...6.5 Medium
- vtiger crmReflected XSS in Vtiger CRM v7.2.0 in vtigercrm/index.php? through the view parameter can result...6.1 Medium
- medintuxReflected XSS in Medintux v2.16.000 CCAM.php by manipulating the mot1 parameter can result in an...6.1 Medium
- fhemLocal file inclusion in FHEM 6.0 allows in fhem/FileLog_logWrapper file parameter can allow an...7.5 High
c-blosc2OSS-FuzzHeap-use-after-free in ZSTD_freeDDictNo scoremupdfOSS-FuzzHeap-buffer-overflow in pdf_get_xref_entryNo score- stockdio historical chartThe Stockdio Historical Chart plugin before 2.8.1 for WordPress is affected by Cross Site...6.1 Medium
- sooil anydana-a firmware, anydana-i firmware, diabecare rs firmware +2 moreIn SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, the communication protocol...5.7 Medium
- sooil anydana-a firmware, anydana-i firmware, diabecare rs firmware +2 moreIn SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, a client-side control...6.5 Medium
- sooil anydana-a firmware, anydana-i firmware, diabecare rs firmware +2 moreIn SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, a client-side control...6.5 Medium
- apache guacamoleUpdated guacd packages fix security vulnerabilities4.3 Medium
- sooil anydana-a firmware, anydana-i firmware, diabecare rs firmware +2 moreIn SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, the communication protocol...8.8 High
- sooil anydana-a, anydana-i, dana diabecare rs firmware +2 moreIn SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, an information disclosure...6.5 Medium
- sooil anydana-a firmware, anydana-i firmware, diabecare rs firmware +2 moreIn SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, a hard-coded physician PIN...6.8 Medium
- acquia mauticXSS vulnerability leveraged through referrers could allow un-authorized admin access in Mautic9.6 Critical
- flarum framework, laravel +1 moreQuery Binding Exploitation in Laravel7.2 High
- Show moreLoading…