CVEs published in January 2021
1,871 vulnerabilities, 212 critical, 9 exploited.
leptonicaOSS-FuzzHeap-buffer-overflow in fdilate_1_56No scorehtslibOSS-FuzzHeap-buffer-overflow in arith_uncompress_toNo scorec-blosc2OSS-FuzzHeap-buffer-overflow in blosc_dNo scorehtslibOSS-FuzzHeap-buffer-overflow in rans_uncompress_to_4x16No scorephp-oojs-oojs-uiMageiaUpdated php-oojs-oojs-ui packages fix security vulnerabilitiesNo score- webank federated ai technology enablerAn issue was discovered in function sync_tree in hetero_decision_tree_guest.py in WeBank FATE ...7.5 High
- apfell project apfellAPfell 1.4 is vulnerable to authenticated reflected cross-site scripting (XSS) in /apiui/command_...5.4 Medium
- google androidIn checkGrantUriPermission of UriGrantsManagerService.java, there is a possible way to access...5.5 Medium
- google androidIn checkGrantUriPermission of UriGrantsManagerService.java, there is a possible permissions...5.5 Medium
- assaabloy yale wipc-303w firmwareThe Yale WIPC-303W 2.21 through 2.31 camera is vulnerable to remote command execution (RCE)...8.8 High
- m&m software fdtcontainer component, emerson rosemount transmitter interface software, m&m software dtmlinspector +5 more +7 moreWAGO/M&M Software Deserialization of untrusted data in fdtCONTAINER component7.3 High
- pepper+fuchs comtrol io-link master, pepperl-fuchs io-link master 4-eip firmware, io-link master 4-pnio firmware +10 more +12 morePepper+Fuchs Comtrol IO-Link Master NULL Pointer Dereference6.6 Medium
- pepper+fuchs comtrol io-link master, pepperl-fuchs io-link master 4-eip firmware, io-link master 4-pnio firmware +10 more +12 morePepper+Fuchs Comtrol IO-Link Master OS Command Injection7.5 High
- pepper+fuchs comtrol io-link master, pepperl-fuchs io-link master 4-eip firmware, io-link master 4-pnio firmware +10 more +12 morePepper+Fuchs Comtrol IO-Link Master Cross-Site Scripting7.5 High
- pepper+fuchs comtrol io-link master, pepperl-fuchs io-link master 4-eip firmware, io-link master 4-pnio firmware +10 more +12 morePepper+Fuchs Comtrol IO-Link Master Cross-Site Request Forgery8.8 High
- caretA specially crafted Markdown document could cause the execution of malicious JavaScript code in...9.8 Critical
- octopus octopusdscCleartext Storage of Sensitive Information6.2 Medium
- bigprof online invoicing system, bigprof-software online-invoicing-system +1 moreXSS in description field7.6 High
- visjs vis-timelineCross-site Scripting (XSS)6.8 Medium
- hedgedocStored XSS in slide mode7.4 High
- pressbooksStored cross-site scripting in PressBooks4.8 Medium
- ibm mq internet pass-thruIBM MQ Internet Pass-Thru 2.1 and 9.2 could allow a remote user to cause a denial of service by...5.9 Medium
- mingsoft mcmsSQL injection without credentials in ming-soft MCMS9.8 Critical
- pyres termod4 firmwareSensitive information disclosure and weak encryption in Pyrescom Termod4 time management devices...7.5 High
- pyres termod4 firmwareLocal file inclusion in Pyrescom Termod4 time management devices before 10.04k allows...6.5 Medium
- pyres termod4 firmwareRemote code execution in Pyrescom Termod4 time management devices before 10.04k allows...8.8 High
stunnelSUSESecurity update for stunnelNo score- hyweb hycms-j1Hyweb HyCMS-J1 - Stored XSS4.6 Medium
- hyweb hycms-j1Hyweb HyCMS-J1 - SQL Injection8.8 High
- qemu, debian linux +1 moreide_atapi_cmd_reply_end in hw/ide/atapi.c in QEMU 5.1.0 allows out-of-bounds read access because...3.9 Low
- nagios xiImproper access and command validation in the Docker config wizard of Nagios XI before 5.8.0...9.8 Critical
- persis human resource management portalThe job posting recommendation form in Persis Human Resource Management Portal (Versions 17.2.00...6.1 Medium
- onlyoffice document server, docs +1 moreDirectory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server...9.8 Critical
matioOSS-FuzzUNKNOWN READ in H5HG__cache_heap_deserializeNo scorematioOSS-FuzzHeap-buffer-overflow in H5F_addr_decode_lenNo scoreflatpakDebianflatpak - regression updateNo score- videolan vlc media playerA NULL-pointer dereference in "Open" in avi.c of VideoLAN VLC Media Player 3.0.11 can a denial of...7.5 High
- videolan vlc media playerA buffer overflow vulnerability in the vlc_input_attachment_New component of VideoLAN VLC Media...7.1 High
- videolan vlc media playerA buffer overflow vulnerability in the AVI_ExtractSubtitle component of VideoLAN VLC Media Player...7.1 High
- videolan vlc media playerA buffer overflow vulnerability in the __Parse_indx component of VideoLAN VLC Media Player 3.0.11...7.1 High
- kaspersky tinycheckTinyCheck before commits 9fd360d and ea53de8 allowed an authenticated attacker to send an HTTP GET request to the crafted URLs.6.5 Medium
- kaspersky tinycheckTinyCheck before commits 9fd360d and ea53de8 was vulnerable to command injection due to insufficient checks of input parameters in several places.9.8 Critical
- rockoaRockOA V1.9.8 is affected by a cross-site scripting (XSS) vulnerability which allows remote...4.8 Medium
- feehi cmsFeehi CMS vulnerable to Cross-site Scripting in Username Field6.1 Medium
- xerox workcentre 3655 firmware, workcentre 3655i firmware, workcentre 5865 firmware +27 more +29 moreAn issue was discovered in certain Xerox WorkCentre products. They do not properly encrypt...7.5 High
- openwrtLuCI in OpenWrt 18.06.0 through 18.06.4 allows stored XSS via a crafted SSID.5.4 Medium
- revive-adserver revive adserverRevive Adserver before 5.1.0 permits any user with a manager account to store possibly malicious...4.8 Medium
- revive-adserver revive adserverRevive Adserver before 5.1.0 is vulnerable to a reflected cross-site scripting (XSS)...6.1 Medium
- revive-adserver revive adserverRevive Adserver before 5.1.0 is vulnerable to open redirects via the `dest`, `oadest`, and/or ...6.1 Medium
- rocket.chatRocket.Chat server before 3.9.0 is vulnerable to a self cross-site scripting (XSS) vulnerability...5.4 Medium
- Show moreLoading…