CVEs published in January 2021
1,871 vulnerabilities, 212 critical, 9 exploited.
- mozilla firefox, firefox esr, thunderbird +2 moreUsing the new logical assignment operators in a JavaScript switch statement could have caused a...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreIf a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking...4.3 Medium
- kenny2github report, oracle communications cloud native core network slice selection function, communications pricing design center +2 moreCSRF in MediaWiki Report extension5.3 Medium
- company cs-c2shw firmwareRostelecom CS-C2SHW 5.0.082.1 is affected by: Bash command injection. The camera reads...6.8 Medium
- company cs-c2shw firmwareDenial of Service vulnerability in Rostelecom CS-C2SHW 5.0.082.1. AgentGreen service has a bug in...7.5 High
- company cs-c2shw firmwareHeap overflow with full parsing of HTTP respose in Rostelecom CS-C2SHW 5.0.082.1. AgentUpdater...9.8 Critical
- company cs-c2shw firmwareBash injection vulnerability and bypass of signature verification in Rostelecom CS-C2SHW 5.0.082...9.8 Critical
- faststone image viewerFastStone Image Viewer 7.5 has an out-of-bounds write (via a crafted image file) at FSViewer.exe...7.8 High
- faststone image viewerFastStone Image Viewer 7.5 has an out-of-bounds write (via a crafted image file) at FSViewer.exe...7.8 High
- faststone image viewerFastStone Image Viewer 7.5 has an out-of-bounds write (via a crafted image file) at FSViewer.exe...5.5 Medium
- panasonic fpwin proanasonic FPWIN Pro7.8 High
- bosch fsm-2500, fsm-5000, fsm-2500 firmware +1 more +3 morePassword Hash With Insufficient Computational Effort in the Database of Bosch FSM-2500 Server and Bosch FSM-5000 Server4.4 Medium
- bosch fsm-2500, fsm-5000, fsm-2500 firmware +1 more +3 moreHard-coded Credentials in the Database of Bosch FSM-2500 Server and Bosch FSM-5000 Server10.0 Critical
- deislabs oraszip slip in ORAS7.7 High
- hackoladeAn elevation of privilege vulnerability exists in Hackolade versions prior 4.2.0 on Windows has...7.8 High
- schneider-electric ecostruxure power build - rapsodyA CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the...7.8 High
- schneider-electric ecostruxure power build - rapsodyA CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the...7.8 High
- schneider-electric pro-face blue, ecostruxure operator terminal expert +1 moreA CWE-20: Improper Input Validation vulnerability exists in EcoStruxure™ Operator Terminal Expert...9.8 Critical
- google androidIn A2DP_GetCodecType of a2dp_codec_config, there is a possible out-of-bounds read due to improper...7.5 High
- linux kernel, redhat enterprise linux +1 moreA flaw incorrect umask during file or directory modification in the Linux kernel NFS (network...4.9 Medium
- local services search engine management system project services search engine management systemLocal Service Search Engine Management System 1.0 has a vulnerability through authentication...9.8 Critical
- textpatternTextpattern 4.8.4 is affected by cross-site scripting (XSS) in the Body parameter.4.8 Medium
- 4homepages 4images4images Image Gallery Management System 1.7.11 is affected by cross-site scripting (XSS) in the...4.8 Medium
- student result management system project result management systemStudent Result Management System In PHP With Source Code is affected by SQL injection. An...9.1 Critical
stunnelopenSUSESecurity update for stunnelNo score- openldap, apple mac os x, macos +4 more +6 moreAn integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the...7.5 High
- openldap, apple mac os x, macos +4 more +6 moreA flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the...7.5 High
- openldap, apple mac os x, macos +4 more +6 moreA flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd...7.5 High
- openldap, apple macos, debian linux +3 more +5 moreA flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the...7.5 High
- openldap, apple mac os x, macos +4 more +6 moreA flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and...7.5 High
- openldap, apple macos, debian linux +3 more +5 moreAn integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the...7.5 High
- openldap, apple mac os x, macos +4 more +6 moreA flaw was discovered in ldap_X509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the...7.5 High
- openldap, apache bookkeeper, apple mac os x +5 more +7 moreA flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X...7.5 High
- openldap, apple macos, debian linux +3 more +5 moreA flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the...7.5 High
- openldap, apple mac os x, macos +4 more +6 moreA flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return...7.5 High
- apache nutch, netapp snap creator framework +1 moreAn XML external entity (XXE) injection vulnerability exists in the Nutch DmozParser9.1 Critical
- apache software foundation servicecomb-java-chassis, apache java chassis +1 moreApache ServiceComb Yaml remote deserialization vulnerability8.8 High
- acdsee photo studio 2021PlugIns\IDE_ACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User Mode Write Access...7.8 High
- acdsee photo studio 2021PlugIns\IDE_ACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User Mode Write Access...7.8 High
suricataOSS-FuzzHeap-use-after-free in DatasetAddNo scoreqtOSS-FuzzGlobal-buffer-overflow in QSvgSwitch::drawNo scoredebian-security-supportDebiandebian-security-support - security updateNo score- tp-link tl-wr841n firmwareA Command Injection issue in the traceroute feature on TP-Link TL-WR841N V13 (JP) with firmware...8.8 High
- tenda ac5 firmwareA Stored Cross-site scripting (XSS) vulnerability in /main.html Wifi Settings in Tenda AC5 AC1200...5.4 Medium
- spotweb project spotwebSQL injection exists in Spotweb 1.4.9 because the notAllowedCommands protection mechanism is...9.8 Critical
htslibOSS-FuzzHeap-buffer-overflow in int32_get_blkNo scorehtslibOSS-FuzzHeap-buffer-overflow in cram_xpack_decode_initNo scorehtslibOSS-FuzzHeap-buffer-overflow in safe_ltf8_getNo scoregst-plugins-bad1.0Debiangst-plugins-bad1.0 - regression updateNo score- ti code composer studio intgrated development environmentjxbrowser in TI Code Composer Studio IDE 8.x through 10.x before 10.1.1 does not verify X.509...5.3 Medium
- Show moreLoading…