CVEs published in January 2021
1,871 vulnerabilities, 212 critical, 9 exploited.
- google chrome, microsoft edge chromium +1 moreInappropriate implementation in iframe sandbox in Google Chrome prior to 88.0.4324.96 allowed a...6.5 Medium
- google chromeUse after free in DevTools in Google Chrome prior to 88.0.4324.96 allowed a local attacker to...8.6 High
- google chrome, microsoft edge chromium +1 moreInappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote...6.5 Medium
- google chrome, microsoft edge chromium +1 moreInsufficient policy enforcement in WebView in Google Chrome on Android prior to 88.0.4324.96...6.5 Medium
- google chrome, microsoft edge chromium +1 moreInappropriate implementation in Performance API in Google Chrome prior to 88.0.4324.96 allowed a...6.5 Medium
- google chrome, microsoft edge chromium +1 moreIncorrect security UI in Page Info in Google Chrome on iOS prior to 88.0.4324.96 allowed a remote...6.5 Medium
- google chrome, microsoft edge chromium +1 moreInsufficient policy enforcement in Downloads in Google Chrome prior to 88.0.4324.96 allowed an...6.5 Medium
- google chrome, microsoft edge chromium +1 moreInappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote...9.6 Critical
- google chrome, microsoft edge chromium +1 moreInsufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed...6.5 Medium
- google chrome, microsoft edge chromium +1 moreInsufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed...6.5 Medium
- google chrome, microsoft edge chromium +1 moreInsufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed...6.5 Medium
- google chrome, microsoft edge chromium +1 moreHeap buffer overflow in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to...8.8 High
- google chrome, microsoft edge chromium +1 moreInsufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a...8.8 High
- google chrome, microsoft edge chromium +1 moreInsufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a...6.5 Medium
- google chrome, microsoft edge chromium +1 moreInsufficient policy enforcement in File System API in Google Chrome on Windows prior to 88.0.4324...8.1 High
- google chrome, microsoft edge chromium +1 morePotential user after free in Speech Recognizer in Google Chrome on Android prior to 88.0.4324.96...9.6 Critical
- google chrome, microsoft edge chromium +1 moreInsufficient data validation in File System API in Google Chrome prior to 88.0.4324.96 allowed a...6.5 Medium
- google chrome, microsoft edge chromium +1 moreUse after free in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to...8.8 High
- google chrome, microsoft edge chromium +1 moreUse after free in Omnibox in Google Chrome on Linux prior to 88.0.4324.96 allowed a remote...9.6 Critical
- google chrome, microsoft edge chromium +1 moreUse after free in WebSQL in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to...8.8 High
- google chrome, microsoft edge chromium +1 moreUse after free in Media in Google Chrome prior to 88.0.4324.96 allowed a remote attacker who had...8.8 High
- google chrome, microsoft edge chromium +1 moreInsufficient data validation in V8 in Google Chrome prior to 88.0.4324.96 allowed a remote...8.8 High
- google chromeInsufficient policy enforcement in Cryptohome in Google Chrome prior to 88.0.4324.96 allowed a...7.8 High
- zyxel nbg2105 firmwareOn Zyxel NBG2105 V1.00(AAGU.2)C0 devices, setting the login cookie to 1 provides administrator...7.8 High
- dgtl huemagicPath Traversal in node-red-contrib-huemagic7.5 High
- open5gsOpen5GS 2.1.3 listens on 0.0.0.0:3000 and has a default password of 1423 for the admin account.8.8 High
- qdocs smart hospitalA cross-site scripting (XSS) issue in Add Patient Form in QDOCS Smart Hospital Management System...4.8 Medium
- zen-cart zen cartZen Cart vulnerable to authenticated remote code execution7.2 High
- sagemcom f\@st 3686 firmwareSagemcom F@ST 3686 v2 3.495 devices have a buffer overflow via a long sessionKey to the goform...9.8 Critical
- nodered node-red-dashboardPath traversal in Node-RED-Dashboard7.5 High
- cpanelcPanel before 92.0.9 allows a Reseller to bypass the suspension lock (SEC-578).7.5 High
- cpanelcPanel before 92.0.9 allows a MySQL user (who has an old-style password hash) to bypass...7.5 High
- golang go, debian linux, fedoraproject fedora +2 more +4 moreIn Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect...6.5 Medium
- golang go, fedoraproject fedora, netapp cloud insights telegraf agent +1 more +3 moreGo before 1.14.14 and 1.15.x before 1.15.7 on Windows is vulnerable to Command Injection and...7.5 High
- merkuryinnovations geeni gnc-cw025 firmware, geeni gnc-cw028 firmware, merkury mi-cw017 firmware +1 more +3 moreAn issue was discovered on Geeni GNC-CW028 Camera 2.7.2, Geeni GNC-CW025 Doorbell 2.9.5, Merkury...7.2 High
- mygeeni gnc-cw013 firmwareAn issue was discovered on Geeni GNC-CW013 doorbell 1.8.1 devices. A vulnerability exists in the...7.2 High
- mygeeni gnc-cw013 firmwareAn issue was discovered in Apexis Streaming Video Web Application on Geeni GNC-CW013 doorbell 1.8...7.2 High
- mygeeni gnc-cw013 firmwareAn issue was discovered on Geeni GNC-CW013 doorbell 1.8.1 devices. A vulnerability exists in the...9.8 Critical
htslibOSS-FuzzHeap-buffer-overflow in safe_itf8_getNo scoreghostscriptOSS-FuzzHeap-use-after-free in sampled_data_sampleNo score- sudo, beyondtrust privilege management for mac, privilege management for unix\/linux +21 more +23 moreSudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via ...7.8 High
- mozilla firefoxMozilla developers reported memory safety bugs present in Firefox 84. Some of these bugs showed...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. Some...8.8 High
- mozilla firefoxWhen sharing geolocation during an active WebRTC share, Firefox could have reset the webRTC...4.3 Medium
- mozilla firefoxIncorrect use of the '<RowCountChanged>' method could have led to a user-after-poison and a...8.8 High
- mozilla firefox, debian linux +1 moreFurther techniques that built on the slipstream research combined with a malicious webpage could...7.4 High
- mozilla firefox, firefox esr, thunderbird +2 morePerforming garbage collection on re-declared JavaScript variables resulted in a user-after-poison...8.8 High
- mozilla firefoxThe browser could have been confused into transferring a screen sharing state into another tab,...6.5 Medium
- mozilla firefoxAn ambiguous file picker design could have confused users who intended to select and upload a...6.5 Medium
- mozilla firefoxThe browser could have been confused into transferring a pointer lock state into another tab,...6.1 Medium
- Show moreLoading…