CVEs published in January 2021
1,871 vulnerabilities, 212 critical, 9 exploited.
- aterm wg2600hp2 firmware, wg2600hp firmware, nec corporation aterm wg2600hp and aterm wg2600hp2 +2 moreCross-site request forgery (CSRF) vulnerability in Aterm WG2600HP firmware Ver1.0.2 and earlier,...8.8 High
- nec corporation aterm wf800hp, aterm wg2600hp firmware +1 moreCross-site scripting vulnerability in Aterm WF800HP firmware Ver1.0.9 and earlier allows remote...6.1 Medium
- infoscience elc analytics, logstorage, infoscience corporation logstorage and elc analytics +2 moreLogstorage version 8.0.0 and earlier, and ELC Analytics version 3.0.0 and earlier allow remote...8.8 High
- accfly 720p firmwareAn issue was discovered on Accfly Wireless Security IR Camera System 720P with software versions...9.8 Critical
- accfly 720p firmwareAn issue was discovered on Accfly Wireless Security IR Camera System 720P with software versions...9.8 Critical
- accfly 720p firmwareAn issue was discovered on Accfly Wireless Security IR Camera System 720P with software versions...9.8 Critical
- accfly 720p firmwareAn issue was discovered on Accfly Wireless Security IR Camera 720P System with software versions...9.8 Critical
- atlassian bambooAffected versions of Atlassian Bamboo allow an unauthenticated remote attacker to view a stack...5.3 Medium
openh264OSS-FuzzUNKNOWN WRITE in WelsDecodeBsNo score- winscpWinSCP before 5.17.10 allows remote attackers to execute arbitrary programs when the URL handler...9.8 Critical
- godaddy node-config-shieldImproper Control of Dynamically-Managed Code Resources in config-shield5.3 Medium
- trend micro housecall for home networks, trend micro, inc. micro housecall for home networks +1 moreA DLL hijacking vulnerability Trend Micro HouseCall for Home Networks version 5.3.1063 and below...7.8 High
- trend micro serverprotect for linux, trendmicro serverprotect +1 moreA memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local...5.5 Medium
- trend micro serverprotect for linux, trendmicro serverprotect +1 moreA memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local...5.5 Medium
- trend micro serverprotect for linux, trendmicro serverprotect +1 moreA memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local...5.5 Medium
- fujielectric v-server, v-simulator +1 moreMultiple stack-based buffer overflow issues have been identified in the way the application...7.8 High
- fujielectric v-server, v-simulator +1 moreMultiple out-of-bounds read issues have been identified in the way the application processes...7.8 High
- fujielectric v-server, v-simulator +1 moreAn uninitialized pointer issue has been identified in the way the application processes project...7.8 High
- fujielectric v-server, v-simulator +1 moreA heap-based buffer overflow issue has been identified in the way the application processes...7.8 High
- fujielectric v-server, v-simulator +1 moreMultiple out-of-bounds write issues have been identified in the way the application processes...7.8 High
- fibranet monitorix, fedoraproject fedora +1 moreMonitorix 3.13.0 allows remote attackers to bypass Basic Authentication in a default installation...9.8 Critical
- apache artemis, apache software foundation activemq artemis, netapp oncommand workflow automation +2 moreFlaw in ActiveMQ Artemis OpenWire support7.5 High
drupal/subgroupPackagistThis module enables you to add groups to other groups in a tree structure where access can be inherited up or down the tree. When you configure Subgroup to have a tree with at least three levels, user…No score- spring by vmware cloud task, vmware spring cloud task +1 morePossibility of SQL Injection in Spring Cloud Task Execution Sorting Query5.1 Medium
- spring cloud data flow, vmware spring cloud data flow +1 morePossibility of SQL Injection in Spring Cloud Data Flow Task Execution Sorting Query5.7 Medium
- dzzofficeattach/ajax.php in DzzOffice through 2.02.1 allows XSS via the editorid parameter.6.1 Medium
- ibm security guardiumIBM Security Guardium 11.2 could allow an authenticated user to gain root access due to improper...8.8 High
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5...6.5 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 is...4.2 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 is...5.4 Medium
- ibm security guardiumIBM Security Guardium 11.2 discloses sensitive information in the response headers that could be...4.3 Medium
- ibm collaborative lifecycle management, engineering lifecycle optimization, engineering test management +14 more +16 moreIBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ibm collaborative lifecycle management, engineering lifecycle optimization, engineering test management +14 more +16 moreIBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ibm collaborative lifecycle management, engineering lifecycle optimization, engineering test management +14 more +16 moreIBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ibm collaborative lifecycle management, engineering lifecycle optimization, engineering test management +14 more +16 moreIBM Jazz Foundation products could allow a remote attacker to hijack the clicking action of the...5.4 Medium
- ibm collaborative lifecycle management, engineering lifecycle optimization, engineering test management +14 more +16 moreIBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- wisc htcondorcondor_credd in HTCondor before 8.9.11 allows Directory Traversal outside the...9.9 Critical
- wisc htcondorHTCondor before 8.9.11 allows a user to submit a job as another user on the system, because of a...8.8 High
- phplistphpList 3.5.3 allows type juggling for login bypass because == is used instead of === for...9.8 Critical
- oscommerceoscommerce v2.3.4.1 has a functional problem in user registration and password rechecking, where...9.8 Critical
- webidsupport webidWeBid 1.2.2 admin/newuser.php has an issue with password rechecking during registration because...9.8 Critical
- nibbleblogdmin/kernel/api/login.class.phpin in nibbleblog v3.7.1c allows type juggling for login bypass...7.5 High
- codiadCodiad Vulnerable to PHP Magic Hash Vulnerability7.5 High
- zblogcn z-blogphpZ-BlogPHP 1.6.0 Valyria is affected by incorrect access control. PHP loose comparison and a magic...7.5 High
- ibm cloud pak for securityIBM Cloud Pak for Security (CP4S) 1.3.0.1 could disclose sensitive information through HTTP...3.1 Low
- ibm cloud pak for securityIBM Cloud Pak for Security (CP4S) 1.4.0.0 is vulnerable to cross-site scripting. This...6.1 Medium
- ibm cloud pak for securityIBM Cloud Pak for Security (CP4S) 1.4.0.0 could allow a remote attacker to obtain sensitive...5.3 Medium
- ibm cloud pak for securityIBM Cloud Pak for Security (CP4S) 1.4.0.0 could allow a remote user to obtain sensitive...5.3 Medium
- ibm cloud pak for securityIBM Cloud Pak for Security (CP4S) 1.3.0.1 and 1.4.0.0 could allow a remote attacker to obtain...5.3 Medium
- bdtask multi-storeStored XSS vulnerability in BDTASK Multi-Store Inventory Management System 1.0 allows a local...4.8 Medium
- Show moreLoading…