CVEs published in January 2021
1,871 vulnerabilities, 212 critical, 9 exploited.
nphysics3dcrates.ionphysics3d is unmaintainedNo score- digium asteriskAn issue was discovered in res_pjsip_diversion.c in Sangoma Asterisk before 13.38.0, 14.x through...6.5 Medium
- acronis true imageAcronis True Image for Windows prior to 2021 Update 3 allowed local privilege escalation due to a...7.8 High
- mantisbtMantisBT Missing Authorization access check in bug_actiongroup.php6.5 Medium
- mantisbtMantisBT Incorrect Authorization in bug_actiongroup_page.php4.3 Medium
- mantisbtMantisBT Insecure Storage in manage_proj_edit_page.php4.3 Medium
- rsa archerArcher before 6.9 P1 (6.9.0.1) contains an improper access control vulnerability in an API. A...4.9 Medium
- rsa archerArcher before 6.8 P2 (6.8.0.2) is affected by a path exposure vulnerability. A remote...4.3 Medium
- rsa archerArcher before 6.8 P2 (6.8.0.2) is affected by an open redirect vulnerability. A remote privileged...4.6 Medium
- rsa archerArcher before 6.8 P4 (6.8.0.4) contains a stored XSS vulnerability. A remote authenticated...5.3 Medium
- mitel businesscti enterpriseThe chat window of the Mitel BusinessCTI Enterprise (MBC-E) Client for Windows before 6.4.15 and...8.0 High
- mitel micollabA library index page in NuPoint Messenger in Mitel MiCollab before 9.2 FP1 could allow an...9.1 Critical
- mediawikiThe API in the Push extension for MediaWiki through 1.35 did not require an edit token in...8.8 High
- mediawikiThe API in the Push extension for MediaWiki through 1.35 used cleartext for ApiPush credentials,...7.5 High
- iris star practice managementAn improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6...6.5 Medium
- iris star practice managementAn improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6...8.8 High
- iris star practice managementAn improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6...6.5 Medium
- iris starA Cross-Site Request Forgery (CSRF) vulnerability exists in Star Practice Management Web version...8.0 High
- iris star practice managementAn improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6...5.4 Medium
- iris star practice managementAn improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6...6.5 Medium
- istio, redhat openshift service mesh +1 moreRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1.13 security update6.5 Medium
- o-dyn collabtiveCollabtive 3.1 allows XSS when an authenticated user enters an XSS payload into the address...5.4 Medium
- wolfsslDoTls13CertificateVerify in tls13.c in wolfSSL through 4.6.0 does not cease processing for...8.1 High
- phpgurukul daily expense tracker systemPHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the user-profile.php...6.1 Medium
- phpgurukul daily expense tracker systemPHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the add-expense.php...5.4 Medium
- dh2i dxenterprise, dxodyssey +1 moreA path traversal vulnerability in the DxWebEngine component of DH2i DxEnterprise and DxOdyssey...7.5 High
c-blosc2OSS-FuzzHeap-buffer-overflow in blosc_getitemNo scorec-blosc2OSS-FuzzMemcpy-param-overlap in frame_get_usermetaNo score- netapp oncommand unified manager, oncommand unified manager for 7-mode (core package) +1 moreOnCommand Unified Manager Core Package versions prior to 5.2.5 may disclose sensitive account...5.5 Medium
- opendoas project opendoasThere is an unsafe incomplete reset of PATH in OpenDoas 6.6 through 6.8 when changing the user...8.8 High
- aca assuwebDeserialization of untrusted data in the login page of ASSUWEB 359.3 build 1 subcomponent of ACA...9.8 Critical
- hide thread content project thread contentThe Hide-Thread-Content plugin through 2021-01-27 for MyBB allows remote attackers to bypass...7.5 High
- opensolution quick.cart, quick.cms +1 moreOpenSolution Quick.CMS < 6.7 and Quick.Cart < 6.7 allow an authenticated user to perform code...7.2 High
- egavilanmedia phpcrudStored Cross Site Scripting (XSS) vulnerability in EGavilan Media CRUD Operation with PHP, MySQL,...5.4 Medium
- qemuA flaw was found in qemu. A host privilege escalation issue was found in the virtio-fs shared...8.2 High
- keycloak gatekeeper project gatekeeper, louketo keycloak gatekeeper, redhat mobile application platform +2 moreThe logout endpoint /oauth/logout?redirect=url can be abused to redirect logged in users to...6.1 Medium
- keycloakIncorrect Authorization in keycloak5.4 Medium
- moodleMoodle Client side denial of service via personal message5.3 Medium
- testes-codigo testes de codigoMobile application "Testes de Codigo" v11.3 and prior allows stored XSS by injecting a payload in...5.4 Medium
- moodleMoodle Grade information disclosure in grade's external fetch functions4.3 Medium
- moodleMoodle Cross-site Scripting5.4 Medium
- moodleMoodle Vulnerable to Reflected Cross-site Scripting5.4 Medium
- moodleMoodle Arbitrary PHP code execution by site admins via Shibboleth configuration7.2 High
- electronElectron vulnerable to ID collision when routing IPC messages to renderers containing OOPIFs5.4 Medium
- revive-adserver revive adserverRevive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in stats.php via the ...6.1 Medium
- revive-adserver revive adserverRevive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in userlog-index.php...6.1 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.4.0 to 7.4.2 Patch 1 and 7.3.0 to 7.3.3 Patch 7 could allow a remote attacker...6.3 Medium
- ibm mq, mq appliance, websphere mq +2 moreIBM MQ 7.5, 8.0, 9.0, 9.1, 9.2 LTS, and 9.2 CD could allow a remote attacker to execute arbitrary...8.1 High
- open-emr openemrA cross-site request forgery vulnerability exists in the GACL functionality of OpenEMR 5.0.2 and...8.8 High
- aterm wg2600hp2 firmware, wg2600hp firmware, nec corporation aterm wg2600hp and aterm wg2600hp2 +2 moreCross-site scripting vulnerability in Aterm WG2600HP firmware Ver1.0.2 and earlier, and Aterm...6.1 Medium
- Show moreLoading…