# CVEs published 2021-01-26

53 CVEs were published on January 26, 2021: 0 critical, 5 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2013-2512](https://cve.now/CVE-2013-2512.md): The ftpd gem 0.2.1 for Ruby allows remote attackers to execute arbitrary OS commands via shell metacharacters in a LIST or NLST command… (no CVSS, ftpd)
- [CVE-2021-3165](https://cve.now/CVE-2021-3165.md): SmartAgent 3.1.0 allows a ViewOnly attacker to create a SuperUser account via the /#/CampaignManager/users URI. (no CVSS)
- [CVE-2021-3317](https://cve.now/CVE-2021-3317.md): KLog Server through 2.4.1 allows authenticated command injection. (no CVSS)
- [CVE-2021-1070](https://cve.now/CVE-2021-1070.md): NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB, L4T versions prior to 32.5, contains a vulnerability in… (CVSS 7.1, NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2…)
- [CVE-2021-1071](https://cve.now/CVE-2021-1071.md): NVIDIA Tegra kernel in Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB, all L4T versions prior to r32.5, contains… (CVSS 5.6, NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2…)
- [CVE-2020-23776](https://cve.now/CVE-2020-23776.md): A SSRF vulnerability exists in Winmail 6.5 in app.php in the key parameter when HTTPS is on. (no CVSS)
- [CVE-2020-23774](https://cve.now/CVE-2020-23774.md): A reflected XSS vulnerability exists in tohtml/convert.php of Winmail 6.5, which can cause JavaScript code to be executed. (no CVSS)
- [CVE-2021-21271](https://cve.now/CVE-2021-21271.md): Denial of service in TenderMint Core (CVSS 6.5, tendermint · github.com/tendermint/tendermint)
- [CVE-2021-21283](https://cve.now/CVE-2021-21283.md): XSS in Flarum Sticky extension. (CVSS 5.4, flarum sticky · flarum/sticky)
- [CVE-2021-26272](https://cve.now/CVE-2021-26272.md): It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted URL-like text into… (no CVSS, ckeditor4)
- [CVE-2021-26271](https://cve.now/CVE-2021-26271.md): It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted text into the Styles… (no CVSS, ckeditor4-dev)
- [CVE-2021-21278](https://cve.now/CVE-2021-21278.md): Risk of code injection in RSSHub (CVSS 8.6, DIYgod RSSHub · rsshub)
- [CVE-2021-3309](https://cve.now/CVE-2021-3309.md): packages/wekan-ldap/server/ldap.js in Wekan before 4.87 can process connections even though they are not authorized by the Certification… (no CVSS)
- [CVE-2021-3308](https://cve.now/CVE-2021-3308.md): An issue was discovered in Xen 4.12.3 through 4.12.4 and 4.13.1 through 4.14.x. (no CVSS)
- [CVE-2021-22159](https://cve.now/CVE-2021-22159.md): Insider Threat Management Windows Agent Local Privilege Escalation Vulnerability The Proofpoint Insider Threat Management (formerly… (no CVSS)
- [CVE-2020-27295](https://cve.now/CVE-2020-27295.md): The affected product has uncontrolled resource consumption issues, which may allow an attacker to cause a denial-of-service condition on… (no CVSS, OPC UA Tunneller)
- [CVE-2020-27297](https://cve.now/CVE-2020-27297.md): The affected product is vulnerable to a heap-based buffer overflow, which may allow an attacker to manipulate memory with controlled… (no CVSS, OPC UA Tunneller)
- [CVE-2020-27299](https://cve.now/CVE-2020-27299.md): The affected product is vulnerable to an out-of-bounds read, which may allow an attacker to obtain and disclose sensitive data information… (no CVSS, OPC UA Tunneller)
- [CVE-2020-27274](https://cve.now/CVE-2020-27274.md): Some parsing functions in the affected product do not check the return value of malloc and the thread handling the message is forced to… (no CVSS, OPC UA Tunneller)
- [CVE-2020-13582](https://cve.now/CVE-2020-13582.md): A denial-of-service vulnerability exists in the HTTP Server functionality of Micrium uC-HTTP 3.01.00. (CVSS 8.6, Micrium)
- [CVE-2021-23272](https://cve.now/CVE-2021-23272.md): TIBCO BPM Cross Site Scripting (XSS) (CVSS 4.6, TIBCO Software TIBCO BPM Enterprise)
- [CVE-2020-35263](https://cve.now/CVE-2020-35263.md): EgavilanMedia User Registration & Login System 1.0 is affected by SQL injection to the admin panel, which may allow arbitrary code… (no CVSS)
- [CVE-2020-23449](https://cve.now/CVE-2020-23449.md): newbee-mall all versions are affected by incorrect access control to remotely gain privileges through NewBeeMallIndexConfigServiceImpl.java. (no CVSS)
- [CVE-2020-23448](https://cve.now/CVE-2020-23448.md): newbee-mall all versions are affected by incorrect access control to remotely gain privileges through AdminLoginInterceptor.java. (no CVSS)
- [CVE-2020-23447](https://cve.now/CVE-2020-23447.md): newbee-mall 1.0 is affected by cross-site scripting in shop-cart/settle. (no CVSS)
- [CVE-2020-8295](https://cve.now/CVE-2020-8295.md): A wrong check in Nextcloud Server 19 and prior allowed to perform a denial of service attack when resetting the password for a user. (no CVSS, Nextcloud Server)
- [CVE-2020-8293](https://cve.now/CVE-2020-8293.md): A missing input validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows users to store unlimited data in workflow rules… (no CVSS, Nextcloud Server)
- [CVE-2020-4949](https://cve.now/CVE-2020-4949.md): IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML… (CVSS 8.2, IBM WebSphere Application Server)
- [CVE-2020-4889](https://cve.now/CVE-2020-4889.md): IBM Spectrum Scale 5.0.0 through 5.0.5.4 and 5.1.0 could allow a local user to poison log files which could impact support and development… (CVSS 4.0, IBM Spectrum Scale)
- [CVE-2020-9492](https://cve.now/CVE-2020-9492.md): In Apache Hadoop 3.2.0 to 3.2.1, 3.0.0-alpha1 to 3.1.3, and 2.0.0-alpha to 2.10.0, WebHDFS client might send SPNEGO authorization header… (no CVSS, Apache Hadoop · org.apache.hadoop:hadoop-common)
- [CVE-2020-27284](https://cve.now/CVE-2020-27284.md): TPEditor (v1.98 and prior) is vulnerable to two out-of-bounds write instances in the way it processes project files, allowing an attacker… (no CVSS, TPEditor)
- [CVE-2020-27280](https://cve.now/CVE-2020-27280.md): A use after free issue has been identified in the way ISPSoft(v3.12 and prior) processes project files, allowing an attacker to craft a… (no CVSS, ISPSoft)
- [CVE-2020-27288](https://cve.now/CVE-2020-27288.md): An untrusted pointer dereference has been identified in the way TPEditor(v1.98 and prior) processes project files, allowing an attacker to… (no CVSS, TPEditor)
- [CVE-2020-25169](https://cve.now/CVE-2020-25169.md): Reolink P2P Cameras (no CVSS, Reolink RLC-4XX series · Reolink RLC-5XX series +1)
- [CVE-2020-25173](https://cve.now/CVE-2020-25173.md): Reolink P2P Cameras (no CVSS, Reolink RLC-4XX series · Reolink RLC-5XX series +1)
- [CVE-2020-17522](https://cve.now/CVE-2020-17522.md): When ORT (now via atstccfg) generates ip\_allow.config files in Apache Traffic Control 3.0.0 to 3.1.0 and 4.0.0 to 4.1.0, those files… (no CVSS, Apache Traffic Control · github.com/apache/trafficcontrol)
- [CVE-2021-21615](https://cve.now/CVE-2021-21615.md): Jenkins 2.275 and LTS 2.263.2 allows reading arbitrary files using the file browser for workspaces and archived artifacts due to a… (no CVSS, Jenkins project Jenkins · org.jenkins-ci.main:jenkins-core)
- [CVE-2021-3297](https://cve.now/CVE-2021-3297.md): On Zyxel NBG2105 V1.00(AAGU.2)C0 devices, setting the login cookie to 1 provides administrator access. (no CVSS)
- [CVE-2021-25864](https://cve.now/CVE-2021-25864.md): node-red-contrib-huemagic 3.0.0 is affected by hue/assets/..%2F Directory Traversal.in the res.sendFile API, used in file hue-magic.js, to… (no CVSS, node-red-contrib-huemagic)
- [CVE-2021-25863](https://cve.now/CVE-2021-25863.md): Open5GS 2.1.3 listens on 0.0.0.0:3000 and has a default password of 1423 for the admin account. (no CVSS)
- [CVE-2020-36011](https://cve.now/CVE-2020-36011.md): A cross-site scripting (XSS) issue in Add Patient Form in QDOCS Smart Hospital Management System 3.1 allows a remote attacker to inject… (no CVSS)
- [CVE-2021-3291](https://cve.now/CVE-2021-3291.md): Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element (within the modules edit page)… (no CVSS, zencart/zencart)
- [CVE-2021-3304](https://cve.now/CVE-2021-3304.md): Sagemcom F@ST 3686 v2 3.495 devices have a buffer overflow via a long sessionKey to the goform/login URI. (no CVSS)
- [CVE-2021-3223](https://cve.now/CVE-2021-3223.md): Node-RED-Dashboard before 2.26.2 allows ui\_base/js/..%2f directory traversal to read files. (no CVSS, node-red-dashboard)
- [CVE-2021-26266](https://cve.now/CVE-2021-26266.md): cPanel before 92.0.9 allows a Reseller to bypass the suspension lock (SEC-578). (no CVSS)
- [CVE-2021-26267](https://cve.now/CVE-2021-26267.md): cPanel before 92.0.9 allows a MySQL user (who has an old-style password hash) to bypass suspension (SEC-579). (no CVSS)
- [CVE-2021-3114](https://cve.now/CVE-2021-3114.md): In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect outputs, related to an underflow of the… (no CVSS, stdlib)
- [CVE-2021-3115](https://cve.now/CVE-2021-3115.md): Go before 1.14.14 and 1.15.x before 1.15.7 on Windows is vulnerable to Command Injection and remote code execution when using the "go get"… (no CVSS, toolchain)
- [CVE-2020-29001](https://cve.now/CVE-2020-29001.md): An issue was discovered on Geeni GNC-CW028 Camera 2.7.2, Geeni GNC-CW025 Doorbell 2.9.5, Merkury MI-CW024 Doorbell 2.9.6, and Merkury… (no CVSS)
- [CVE-2020-29000](https://cve.now/CVE-2020-29000.md): An issue was discovered on Geeni GNC-CW013 doorbell 1.8.1 devices. (no CVSS)
- [CVE-2020-28999](https://cve.now/CVE-2020-28999.md): An issue was discovered in Apexis Streaming Video Web Application on Geeni GNC-CW013 doorbell 1.8.1 devices. (no CVSS)
- [CVE-2020-28998](https://cve.now/CVE-2020-28998.md): An issue was discovered on Geeni GNC-CW013 doorbell 1.8.1 devices. (no CVSS)
- [CVE-2021-3156](https://cve.now/CVE-2021-3156.md): Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root (CVSS 7.8, KEV)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2021-01-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.