CVEs published January 13, 2021
172 CVEs were published on January 13, 2021: 0 critical, 76 high.
- Published
- 172
- Critical
- 0
- High
- 76
- Medium
- 47
- Low
- 1
- Unrated
- 48
- Now in CISA KEV
- 0
- Fix available
- 26
Most affected products
- Cisco Small Business RV Series Router Firmware
- 74
- Jenkins project Jenkins · org.jenkins-ci.main:jenkins-core
- 10
- IBM Security Guardium Insights
- 8
- EMUI;Magic UI
- 7
- Cisco Firepower Management Center
- 4
- Combodo iTop
- 4
- Cisco Firepower Threat Defense Software
- 3
- IBM Security Guardium Data Encryption
- 3
- Xiaomi router AX1800 · Xiaomi route RM1800
- 3
- Adobe Magento Commerce
- 2
High 76
- CVE-2021-21007Uncontrolled search path element vulnerability in Illustrator 25.0 could lead to arbitrary code executionAdobe Illustrator
- CVE-2021-21006Heap buffer overflow when handling crafted font file could lead to arbitrary code executionAdobe Photoshop
- CVE-2021-21008Uncontrolled Search Path Element vulnerability in Animate 21.0Adobe Animate
- CVE-2021-21009Server-side request forgery (SSRF) in Campaign Classic could lead to sensitive information disclosureAdobe Campaign
- CVE-2021-21010Uncontrolled search path element in Adobe InCopyAdobe InCopy
- CVE-2021-21011Uncontrolled Search Path Element in Adobe Captivate 2019Adobe Captivate
- CVE-2021-21013Magento Commerce Insecure Direct Object Reference Could Lead To Information DisclosureAdobe Magento Commerce
- CVE-2021-1360Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1307Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1144Cisco Connected Mobile Experiences Privilege Escalation VulnerabilityCisco Connected Mobile Experiences
- CVE-2021-1146Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Command Injection VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1147Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Command Injection VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1148Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Command Injection VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1149Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Command Injection VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1150Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Command Injection VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1159Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1160Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1161Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1162Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1163Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1164Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1165Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1166Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1167Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1168Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1169Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1170Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1171Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1172Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1173Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1174Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1175Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1176Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1199Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1198Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1197Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1196Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1195Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1194Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1193Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1192Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1191Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1190Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1188Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1187Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1186Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1185Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1184Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1183Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1182Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1181Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1180Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1179Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1178Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1177Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1237Cisco AnyConnect Secure Mobility Client for Windows DLL Injection VulnerabilityCisco AnyConnect Secure Mobility Client
- CVE-2021-1217Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1216Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1215Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1214Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1213Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1212Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1211Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1210Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1209Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1208Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1207Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1206Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1205Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1204Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1203Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1202Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1201Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1200Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1189Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2020-26262Loopback bypass in Coturncoturn
Medium, low and unrated 96
- CVE-2020-27265KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All verPTC Kepware KEPServerEX; ThingWorx Industrial Connectivity…
- CVE-2020-27263KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All verPTC Kepware KEPServerEX · ThingWorx Kepware Server +5
- CVE-2020-27267KEPServerEX v6.0 to v6.9, ThingWorx Kepware Server v6.8 and v6.9, ThingWorx Industrial Connectivity (all versions), OPC-Aggregator (all versPTC Kepware KEPServerEX · ThingWorx Kepware Server +5
- CVE-2013-1053Insecure crypto for storing passwordsCanonical remote-login-service
- CVE-2021-21012Magento Commerce Insecure Direct Object Reference Vulnerability Could Lead To Sensitive Information DisclosureAdobe Magento Commerce
- CVE-2020-14102There is command injection when ddns processes the hostname, which causes the administrator user to obtain the root privilege of the router.Xiaomi router AX1800 · Xiaomi route RM1800
- CVE-2020-14098The login verification can be bypassed by using the problem that the time is not synchronized after the router restarts.Xiaomi router AX1800 · Xiaomi route RM1800
- CVE-2020-14097Wrong nginx configuration, causing specific paths to be downloaded without authorization.Xiaomi router AX6
- CVE-2020-14101The data collection SDK of the router web management interface caused the leakage of the token.Xiaomi router AX1800 · Xiaomi route RM1800
- CVE-2020-1866There is an out-of-bounds read vulnerability in several products.NIP6800;S12700;S2700;S5700;S6700;S7700;S9700;Secospace USG6…
- CVE-2020-1865There is an out-of-bounds read vulnerability in Huawei CloudEngine products.CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEn…
- CVE-2020-9209There is a privilege escalation vulnerability in SMC2.0 product.SMC2.0
- CVE-2020-9203There is a resource management errors vulnerability in Huawei P30.HUAWEI P30
- CVE-2020-9138There is a heap-based buffer overflow vulnerability in some Huawei Smartphone, Successful exploit of this vulnerability can cause process exEMUI;Magic UI
- CVE-2020-9139There is a improper input validation vulnerability in some Huawei Smartphone.Successful exploit of this vulnerability can cause memory accesEMUI;Magic UI
- CVE-2020-9140There is a vulnerability with buffer access with incorrect length value in some Huawei Smartphone.Unauthorized users may trigger code executEMUI;Magic UI
- CVE-2020-9141There is a improper privilege management vulnerability in some Huawei smartphone.EMUI;Magic UI
- CVE-2020-9143There is a missing authentication vulnerability in some Huawei smartphone.Successful exploitation of this vulnerability may lead to low-sensEMUI;Magic UI
- CVE-2020-9142There is a heap base buffer overflow vulnerability in some Huawei smartphone.Successful exploitation of this vulnerability can cause heap ovEMUI;Magic UI
- CVE-2021-1310Cisco Webex Meetings Open Redirect VulnerabilityCisco Webex Meetings
- CVE-2021-1311Cisco Webex Meetings and Cisco Webex Meetings Server Host Key Brute Forcing VulnerabilityCisco WebEx Meetings Server
- CVE-2021-1267Cisco Firepower Management Center XML Entity Expansion VulnerabilityCisco Firepower Management Center
- CVE-2021-1145Cisco StarOS for Cisco ASR 5000 Series Routers Arbitrary File Read VulnerabilityCisco ASR 5000 Series Software
- CVE-2021-1151Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Stored Cross-Site Scripting VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1152Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Stored Cross-Site Scripting VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1153Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Stored Cross-Site Scripting VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1154Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Stored Cross-Site Scripting VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1155Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Stored Cross-Site Scripting VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1156Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Stored Cross-Site Scripting VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1157Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Stored Cross-Site Scripting VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1158Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Stored Cross-Site Scripting VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1126Cisco Firepower Management Center Information Disclosure VulnerabilityCisco Firepower Management Center
- CVE-2021-1127Cisco Enterprise NFV Infrastructure Software Cross-Site Scripting VulnerabilityCisco Enterprise NFV Infrastructure Software
- CVE-2021-1130Cisco DNA Center Cross-Site Scripting VulnerabilityCisco Digital Network Architecture Center
- CVE-2021-1131Cisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Denial of Service VulnerabilityCisco Video Surveillance 8000 Series IP Cameras
- CVE-2021-1143Cisco Connected Mobile Experiences User Enumeration VulnerabilityCisco Connected Mobile Experiences
- CVE-2021-1258Cisco AnyConnect Secure Mobility Client Arbitrary File Read VulnerabilityCisco AnyConnect Secure Mobility Client
- CVE-2021-1245Cisco Finesse OpenSocial Gadget Editor Cross-Site Scripting VulnerabilityCisco Unified Customer Voice Portal
- CVE-2021-1246Cisco Finesse OpenSocial Gadget Editor Unauthenticated Access VulnerabilityCisco Unified Customer Voice Portal
- CVE-2021-1242Cisco Webex Teams Shared File Manipulation VulnerabilityCisco Webex Teams
- CVE-2021-1240Cisco Proximity Desktop for Windows DLL Hijacking VulnerabilityCisco Proximity
- CVE-2021-1239Cisco Firepower Management Center Stored Cross-Site Scripting VulnerabilitiesCisco Firepower Management Center
- CVE-2021-1238Cisco Firepower Management Center Stored Cross-Site Scripting VulnerabilitiesCisco Firepower Management Center
- CVE-2021-1236Multiple Cisco Products Snort Application Detection Engine Policy Bypass VulnerabilityCisco Firepower Threat Defense Software
- CVE-2021-1226Cisco Unified Communications Products Information Disclosure VulnerabilityCisco Emergency Responder
- CVE-2021-1224Multiple Cisco Products Snort TCP Fast Open File Policy Bypass VulnerabilityCisco Firepower Threat Defense Software
- CVE-2021-1223Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass VulnerabilityCisco Firepower Threat Defense Software
- CVE-2020-35578An issue was discovered in the Manage Plugins page in Nagios XI before 5.8.0.
- CVE-2020-9145There is an Out-of-bounds Write vulnerability in some Huawei smartphone.EMUI;Magic UI
- CVE-2020-27488Loxone Miniserver devices with firmware before 11.1 (aka 11.1.9.3) are unable to use an authentication method that is based on the "signatur
- CVE-2020-9144There is a heap overflow vulnerability in some Huawei smartphone, attackers can exploit this vulnerability to cause heap overflows due to imEMUI · Magic UI
- CVE-2020-4604IBM Security Guardium Insights 2.0.2 stores user credentials in plain in clear text which can be read by a local privileged user.IBM Security Guardium Insights
- CVE-2020-4602IBM Security Guardium Insights 2.0.2 stores user credentials in plain in clear text which can be read by a local user.IBM Security Guardium Insights
- CVE-2020-4600IBM Security Guardium Insights 2.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message iIBM Security Guardium Insights
- CVE-2020-4599IBM Security Guardium Insights 2.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message iIBM Security Guardium Insights
- CVE-2020-4597IBM Security Guardium Insights 2.0.2 does not set the secure attribute on authorization tokens or session cookies.IBM Security Guardium Insights
- CVE-2020-4596IBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensiIBM Security Guardium Insights
- CVE-2020-4595IBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensiIBM Security Guardium Insights
- CVE-2020-4594IBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensiIBM Security Guardium Insights
- CVE-2021-3032PAN-OS: Configuration secrets for log forwarding may be logged in system logsPalo Alto Networks PAN-OS
- CVE-2021-3031PAN-OS: Information exposure in Ethernet data frame construction (Etherleak)Palo Alto Networks PAN-OS
- CVE-2020-23653An insecure unserialize vulnerability was discovered in ThinkAdmin versions 4.x through 6.x in app/admin/controller/api/Update.php and app/wzoujingli/thinkadmin
- CVE-2019-4702IBM Security Guardium Data Encryption (GDE) 3.0.0.2 specifies permissions for a security-critical resource in a way that allows that resourcIBM Security Guardium Data Encryption
- CVE-2019-4687IBM Security Guardium Data Encryption (GDE) 3.0.0.2 stores sensitive information in URL parameters.IBM Security Guardium Data Encryption
- CVE-2019-4160IBM Security Guardium Data Encryption (GDE) 3.0.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decryIBM Security Guardium Data Encryption
- CVE-2020-15221XSS in the breadcrumbsCombodo iTop
- CVE-2020-15220Session fixationCombodo iTop
- CVE-2020-15219SQL query displayed on portal errorCombodo iTop
- CVE-2020-35687PHPFusion version 9.03.90 is vulnerable to CSRF attack which leads to deletion of all shoutbox messages by the attacker on behalf of the log
- CVE-2020-15218Admin pages are cached and can be embeddedCombodo iTop
- CVE-2021-3028git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution.git-big-picture
- CVE-2021-21613Jenkins TICS Plugin 2020.3.0.6 and earlier does not escape TICS service responses, resulting in a cross-site scripting (XSS) vulnerability eJenkins project Jenkins TICS Plugin · io.jenkins.plugins:ti…
- CVE-2021-21614Jenkins Bumblebee HP ALM Plugin 4.1.5 and earlier stores credentials unencrypted in its global configuration file on the Jenkins controller Jenkins project Jenkins Bumblebee HP ALM Plugin · org.jenki…
- CVE-2021-21612Jenkins TraceTronic ECU-TEST Plugin 2.23.1 and earlier stores credentials unencrypted in its global configuration file on the Jenkins controJenkins project Jenkins TraceTronic ECU-TEST Plugin · de.tr…
- CVE-2021-21610Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not implement any restrictions for the URL rendering a formatted preview of markup pJenkins project Jenkins · org.jenkins-ci.main:jenkins-core
- CVE-2021-21611Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not escape display names and IDs of item types shown on the New Item page, resultingJenkins project Jenkins · org.jenkins-ci.main:jenkins-core
- CVE-2021-21609Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not correctly match requested URLs to the list of always accessible paths, allowing Jenkins project Jenkins · org.jenkins-ci.main:jenkins-core
- CVE-2021-21607Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not limit sizes provided as query parameters to graph-rendering URLs, allowing attacJenkins project Jenkins · org.jenkins-ci.main:jenkins-core
- CVE-2021-21608Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not escape button labels in the Jenkins UI, resulting in a cross-site scripting (XSSJenkins project Jenkins · org.jenkins-ci.main:jenkins-core
- CVE-2021-21605Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows users with Agent/Configure permission to choose agent names that cause Jenkins to Jenkins project Jenkins · org.jenkins-ci.main:jenkins-core
- CVE-2021-21606Jenkins 2.274 and earlier, LTS 2.263.1 and earlier improperly validates the format of a provided fingerprint ID when checking for its existeJenkins project Jenkins · org.jenkins-ci.main:jenkins-core
- CVE-2021-21604Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows attackers with permission to create or configure various objects to inject craftedJenkins project Jenkins · org.jenkins-ci.main:jenkins-core
- CVE-2021-21602Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows reading arbitrary files using the file browser for workspaces and archived artifacJenkins project Jenkins · org.jenkins-ci.main:jenkins-core
- CVE-2021-21603Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not escape notification bar response contents, resulting in a cross-site scripting (Jenkins project Jenkins · org.jenkins-ci.main:jenkins-core
- CVE-2021-23900OWASP json-sanitizer before 1.2.2 can output invalid JSON or throw an undeclared exception for crafted input.com.mikesamuel:json-sanitizer
- CVE-2021-23899OWASP json-sanitizer before 1.2.2 may emit closing SCRIPT tags and CDATA section delimiters for crafted input.com.mikesamuel:json-sanitizer
- CVE-2021-3131The Web server in 1C:Enterprise 8 before 8.3.17.1851 sends base64 encoded credentials in the creds URL parameter.
- CVE-2021-3139In Open-iSCSI tcmu-runner 1.3.x, 1.4.x, and 1.5.x through 1.5.2, xcopy_locate_udev in tcmur_cmd_handler.c lacks a check for transport-layer
- CVE-2021-20616Untrusted search path vulnerability in the installer of SKYSEA Client View Ver.1.020.05b to Ver.16.001.01g allows an attacker to gain privilSky Co. SKYSEA Client View
- CVE-2020-5686Incorrect implementation of authentication algorithm issue in UNIVERGE SV9500 series from V1 to V7and SV8500 series from S6 to S8 allows an NEC UNIVERGE SV9500/SV8500 series
- CVE-2020-5633Multiple NEC products (Express5800/T110j, Express5800/T110j-S, Express5800/T110j (2nd-Gen), Express5800/T110j-S (2nd-Gen), iStorage NS100Ti,Multiple NEC products where Baseboard Management Controller…
- CVE-2020-5685UNIVERGE SV9500 series from V1 to V7and SV8500 series from S6 to S8 allows an attacker to execute arbitrary OS commands or cause a denial-ofNEC UNIVERGE SV9500/SV8500 series
- CVE-2020-35686The SECOMN service in Sound Research DCHU model software component modules (APO) through 2.0.9.17, delivered on HP Windows 10 computers, may
- CVE-2020-36191JupyterHub 1.1.0 allows CSRF in the admin panel via a request that lacks an _xsrf field, as demonstrated by a /hub/api/user request (to add jupyterhub
- CVE-2020-28374In drivers/target/target_core_xcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking in the LIO SCSI target code can be
- CVE-2021-21252Regular expression denial of service in jquery-validationjquery-validation · jQuery.Validation