# CVEs published 2021-01-13

172 CVEs were published on January 13, 2021: 0 critical, 76 high. Days are UTC.

- [CVE-2020-27265](https://cve.now/CVE-2020-27265.md): KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All ver (no CVSS, PTC Kepware KEPServerEX; ThingWorx Industrial Connectivity…)
- [CVE-2020-27263](https://cve.now/CVE-2020-27263.md): KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All ver (no CVSS, PTC Kepware KEPServerEX · ThingWorx Kepware Server +5)
- [CVE-2020-27267](https://cve.now/CVE-2020-27267.md): KEPServerEX v6.0 to v6.9, ThingWorx Kepware Server v6.8 and v6.9, ThingWorx Industrial Connectivity (all versions), OPC-Aggregator (all vers (no CVSS, PTC Kepware KEPServerEX · ThingWorx Kepware Server +5)
- [CVE-2013-1053](https://cve.now/CVE-2013-1053.md): Insecure crypto for storing passwords (CVSS 5.5, Canonical remote-login-service)
- [CVE-2021-21007](https://cve.now/CVE-2021-21007.md): Uncontrolled search path element vulnerability in Illustrator 25.0 could lead to arbitrary code execution (CVSS 7.0, Adobe Illustrator)
- [CVE-2021-21006](https://cve.now/CVE-2021-21006.md): Heap buffer overflow when handling crafted font file could lead to arbitrary code execution (CVSS 8.6, Adobe Photoshop)
- [CVE-2021-21008](https://cve.now/CVE-2021-21008.md): Uncontrolled Search Path Element vulnerability in Animate 21.0 (CVSS 7.0, Adobe Animate)
- [CVE-2021-21009](https://cve.now/CVE-2021-21009.md): Server-side request forgery (SSRF) in Campaign Classic could lead to sensitive information disclosure (CVSS 8.6, Adobe Campaign)
- [CVE-2021-21010](https://cve.now/CVE-2021-21010.md): Uncontrolled search path element in Adobe InCopy (CVSS 7.0, Adobe InCopy)
- [CVE-2021-21011](https://cve.now/CVE-2021-21011.md): Uncontrolled Search Path Element in Adobe Captivate 2019 (CVSS 7.0, Adobe Captivate)
- [CVE-2021-21013](https://cve.now/CVE-2021-21013.md): Magento Commerce Insecure Direct Object Reference Could Lead To Information Disclosure (CVSS 8.1, Adobe Magento Commerce)
- [CVE-2021-21012](https://cve.now/CVE-2021-21012.md): Magento Commerce Insecure Direct Object Reference Vulnerability Could Lead To Sensitive Information Disclosure (CVSS 5.3, Adobe Magento Commerce)
- [CVE-2020-14102](https://cve.now/CVE-2020-14102.md): There is command injection when ddns processes the hostname, which causes the administrator user to obtain the root privilege of the router. (no CVSS, Xiaomi router AX1800 · Xiaomi route RM1800)
- [CVE-2020-14098](https://cve.now/CVE-2020-14098.md): The login verification can be bypassed by using the problem that the time is not synchronized after the router restarts. (no CVSS, Xiaomi router AX1800 · Xiaomi route RM1800)
- [CVE-2020-14097](https://cve.now/CVE-2020-14097.md): Wrong nginx configuration, causing specific paths to be downloaded without authorization. (no CVSS, Xiaomi router AX6)
- [CVE-2020-14101](https://cve.now/CVE-2020-14101.md): The data collection SDK of the router web management interface caused the leakage of the token. (no CVSS, Xiaomi router AX1800 · Xiaomi route RM1800)
- [CVE-2020-1866](https://cve.now/CVE-2020-1866.md): There is an out-of-bounds read vulnerability in several products. (no CVSS, NIP6800;S12700;S2700;S5700;S6700;S7700;S9700;Secospace USG6…)
- [CVE-2020-1865](https://cve.now/CVE-2020-1865.md): There is an out-of-bounds read vulnerability in Huawei CloudEngine products. (no CVSS, CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEn…)
- [CVE-2020-9209](https://cve.now/CVE-2020-9209.md): There is a privilege escalation vulnerability in SMC2.0 product. (no CVSS, SMC2.0)
- [CVE-2020-9203](https://cve.now/CVE-2020-9203.md): There is a resource management errors vulnerability in Huawei P30. (no CVSS, HUAWEI P30)
- [CVE-2020-9138](https://cve.now/CVE-2020-9138.md): There is a heap-based buffer overflow vulnerability in some Huawei Smartphone, Successful exploit of this vulnerability can cause process ex (no CVSS, EMUI;Magic UI)
- [CVE-2020-9139](https://cve.now/CVE-2020-9139.md): There is a improper input validation vulnerability in some Huawei Smartphone.Successful exploit of this vulnerability can cause memory acces (no CVSS, EMUI;Magic UI)
- [CVE-2020-9140](https://cve.now/CVE-2020-9140.md): There is a vulnerability with buffer access with incorrect length value in some Huawei Smartphone.Unauthorized users may trigger code execut (no CVSS, EMUI;Magic UI)
- [CVE-2020-9141](https://cve.now/CVE-2020-9141.md): There is a improper privilege management vulnerability in some Huawei smartphone. (no CVSS, EMUI;Magic UI)
- [CVE-2020-9143](https://cve.now/CVE-2020-9143.md): There is a missing authentication vulnerability in some Huawei smartphone.Successful exploitation of this vulnerability may lead to low-sens (no CVSS, EMUI;Magic UI)
- [CVE-2020-9142](https://cve.now/CVE-2020-9142.md): There is a heap base buffer overflow vulnerability in some Huawei smartphone.Successful exploitation of this vulnerability can cause heap ov (no CVSS, EMUI;Magic UI)
- [CVE-2021-1360](https://cve.now/CVE-2021-1360.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1310](https://cve.now/CVE-2021-1310.md): Cisco Webex Meetings Open Redirect Vulnerability (CVSS 4.7, Cisco Webex Meetings)
- [CVE-2021-1311](https://cve.now/CVE-2021-1311.md): Cisco Webex Meetings and Cisco Webex Meetings Server Host Key Brute Forcing Vulnerability (CVSS 5.4, Cisco WebEx Meetings Server)
- [CVE-2021-1307](https://cve.now/CVE-2021-1307.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1267](https://cve.now/CVE-2021-1267.md): Cisco Firepower Management Center XML Entity Expansion Vulnerability (CVSS 4.3, Cisco Firepower Management Center)
- [CVE-2021-1144](https://cve.now/CVE-2021-1144.md): Cisco Connected Mobile Experiences Privilege Escalation Vulnerability (CVSS 8.8, Cisco Connected Mobile Experiences)
- [CVE-2021-1145](https://cve.now/CVE-2021-1145.md): Cisco StarOS for Cisco ASR 5000 Series Routers Arbitrary File Read Vulnerability (CVSS 6.5, Cisco ASR 5000 Series Software)
- [CVE-2021-1146](https://cve.now/CVE-2021-1146.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Command Injection Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1147](https://cve.now/CVE-2021-1147.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Command Injection Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1148](https://cve.now/CVE-2021-1148.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Command Injection Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1149](https://cve.now/CVE-2021-1149.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Command Injection Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1150](https://cve.now/CVE-2021-1150.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Command Injection Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1151](https://cve.now/CVE-2021-1151.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Stored Cross-Site Scripting Vulnerabilities (CVSS 4.8, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1152](https://cve.now/CVE-2021-1152.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Stored Cross-Site Scripting Vulnerabilities (CVSS 4.8, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1153](https://cve.now/CVE-2021-1153.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Stored Cross-Site Scripting Vulnerabilities (CVSS 4.8, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1154](https://cve.now/CVE-2021-1154.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Stored Cross-Site Scripting Vulnerabilities (CVSS 4.8, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1155](https://cve.now/CVE-2021-1155.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Stored Cross-Site Scripting Vulnerabilities (CVSS 4.8, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1156](https://cve.now/CVE-2021-1156.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Stored Cross-Site Scripting Vulnerabilities (CVSS 4.8, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1157](https://cve.now/CVE-2021-1157.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Stored Cross-Site Scripting Vulnerabilities (CVSS 4.8, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1158](https://cve.now/CVE-2021-1158.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Stored Cross-Site Scripting Vulnerabilities (CVSS 4.8, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1159](https://cve.now/CVE-2021-1159.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1160](https://cve.now/CVE-2021-1160.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1161](https://cve.now/CVE-2021-1161.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1162](https://cve.now/CVE-2021-1162.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1163](https://cve.now/CVE-2021-1163.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1164](https://cve.now/CVE-2021-1164.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1165](https://cve.now/CVE-2021-1165.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1166](https://cve.now/CVE-2021-1166.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1167](https://cve.now/CVE-2021-1167.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1168](https://cve.now/CVE-2021-1168.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1169](https://cve.now/CVE-2021-1169.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1170](https://cve.now/CVE-2021-1170.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1171](https://cve.now/CVE-2021-1171.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1172](https://cve.now/CVE-2021-1172.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1173](https://cve.now/CVE-2021-1173.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1174](https://cve.now/CVE-2021-1174.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1175](https://cve.now/CVE-2021-1175.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1176](https://cve.now/CVE-2021-1176.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1199](https://cve.now/CVE-2021-1199.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1198](https://cve.now/CVE-2021-1198.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1197](https://cve.now/CVE-2021-1197.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1196](https://cve.now/CVE-2021-1196.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1195](https://cve.now/CVE-2021-1195.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1194](https://cve.now/CVE-2021-1194.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1193](https://cve.now/CVE-2021-1193.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1192](https://cve.now/CVE-2021-1192.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1191](https://cve.now/CVE-2021-1191.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1190](https://cve.now/CVE-2021-1190.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1188](https://cve.now/CVE-2021-1188.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1187](https://cve.now/CVE-2021-1187.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1186](https://cve.now/CVE-2021-1186.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1185](https://cve.now/CVE-2021-1185.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1184](https://cve.now/CVE-2021-1184.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1183](https://cve.now/CVE-2021-1183.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1182](https://cve.now/CVE-2021-1182.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1181](https://cve.now/CVE-2021-1181.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1180](https://cve.now/CVE-2021-1180.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1179](https://cve.now/CVE-2021-1179.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1178](https://cve.now/CVE-2021-1178.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1177](https://cve.now/CVE-2021-1177.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1126](https://cve.now/CVE-2021-1126.md): Cisco Firepower Management Center Information Disclosure Vulnerability (CVSS 5.5, Cisco Firepower Management Center)
- [CVE-2021-1127](https://cve.now/CVE-2021-1127.md): Cisco Enterprise NFV Infrastructure Software Cross-Site Scripting Vulnerability (CVSS 5.4, Cisco Enterprise NFV Infrastructure Software)
- [CVE-2021-1130](https://cve.now/CVE-2021-1130.md): Cisco DNA Center Cross-Site Scripting Vulnerability (CVSS 4.8, Cisco Digital Network Architecture Center)
- [CVE-2021-1131](https://cve.now/CVE-2021-1131.md): Cisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Denial of Service Vulnerability (CVSS 6.5, Cisco Video Surveillance 8000 Series IP Cameras)
- [CVE-2021-1143](https://cve.now/CVE-2021-1143.md): Cisco Connected Mobile Experiences User Enumeration Vulnerability (CVSS 4.3, Cisco Connected Mobile Experiences)
- [CVE-2021-1258](https://cve.now/CVE-2021-1258.md): Cisco AnyConnect Secure Mobility Client Arbitrary File Read Vulnerability (CVSS 5.5, Cisco AnyConnect Secure Mobility Client)
- [CVE-2021-1245](https://cve.now/CVE-2021-1245.md): Cisco Finesse OpenSocial Gadget Editor Cross-Site Scripting Vulnerability (CVSS 6.5, Cisco Unified Customer Voice Portal)
- [CVE-2021-1246](https://cve.now/CVE-2021-1246.md): Cisco Finesse OpenSocial Gadget Editor Unauthenticated Access Vulnerability (CVSS 6.5, Cisco Unified Customer Voice Portal)
- [CVE-2021-1242](https://cve.now/CVE-2021-1242.md): Cisco Webex Teams Shared File Manipulation Vulnerability (CVSS 4.3, Cisco Webex Teams)
- [CVE-2021-1240](https://cve.now/CVE-2021-1240.md): Cisco Proximity Desktop for Windows DLL Hijacking Vulnerability (CVSS 4.8, Cisco Proximity)
- [CVE-2021-1239](https://cve.now/CVE-2021-1239.md): Cisco Firepower Management Center Stored Cross-Site Scripting Vulnerabilities (CVSS 4.8, Cisco Firepower Management Center)
- [CVE-2021-1238](https://cve.now/CVE-2021-1238.md): Cisco Firepower Management Center Stored Cross-Site Scripting Vulnerabilities (CVSS 4.8, Cisco Firepower Management Center)
- [CVE-2021-1237](https://cve.now/CVE-2021-1237.md): Cisco AnyConnect Secure Mobility Client for Windows DLL Injection Vulnerability (CVSS 7.8, Cisco AnyConnect Secure Mobility Client)
- [CVE-2021-1236](https://cve.now/CVE-2021-1236.md): Multiple Cisco Products Snort Application Detection Engine Policy Bypass Vulnerability (CVSS 4.0, Cisco Firepower Threat Defense Software)
- [CVE-2021-1226](https://cve.now/CVE-2021-1226.md): Cisco Unified Communications Products Information Disclosure Vulnerability (CVSS 4.3, Cisco Emergency Responder)
- [CVE-2021-1224](https://cve.now/CVE-2021-1224.md): Multiple Cisco Products Snort TCP Fast Open File Policy Bypass Vulnerability (CVSS 5.8, Cisco Firepower Threat Defense Software)
- [CVE-2021-1223](https://cve.now/CVE-2021-1223.md): Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass Vulnerability (CVSS 5.8, Cisco Firepower Threat Defense Software)
- [CVE-2021-1217](https://cve.now/CVE-2021-1217.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1216](https://cve.now/CVE-2021-1216.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1215](https://cve.now/CVE-2021-1215.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1214](https://cve.now/CVE-2021-1214.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1213](https://cve.now/CVE-2021-1213.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1212](https://cve.now/CVE-2021-1212.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1211](https://cve.now/CVE-2021-1211.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1210](https://cve.now/CVE-2021-1210.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1209](https://cve.now/CVE-2021-1209.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1208](https://cve.now/CVE-2021-1208.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1207](https://cve.now/CVE-2021-1207.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1206](https://cve.now/CVE-2021-1206.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1205](https://cve.now/CVE-2021-1205.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1204](https://cve.now/CVE-2021-1204.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1203](https://cve.now/CVE-2021-1203.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1202](https://cve.now/CVE-2021-1202.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1201](https://cve.now/CVE-2021-1201.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1200](https://cve.now/CVE-2021-1200.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1189](https://cve.now/CVE-2021-1189.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2020-35578](https://cve.now/CVE-2020-35578.md): An issue was discovered in the Manage Plugins page in Nagios XI before 5.8.0. (no CVSS)
- [CVE-2020-9145](https://cve.now/CVE-2020-9145.md): There is an Out-of-bounds Write vulnerability in some Huawei smartphone. (no CVSS, EMUI;Magic UI)
- [CVE-2020-27488](https://cve.now/CVE-2020-27488.md): Loxone Miniserver devices with firmware before 11.1 (aka 11.1.9.3) are unable to use an authentication method that is based on the "signatur (no CVSS)
- [CVE-2020-9144](https://cve.now/CVE-2020-9144.md): There is a heap overflow vulnerability in some Huawei smartphone, attackers can exploit this vulnerability to cause heap overflows due to im (no CVSS, EMUI · Magic UI)
- [CVE-2020-26262](https://cve.now/CVE-2020-26262.md): Loopback bypass in Coturn (CVSS 7.2, coturn)
- [CVE-2020-4604](https://cve.now/CVE-2020-4604.md): IBM Security Guardium Insights 2.0.2 stores user credentials in plain in clear text which can be read by a local privileged user. (CVSS 4.1, IBM Security Guardium Insights)
- [CVE-2020-4602](https://cve.now/CVE-2020-4602.md): IBM Security Guardium Insights 2.0.2 stores user credentials in plain in clear text which can be read by a local user. (CVSS 4.4, IBM Security Guardium Insights)
- [CVE-2020-4600](https://cve.now/CVE-2020-4600.md): IBM Security Guardium Insights 2.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message i (CVSS 5.3, IBM Security Guardium Insights)
- [CVE-2020-4599](https://cve.now/CVE-2020-4599.md): IBM Security Guardium Insights 2.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message i (CVSS 5.3, IBM Security Guardium Insights)
- [CVE-2020-4597](https://cve.now/CVE-2020-4597.md): IBM Security Guardium Insights 2.0.2 does not set the secure attribute on authorization tokens or session cookies. (CVSS 4.3, IBM Security Guardium Insights)
- [CVE-2020-4596](https://cve.now/CVE-2020-4596.md): IBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensi (CVSS 5.9, IBM Security Guardium Insights)
- [CVE-2020-4595](https://cve.now/CVE-2020-4595.md): IBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensi (CVSS 5.9, IBM Security Guardium Insights)
- [CVE-2020-4594](https://cve.now/CVE-2020-4594.md): IBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensi (CVSS 5.9, IBM Security Guardium Insights)
- [CVE-2021-3032](https://cve.now/CVE-2021-3032.md): PAN-OS: Configuration secrets for log forwarding may be logged in system logs (CVSS 4.4, Palo Alto Networks PAN-OS)
- [CVE-2021-3031](https://cve.now/CVE-2021-3031.md): PAN-OS: Information exposure in Ethernet data frame construction (Etherleak) (CVSS 4.3, Palo Alto Networks PAN-OS)
- [CVE-2020-23653](https://cve.now/CVE-2020-23653.md): An insecure unserialize vulnerability was discovered in ThinkAdmin versions 4.x through 6.x in app/admin/controller/api/Update.php and app/w (no CVSS, zoujingli/thinkadmin)
- [CVE-2019-4702](https://cve.now/CVE-2019-4702.md): IBM Security Guardium Data Encryption (GDE) 3.0.0.2 specifies permissions for a security-critical resource in a way that allows that resourc (CVSS 4.2, IBM Security Guardium Data Encryption)
- [CVE-2019-4687](https://cve.now/CVE-2019-4687.md): IBM Security Guardium Data Encryption (GDE) 3.0.0.2 stores sensitive information in URL parameters. (CVSS 3.7, IBM Security Guardium Data Encryption)
- [CVE-2019-4160](https://cve.now/CVE-2019-4160.md): IBM Security Guardium Data Encryption (GDE) 3.0.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decry (CVSS 5.9, IBM Security Guardium Data Encryption)
- [CVE-2020-15221](https://cve.now/CVE-2020-15221.md): XSS in the breadcrumbs (CVSS 6.8, Combodo iTop)
- [CVE-2020-15220](https://cve.now/CVE-2020-15220.md): Session fixation (CVSS 6.1, Combodo iTop)
- [CVE-2020-15219](https://cve.now/CVE-2020-15219.md): SQL query displayed on portal error (CVSS 4.3, Combodo iTop)
- [CVE-2020-35687](https://cve.now/CVE-2020-35687.md): PHPFusion version 9.03.90 is vulnerable to CSRF attack which leads to deletion of all shoutbox messages by the attacker on behalf of the log (no CVSS)
- [CVE-2020-15218](https://cve.now/CVE-2020-15218.md): Admin pages are cached and can be embedded (CVSS 6.8, Combodo iTop)
- [CVE-2021-3028](https://cve.now/CVE-2021-3028.md): git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution. (no CVSS, git-big-picture)
- [CVE-2021-21613](https://cve.now/CVE-2021-21613.md): Jenkins TICS Plugin 2020.3.0.6 and earlier does not escape TICS service responses, resulting in a cross-site scripting (XSS) vulnerability e (no CVSS, Jenkins project Jenkins TICS Plugin · io.jenkins.plugins:ti…)
- [CVE-2021-21614](https://cve.now/CVE-2021-21614.md): Jenkins Bumblebee HP ALM Plugin 4.1.5 and earlier stores credentials unencrypted in its global configuration file on the Jenkins controller (no CVSS, Jenkins project Jenkins Bumblebee HP ALM Plugin · org.jenki…)
- [CVE-2021-21612](https://cve.now/CVE-2021-21612.md): Jenkins TraceTronic ECU-TEST Plugin 2.23.1 and earlier stores credentials unencrypted in its global configuration file on the Jenkins contro (no CVSS, Jenkins project Jenkins TraceTronic ECU-TEST Plugin · de.tr…)
- [CVE-2021-21610](https://cve.now/CVE-2021-21610.md): Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not implement any restrictions for the URL rendering a formatted preview of markup p (no CVSS, Jenkins project Jenkins · org.jenkins-ci.main:jenkins-core)
- [CVE-2021-21611](https://cve.now/CVE-2021-21611.md): Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not escape display names and IDs of item types shown on the New Item page, resulting (no CVSS, Jenkins project Jenkins · org.jenkins-ci.main:jenkins-core)
- [CVE-2021-21609](https://cve.now/CVE-2021-21609.md): Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not correctly match requested URLs to the list of always accessible paths, allowing (no CVSS, Jenkins project Jenkins · org.jenkins-ci.main:jenkins-core)
- [CVE-2021-21607](https://cve.now/CVE-2021-21607.md): Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not limit sizes provided as query parameters to graph-rendering URLs, allowing attac (no CVSS, Jenkins project Jenkins · org.jenkins-ci.main:jenkins-core)
- [CVE-2021-21608](https://cve.now/CVE-2021-21608.md): Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not escape button labels in the Jenkins UI, resulting in a cross-site scripting (XSS (no CVSS, Jenkins project Jenkins · org.jenkins-ci.main:jenkins-core)
- [CVE-2021-21605](https://cve.now/CVE-2021-21605.md): Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows users with Agent/Configure permission to choose agent names that cause Jenkins to (no CVSS, Jenkins project Jenkins · org.jenkins-ci.main:jenkins-core)
- [CVE-2021-21606](https://cve.now/CVE-2021-21606.md): Jenkins 2.274 and earlier, LTS 2.263.1 and earlier improperly validates the format of a provided fingerprint ID when checking for its existe (no CVSS, Jenkins project Jenkins · org.jenkins-ci.main:jenkins-core)
- [CVE-2021-21604](https://cve.now/CVE-2021-21604.md): Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows attackers with permission to create or configure various objects to inject crafted (no CVSS, Jenkins project Jenkins · org.jenkins-ci.main:jenkins-core)
- [CVE-2021-21602](https://cve.now/CVE-2021-21602.md): Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows reading arbitrary files using the file browser for workspaces and archived artifac (no CVSS, Jenkins project Jenkins · org.jenkins-ci.main:jenkins-core)
- [CVE-2021-21603](https://cve.now/CVE-2021-21603.md): Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not escape notification bar response contents, resulting in a cross-site scripting ( (no CVSS, Jenkins project Jenkins · org.jenkins-ci.main:jenkins-core)
- [CVE-2021-23900](https://cve.now/CVE-2021-23900.md): OWASP json-sanitizer before 1.2.2 can output invalid JSON or throw an undeclared exception for crafted input. (no CVSS, com.mikesamuel:json-sanitizer)
- [CVE-2021-23899](https://cve.now/CVE-2021-23899.md): OWASP json-sanitizer before 1.2.2 may emit closing SCRIPT tags and CDATA section delimiters for crafted input. (no CVSS, com.mikesamuel:json-sanitizer)
- [CVE-2021-3131](https://cve.now/CVE-2021-3131.md): The Web server in 1C:Enterprise 8 before 8.3.17.1851 sends base64 encoded credentials in the creds URL parameter. (no CVSS)
- [CVE-2021-3139](https://cve.now/CVE-2021-3139.md): In Open-iSCSI tcmu-runner 1.3.x, 1.4.x, and 1.5.x through 1.5.2, xcopy\_locate\_udev in tcmur\_cmd\_handler.c lacks a check for transport-layer (no CVSS)
- [CVE-2021-20616](https://cve.now/CVE-2021-20616.md): Untrusted search path vulnerability in the installer of SKYSEA Client View Ver.1.020.05b to Ver.16.001.01g allows an attacker to gain privil (no CVSS, Sky Co. SKYSEA Client View)
- [CVE-2020-5686](https://cve.now/CVE-2020-5686.md): Incorrect implementation of authentication algorithm issue in UNIVERGE SV9500 series from V1 to V7and SV8500 series from S6 to S8 allows an (no CVSS, NEC UNIVERGE SV9500/SV8500 series)
- [CVE-2020-5633](https://cve.now/CVE-2020-5633.md): Multiple NEC products (Express5800/T110j, Express5800/T110j-S, Express5800/T110j (2nd-Gen), Express5800/T110j-S (2nd-Gen), iStorage NS100Ti, (no CVSS, Multiple NEC products where Baseboard Management Controller…)
- [CVE-2020-5685](https://cve.now/CVE-2020-5685.md): UNIVERGE SV9500 series from V1 to V7and SV8500 series from S6 to S8 allows an attacker to execute arbitrary OS commands or cause a denial-of (no CVSS, NEC UNIVERGE SV9500/SV8500 series)
- [CVE-2020-35686](https://cve.now/CVE-2020-35686.md): The SECOMN service in Sound Research DCHU model software component modules (APO) through 2.0.9.17, delivered on HP Windows 10 computers, may (no CVSS)
- [CVE-2020-36191](https://cve.now/CVE-2020-36191.md): JupyterHub 1.1.0 allows CSRF in the admin panel via a request that lacks an \_xsrf field, as demonstrated by a /hub/api/user request (to add (no CVSS, jupyterhub)
- [CVE-2020-28374](https://cve.now/CVE-2020-28374.md): In drivers/target/target\_core\_xcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking in the LIO SCSI target code can be (no CVSS)
- [CVE-2021-21252](https://cve.now/CVE-2021-21252.md): Regular expression denial of service in jquery-validation (CVSS 5.3, jquery-validation · jQuery.Validation)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-01-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.