# CVEs published 2021-01-18

14 CVEs were published on January 18, 2021: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2020-36193](https://cve.now/CVE-2020-36193.md): Tar.php in Archive\_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a relat (CVSS 7.5, KEV, pear/archive\_tar)
- [CVE-2020-36192](https://cve.now/CVE-2020-36192.md): An issue was discovered in the Source Integration plugin before 2.4.1 for MantisBT. (no CVSS)
- [CVE-2020-7343](https://cve.now/CVE-2020-7343.md): Improper Authorization vulnerability in MA (CVSS 5.5, McAfee Agent)
- [CVE-2020-28473](https://cve.now/CVE-2020-28473.md): Web Cache Poisoning (CVSS 6.8, bottle)
- [CVE-2021-25173](https://cve.now/CVE-2021-25173.md): An issue was discovered in Open Design Alliance Drawings SDK before 2021.12. (no CVSS)
- [CVE-2021-25174](https://cve.now/CVE-2021-25174.md): An issue was discovered in Open Design Alliance Drawings SDK before 2021.12. (no CVSS)
- [CVE-2021-25175](https://cve.now/CVE-2021-25175.md): An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. (no CVSS)
- [CVE-2021-25176](https://cve.now/CVE-2021-25176.md): An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. (no CVSS)
- [CVE-2021-25177](https://cve.now/CVE-2021-25177.md): An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. (no CVSS)
- [CVE-2021-25178](https://cve.now/CVE-2021-25178.md): An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. (no CVSS)
- [CVE-2021-25294](https://cve.now/CVE-2021-25294.md): OpenCATS through 0.9.5-3 unsafely deserializes index.php?m=activity requests, leading to remote code execution. (no CVSS)
- [CVE-2021-25295](https://cve.now/CVE-2021-25295.md): OpenCATS through 0.9.5-3 has multiple Cross-site Scripting (XSS) issues. (no CVSS)
- [CVE-2021-3166](https://cve.now/CVE-2021-3166.md): An issue was discovered on ASUS DSL-N14U-B1 1.1.2.3\_805 devices. (no CVSS)
- [CVE-2020-29446](https://cve.now/CVE-2020-29446.md): Affected versions of Atlassian Fisheye & Crucible allow remote attackers to browse local files via an Insecure Direct Object References (IDO (no CVSS, Atlassian Fisheye · Atlassian Crucible)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-01-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.