# CVEs published 2021-01-21

72 CVEs were published on January 21, 2021: 0 critical, 3 high. Days are UTC.

- [CVE-2020-36200](https://cve.now/CVE-2020-36200.md): TinyCheck before commits 9fd360d and ea53de8 allowed an authenticated attacker to send an HTTP GET request to the crafted URLs. (no CVSS, Kaspersky TinyCheck)
- [CVE-2020-36199](https://cve.now/CVE-2020-36199.md): TinyCheck before commits 9fd360d and ea53de8 was vulnerable to command injection due to insufficient checks of input parameters in several p (no CVSS, Kaspersky TinyCheck)
- [CVE-2020-21147](https://cve.now/CVE-2020-21147.md): RockOA V1.9.8 is affected by a cross-site scripting (XSS) vulnerability which allows remote attackers to send malicious code to the administ (no CVSS)
- [CVE-2020-21146](https://cve.now/CVE-2020-21146.md): Feehi CMS 2.0.8 is affected by a cross-site scripting (XSS) vulnerability. (no CVSS, feehi/cms)
- [CVE-2020-36201](https://cve.now/CVE-2020-36201.md): An issue was discovered in certain Xerox WorkCentre products. (no CVSS)
- [CVE-2019-25015](https://cve.now/CVE-2019-25015.md): LuCI in OpenWrt 18.06.0 through 18.06.4 allows stored XSS via a crafted SSID. (no CVSS)
- [CVE-2021-22871](https://cve.now/CVE-2021-22871.md): Revive Adserver before 5.1.0 permits any user with a manager account to store possibly malicious content in the URL website property, which (no CVSS, https://github.com/revive-adserver/revive-adserver)
- [CVE-2021-22872](https://cve.now/CVE-2021-22872.md): Revive Adserver before 5.1.0 is vulnerable to a reflected cross-site scripting (XSS) vulnerability via the publicly accessible afr.php deliv (no CVSS, https://github.com/revive-adserver/revive-adserver)
- [CVE-2021-22873](https://cve.now/CVE-2021-22873.md): Revive Adserver before 5.1.0 is vulnerable to open redirects via the \`dest\`, \`oadest\`, and/or \`ct0\` parameters of the lg.php and ck.php deli (no CVSS, https://github.com/revive-adserver/revive-adserver)
- [CVE-2020-8292](https://cve.now/CVE-2020-8292.md): Rocket.Chat server before 3.9.0 is vulnerable to a self cross-site scripting (XSS) vulnerability via the drag & drop functionality in messag (no CVSS, Rocket.Chat server)
- [CVE-2020-8288](https://cve.now/CVE-2020-8288.md): The \`specializedRendering\` function in Rocket.Chat server before 3.9.2 allows a cross-site scripting (XSS) vulnerability by way of the \`valu (no CVSS, Rocket.Chat server)
- [CVE-2021-21723](https://cve.now/CVE-2021-21723.md): Some ZTE products have a DoS vulnerability. (no CVSS, \<ZXR10 9904, ZXR10 9908, ZXR10 9916, ZXR10 9904-S, ZXR10 99…)
- [CVE-2020-8570](https://cve.now/CVE-2020-8570.md): Kubernetes Java client libraries unvalidated path traversal in Copy implementation (no CVSS, Kubernetes Java Client · io.kubernetes:client-java)
- [CVE-2020-8569](https://cve.now/CVE-2020-8569.md): Kubernetes CSI snapshot-controller DoS (CVSS 4.3, Kubernetes CSI Snapshotter · github.com/kubernetes-csi/e… +1)
- [CVE-2020-8568](https://cve.now/CVE-2020-8568.md): Kubernetes Secrets Store CSI Driver sync/rotate directory traversal (CVSS 5.8, Kubernetes Secrets Store CSI Driver · sigs.k8s.io/secrets-s…)
- [CVE-2020-8567](https://cve.now/CVE-2020-8567.md): Kubernetes Secrets Store CSI Driver plugin directory traversals (CVSS 4.9, Kubernetes Secrets Store CSI Driver · github.com/hashico… +2)
- [CVE-2020-8554](https://cve.now/CVE-2020-8554.md): Kubernetes man in the middle using LoadBalancer or ExternalIPs (CVSS 6.3, Kubernetes · k8s.io/kubernetes)
- [CVE-2020-22643](https://cve.now/CVE-2020-22643.md): Feehi CMS 2.1.0 is affected by an arbitrary file upload vulnerability, potentially resulting in remote code execution. (no CVSS, feehi/cms)
- [CVE-2021-3152](https://cve.now/CVE-2021-3152.md): Home Assistant before 2021.1.3 does not have a protection layer that can help to prevent directory-traversal attacks against custom integrat (no CVSS)
- [CVE-2020-28874](https://cve.now/CVE-2020-28874.md): reset-password.php in ProjectSend before r1295 allows remote attackers to reset a password because of incorrect business logic. (no CVSS)
- [CVE-2020-35309](https://cve.now/CVE-2020-35309.md): Bakeshop Online Ordering System in PHP/MySQLi 1.0 is affected by cross-site scripting (XSS) which allows remote attackers to inject an arbit (no CVSS)
- [CVE-2020-29241](https://cve.now/CVE-2020-29241.md): Online News Portal using PHP/MySQLi 1.0 is affected by cross-site scripting (XSS) which allows remote attackers to inject an arbitrary web s (no CVSS)
- [CVE-2020-26941](https://cve.now/CVE-2020-26941.md): A local (authenticated) low-privileged user can exploit a behavior in an ESET installer to achieve arbitrary file overwrite (deletion) of an (no CVSS)
- [CVE-2021-21253](https://cve.now/CVE-2021-21253.md): Use of a One-Way Hash without a Salt in OnlineVotingSystem (CVSS 5.8, dbijaya OnlineVotingSystem)
- [CVE-2021-21238](https://cve.now/CVE-2021-21238.md): SAML XML Signature wrapping (CVSS 6.5, IdentityPython pysaml2 · pysaml2)
- [CVE-2021-21239](https://cve.now/CVE-2021-21239.md): Open default xmlsec1 key-type preference (CVSS 6.5, IdentityPython pysaml2 · pysaml2)
- [CVE-2020-4969](https://cve.now/CVE-2020-4969.md): IBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain sensitive information, caused by the failure (CVSS 2.6, IBM Security Identity Governance and Intelligence)
- [CVE-2020-4968](https://cve.now/CVE-2020-4968.md): IBM Security Identity Governance and Intelligence 5.2.6 uses weaker than expected cryptographic algorithms that could allow an attacker to d (CVSS 5.3, IBM Security Identity Governance and Intelligence)
- [CVE-2020-4966](https://cve.now/CVE-2020-4966.md): IBM Security Identity Governance and Intelligence 5.2.6 does not set the secure attribute on authorization tokens or session cookies. (CVSS 4.3, IBM Security Identity Governance and Intelligence)
- [CVE-2020-4958](https://cve.now/CVE-2020-4958.md): IBM Security Identity Governance and Intelligence 5.2.6 does not perform any authentication for functionality that requires a provable user (CVSS 7.4, IBM Security Identity Governance and Intelligence)
- [CVE-2020-26295](https://cve.now/CVE-2020-26295.md): CMS Editor code execution (CVSS 8.7, OpenMage magento-lts)
- [CVE-2020-26285](https://cve.now/CVE-2020-26285.md): Widget instances allows a hacker to inject an executable file on the server on OpenMage (CVSS 8.7, OpenMage magento-lts)
- [CVE-2020-3691](https://cve.now/CVE-2020-3691.md): Possible out of bound memory access in audio due to integer underflow while processing modified contents in Snapdragon Auto, Snapdragon Comp (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-3686](https://cve.now/CVE-2020-3686.md): Possible memory out of bound issue during music playback when an incorrect bit stream content is copied into array without checking the leng (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-3687](https://cve.now/CVE-2020-3687.md): Local privilege escalation in admin services in Windows environment can occur due to an arbitrary read issue. (no CVSS)
- [CVE-2020-3685](https://cve.now/CVE-2020-3685.md): Pointer variable which is freed is not cleared can result in memory corruption and leads to denial of service in Snapdragon Auto, Snapdragon (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11217](https://cve.now/CVE-2020-11217.md): A possible double free or invalid memory access in audio driver while reading Speaker Protection parameters in Snapdragon Compute, Snapdrago (no CVSS, Qualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…)
- [CVE-2020-11225](https://cve.now/CVE-2020-11225.md): Out of bound access in WLAN driver due to lack of validation of array length before copying into array in Snapdragon Auto, Snapdragon Comput (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11216](https://cve.now/CVE-2020-11216.md): Buffer over read can happen in video driver when playing clip with atomsize having value UINT32\_MAX in Snapdragon Auto, Snapdragon Compute, (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11214](https://cve.now/CVE-2020-11214.md): Buffer over-read while processing NDL attribute if attribute length is larger than expected and then FW is treating it as more number of imm (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11215](https://cve.now/CVE-2020-11215.md): An out of bounds read can happen when processing VSA attribute due to improper minimum required length check in Snapdragon Auto, Snapdragon (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11213](https://cve.now/CVE-2020-11213.md): Out of bound reads might occur in while processing Service descriptor due to improper validation of length of fields in Snapdragon Auto, Sna (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11200](https://cve.now/CVE-2020-11200.md): Buffer over-read while parsing RPS due to lack of check of input validation on values received from user side. (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11212](https://cve.now/CVE-2020-11212.md): Out of bounds reads while parsing NAN beacons attributes and OUIs due to improper length of field check in Snapdragon Auto, Snapdragon Compu (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11197](https://cve.now/CVE-2020-11197.md): Possible integer overflow can occur when stream info update is called when total number of streams detected are zero while parsing TS clip w (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11183](https://cve.now/CVE-2020-11183.md): A process can potentially cause a buffer overflow in the display service allowing privilege escalation by executing code as that service in (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdrag…)
- [CVE-2020-11185](https://cve.now/CVE-2020-11185.md): Out of bound issue in WLAN driver while processing vdev responses from firmware due to lack of validation of data received from firmware in (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdrag…)
- [CVE-2020-11181](https://cve.now/CVE-2020-11181.md): Out of bound access issue while handling cvp process control command due to improper validation of buffer pointer received from HLOS in Snap (no CVSS, Qualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…)
- [CVE-2020-11179](https://cve.now/CVE-2020-11179.md): Arbitrary read and write to kernel addresses by temporarily overwriting ring buffer pointer and creating a race condition. (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11180](https://cve.now/CVE-2020-11180.md): Out of bound access in computer vision control due to improper validation of command length before processing it in Snapdragon Auto, Snapdra (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11152](https://cve.now/CVE-2020-11152.md): Race condition in HAL layer while processing callback objects received from HIDL due to lack of synchronization between accessing objects in (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11167](https://cve.now/CVE-2020-11167.md): Memory corruption while calculating L2CAP packet length in reassembly logic when remote sends more data than expected in Snapdragon Auto, Sn (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11151](https://cve.now/CVE-2020-11151.md): Race condition occurs while calling user space ioctl from two different threads can results to use after free issue in video in Snapdragon A (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11149](https://cve.now/CVE-2020-11149.md): Out of bound access due to usage of an out-of-range pointer offset in the camera driver. (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11150](https://cve.now/CVE-2020-11150.md): Out of bound memory access in camera driver due to improper validation on data coming from UMD which is used for offset manipulation of poin (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11148](https://cve.now/CVE-2020-11148.md): Use after free issue in HIDL while using callback to post event in Rx thread when internal mutex is not acquired and meantime close is trigg (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11145](https://cve.now/CVE-2020-11145.md): Divide by zero issue can happen while updating delta extension header due to improper validation of master SN and extension header SN in Sna (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11146](https://cve.now/CVE-2020-11146.md): Out of bound write while copying data using IOCTL due to lack of check of array index received from user in Snapdragon Auto, Snapdragon Comp (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11144](https://cve.now/CVE-2020-11144.md): Buffer over-read while UE process invalid DL ROHC packet for decompression due to lack of check of size of compresses packet in Snapdragon A (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11140](https://cve.now/CVE-2020-11140.md): Out of bound memory access during music playback with ALAC modified content due to improper validation in Snapdragon Auto, Snapdragon Comput (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11143](https://cve.now/CVE-2020-11143.md): Out of bound memory access during music playback with modified content due to copying data without checking destination buffer size in Snapd (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11139](https://cve.now/CVE-2020-11139.md): Out of bound memory access while processing frames due to lack of check of invalid frames received in Snapdragon Auto, Snapdragon Compute, S (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11137](https://cve.now/CVE-2020-11137.md): Integer multiplication overflow resulting in lower buffer size allocation than expected causes memory access out of bounds resulting in poss (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11138](https://cve.now/CVE-2020-11138.md): Uninitialized pointers accessed during music play back with incorrect bit stream due to an uninitialized heap memory result in instability i (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11119](https://cve.now/CVE-2020-11119.md): Buffer over-read can happen when the buffer length received from response handlers is more than the size of the payload in Snapdragon Auto, (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11136](https://cve.now/CVE-2020-11136.md): Buffer Over-read in audio driver while using malloc management function due to not returning NULL for zero sized memory requirement in Snapd (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-3195](https://cve.now/CVE-2021-3195.md): bitcoind in Bitcoin Core through 0.21.0 can create a new file in an arbitrary directory (e.g., outside the ~/.bitcoin directory) via a dumpw (no CVSS)
- [CVE-2021-3190](https://cve.now/CVE-2021-3190.md): The async-git package before 1.13.2 for Node.js allows OS Command Injection via shell metacharacters, as demonstrated by git.reset and git.t (no CVSS, async-git)
- [CVE-2021-3188](https://cve.now/CVE-2021-3188.md): phpList 3.6.0 allows CSV injection, related to the email parameter, and /lists/admin/ exports. (no CVSS)
- [CVE-2021-3164](https://cve.now/CVE-2021-3164.md): ChurchRota 2.6.4 is vulnerable to authenticated remote code execution. (no CVSS)
- [CVE-2020-27221](https://cve.now/CVE-2020-27221.md): In Eclipse OpenJ9 up to and including version 0.23, there is potential for a stack-based buffer overflow when the virtual machine or JNI nat (no CVSS, The Eclipse Foundation Eclipse OpenJ9)
- [CVE-2020-27583](https://cve.now/CVE-2020-27583.md): IBM InfoSphere Information Server 8.5.0.0 is affected by deserialization of untrusted data which could allow remote unauthenticated attacker (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-01-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.