CVEs published January 22, 2021
54 CVEs were published on January 22, 2021: 1 critical, 7 high. 1 is now in CISA KEV.
- Published
- 54
- Critical
- 1
- High
- 7
- Medium
- 5
- Low
- 0
- Unrated
- 41
- Now in CISA KEV
- 1
- Fix available
- 30
Most affected products
- Pepper+Fuchs Comtrol IO-Link Master
- 4
- abi_stable
- 2
- Android
- 2
- Hyweb HyCMS-J1
- 2
- aovec
- 1
- async-h1
- 1
- atomic-option
- 1
- autorand
- 1
- av-data
- 1
- basic_dsp_matrix
- 1
Critical 1
High 7
- CVE-2020-12525WAGO/M&M Software Deserialization of untrusted data in fdtCONTAINER componentM&M Software fdtCONTAINER Component · M&M Software fdtCO… +3
- CVE-2020-12513Pepper+Fuchs Comtrol IO-Link Master OS Command InjectionPepper+Fuchs Comtrol IO-Link Master
- CVE-2020-12512Pepper+Fuchs Comtrol IO-Link Master Cross-Site ScriptingPepper+Fuchs Comtrol IO-Link Master
- CVE-2020-12511Pepper+Fuchs Comtrol IO-Link Master Cross-Site Request ForgeryPepper+Fuchs Comtrol IO-Link Master
- CVE-2021-21260XSS in description fieldbigprof-software online-invoicing-system
- CVE-2021-21259Stored XSS in slide modehedgedoc
- CVE-2021-22847Hyweb HyCMS-J1 - SQL InjectionHyweb HyCMS-J1
Medium, low and unrated 46
- CVE-2020-23014APfell 1.4 is vulnerable to authenticated reflected cross-site scripting (XSS) in /apiui/command_ through the payloadtypes_callback function
- CVE-2020-27098In checkGrantUriPermission of UriGrantsManagerService.java, there is a possible way to access contacts due to a permissions bypass.Android
- CVE-2020-27097In checkGrantUriPermission of UriGrantsManagerService.java, there is a possible permissions bypass.Android
- CVE-2020-23826The Yale WIPC-303W 2.21 through 2.31 camera is vulnerable to remote command execution (RCE) through command injection via the HTTP API.
- CVE-2020-12514Pepper+Fuchs Comtrol IO-Link Master NULL Pointer DereferencePepper+Fuchs Comtrol IO-Link Master
- CVE-2020-20269A specially crafted Markdown document could cause the execution of malicious JavaScript code in Caret Editor before 4.0.0-rc22.
- CVE-2021-21270Cleartext Storage of Sensitive InformationOctopusDeploy OctopusDSC
- CVE-2020-28487Cross-site Scripting (XSS)vis-timeline
- CVE-2021-3271PressBooks 5.17.3 contains a cross-site scripting (XSS).pressbooks/pressbooks
- CVE-2020-4766IBM MQ Internet Pass-Thru 2.1 and 9.2 could allow a remote user to cause a denial of service by sending malformed MQ data requests which wouIBM MQ Internet Pass-Thru
- CVE-2020-23262An issue was discovered in ming-soft MCMS v5.0, where a malicious user can exploit SQL injection without logging in through /mcms/view.do.net.mingsoft:ms-mcms
- CVE-2020-23162Sensitive information disclosure and weak encryption in Pyrescom Termod4 time management devices before 10.04k allows remote attackers to re
- CVE-2020-23161Local file inclusion in Pyrescom Termod4 time management devices before 10.04k allows authenticated remote attackers to traverse directories
- CVE-2020-23160Remote code execution in Pyrescom Termod4 time management devices before 10.04k allows authenticated remote attackers to arbitrary commands
- CVE-2020-36202An issue was discovered in the async-h1 crate before 2.3.0 for Rust.async-h1
- CVE-2020-36203An issue was discovered in the reffers crate through 2020-12-01 for Rust.reffers
- CVE-2020-36204An issue was discovered in the im crate through 2020-11-09 for Rust.im
- CVE-2020-36205An issue was discovered in the xcb crate through 2020-12-10 for Rust.xcb
- CVE-2020-36206An issue was discovered in the rusb crate before 0.7.0 for Rust.rusb
- CVE-2020-36207An issue was discovered in the aovec crate through 2020-12-10 for Rust.aovec
- CVE-2020-36208An issue was discovered in the conquer-once crate before 0.3.2 for Rust.conquer-once
- CVE-2020-36209An issue was discovered in the late-static crate before 0.4.0 for Rust.late-static
- CVE-2020-36210An issue was discovered in the autorand crate before 0.2.3 for Rust.autorand
- CVE-2020-36211An issue was discovered in the gfwx crate before 0.3.0 for Rust.gfwx
- CVE-2020-36212An issue was discovered in the abi_stable crate before 0.9.1 for Rust.abi_stable
- CVE-2020-36213An issue was discovered in the abi_stable crate before 0.9.1 for Rust.abi_stable
- CVE-2020-36214An issue was discovered in the multiqueue2 crate before 0.1.7 for Rust.multiqueue2
- CVE-2020-36215An issue was discovered in the hashconsing crate before 1.1.0 for Rust.hashconsing
- CVE-2020-36216An issue was discovered in Input<R> in the eventio crate before 0.5.1 for Rust.eventio
- CVE-2020-36217An issue was discovered in the may_queue crate through 2020-11-10 for Rust.may_queue
- CVE-2020-36218An issue was discovered in the buttplug crate before 1.0.4 for Rust.buttplug
- CVE-2020-36219An issue was discovered in the atomic-option crate through 2020-10-31 for Rust.atomic-option
- CVE-2020-36220An issue was discovered in the va-ts crate before 0.0.4 for Rust.va-ts
- CVE-2021-25900An issue was discovered in the smallvec crate before 0.6.14 and 1.x before 1.6.1 for Rust.smallvec
- CVE-2021-25901An issue was discovered in the lazy-init crate through 2021-01-17 for Rust.lazy-init
- CVE-2021-25902An issue was discovered in the glsl-layout crate before 0.4.0 for Rust.glsl-layout
- CVE-2021-25903An issue was discovered in the cache crate through 2021-01-01 for Rust.cache
- CVE-2021-25904An issue was discovered in the av-data crate before 0.3.0 for Rust.av-data
- CVE-2021-25905An issue was discovered in the bra crate before 0.1.1 for Rust.bra
- CVE-2021-25906An issue was discovered in the basic_dsp_matrix crate before 0.9.2 for Rust.basic_dsp_matrix
- CVE-2021-25907An issue was discovered in the containers crate before 0.9.11 for Rust.containers
- CVE-2021-25908An issue was discovered in the fil-ocl crate through 2021-01-04 for Rust.fil-ocl
- CVE-2021-22849Hyweb HyCMS-J1 - Stored XSSHyweb HyCMS-J1
- CVE-2020-29443ide_atapi_cmd_reply_end in hw/ide/atapi.c in QEMU 5.1.0 allows out-of-bounds read access because a buffer index is not validated.
- CVE-2021-3193Improper access and command validation in the Nagios Docker Config Wizard before 1.1.2, as used in Nagios XI through 5.7, allows an unauthen
- CVE-2020-35753The job posting recommendation form in Persis Human Resource Management Portal (Versions 17.2.00 through 17.2.35 and 19.0.00 through 19.0.20