CVEs published January 25, 2021
39 CVEs were published on January 25, 2021: 1 critical, 1 high.
- Published
- 39
- Critical
- 1
- High
- 1
- Medium
- 2
- Low
- 0
- Unrated
- 35
- Now in CISA KEV
- 0
- Fix available
- 14
Most affected products
- openldap
- 10
- Bosch FSM-2500 · Bosch FSM-5000
- 2
- EcoStruxure Power Build - Rapsody software V2.1.13 and prio…
- 2
- Android
- 1
- Apache Software Foundation Apache Nutch · org.apache.nutch:…
- 1
- Apache Software Foundation Apache ServiceComb-Java-Chassis…
- 1
- deislabs oras · github.com/deislabs/oras
- 1
- EcoStruxure™ Operator Terminal Expert 3.1 Service Pack 1A a…
- 1
- gstreamer
- 1
- Kenny2github Report
- 1
Critical 1
High 1
Medium, low and unrated 37
- CVE-2021-21275CSRF in MediaWiki Report extensionKenny2github Report
- CVE-2020-27542Rostelecom CS-C2SHW 5.0.082.1 is affected by: Bash command injection.
- CVE-2020-27541Denial of Service vulnerability in Rostelecom CS-C2SHW 5.0.082.1.
- CVE-2020-27539Heap overflow with full parsing of HTTP respose in Rostelecom CS-C2SHW 5.0.082.1.
- CVE-2020-27540Bash injection vulnerability and bypass of signature verification in Rostelecom CS-C2SHW 5.0.082.1.
- CVE-2020-35845FastStone Image Viewer 7.5 has an out-of-bounds write (via a crafted image file) at FSViewer.exe+0x96cf.
- CVE-2020-35844FastStone Image Viewer 7.5 has an out-of-bounds write (via a crafted image file) at FSViewer.exe+0xbe9c4.
- CVE-2020-35843FastStone Image Viewer 7.5 has an out-of-bounds write (via a crafted image file) at FSViewer.exe+0x956e.
- CVE-2020-16236anasonic FPWIN ProPanasonic FPWIN Pro
- CVE-2020-6780Password Hash With Insufficient Computational Effort in the Database of Bosch FSM-2500 Server and Bosch FSM-5000 ServerBosch FSM-2500 · Bosch FSM-5000
- CVE-2020-27814A heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files.openjpeg
- CVE-2020-25737An elevation of privilege vulnerability exists in Hackolade versions prior 4.2.0 on Windows has an issue in specific deployment scenarios th
- CVE-2021-22698A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software (V2.1.13 aEcoStruxure Power Build - Rapsody software V2.1.13 and prio…
- CVE-2021-22697A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software (V2.1.13 aEcoStruxure Power Build - Rapsody software V2.1.13 and prio…
- CVE-2020-28221A CWE-20: Improper Input Validation vulnerability exists in EcoStruxure™ Operator Terminal Expert and Pro-face BLUE (version details in the EcoStruxure™ Operator Terminal Expert 3.1 Service Pack 1A a…
- CVE-2020-0236In A2DP_GetCodecType of a2dp_codec_config, there is a possible out-of-bounds read due to improper input validation.Android
- CVE-2021-3185A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could causegstreamer
- CVE-2020-35513A flaw incorrect umask during file or directory modification in the Linux kernel NFS (network file system) functionality was found in the wakernel
- CVE-2021-3278Local Service Search Engine Management System 1.0 has a vulnerability through authentication bypass using SQL injection .
- CVE-2020-35854Textpattern 4.8.4 is affected by cross-site scripting (XSS) in the Body parameter.
- CVE-2020-358534images Image Gallery Management System 1.7.11 is affected by cross-site scripting (XSS) in the Image URL.
- CVE-2020-35270Student Result Management System In PHP With Source Code is affected by SQL injection.
- CVE-2020-36221An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing, resultopenldap
- CVE-2020-36222A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial openldap
- CVE-2020-36224A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting openldap
- CVE-2020-36225A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the saslAuthzTo processing, resulting in denial openldap
- CVE-2020-36226A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing, resopenldap
- CVE-2020-36228An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate List Exact Assertion processing, ropenldap
- CVE-2020-36229A flaw was discovered in ldap_X509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the X.509 DN parsing in ad_keystring, resultinopenldap
- CVE-2020-36230A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_elemenopenldap
- CVE-2020-36227A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop Cancel operation, resulting in deopenldap
- CVE-2020-36223A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter control handling, resulting in denial oopenldap
- CVE-2020-17532Apache ServiceComb Yaml remote deserialization vulnerabilityApache Software Foundation Apache ServiceComb-Java-Chassis…
- CVE-2021-23901An XML external entity (XXE) injection vulnerability exists in the Nutch DmozParserApache Software Foundation Apache Nutch · org.apache.nutch:…
- CVE-2021-26025PlugIns\IDE_ACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User Mode Write Access Violation starting at IDE_ACDStd!zlibVersion+0x000
- CVE-2021-26026PlugIns\IDE_ACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User Mode Write Access Violation starting at IDE_ACDStd!JPEGTransW+0x0000
- CVE-2020-35576A Command Injection issue in the traceroute feature on TP-Link TL-WR841N V13 (JP) with firmware versions prior to 201216 allows authenticate