# CVEs published 2021-01-26

53 CVEs were published on January 26, 2021: 0 critical, 5 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2013-2512](https://cve.now/CVE-2013-2512.md): The ftpd gem 0.2.1 for Ruby allows remote attackers to execute arbitrary OS commands via shell metacharacters in a LIST or NLST command argu (no CVSS, ftpd)
- [CVE-2021-3165](https://cve.now/CVE-2021-3165.md): SmartAgent 3.1.0 allows a ViewOnly attacker to create a SuperUser account via the /#/CampaignManager/users URI. (no CVSS)
- [CVE-2021-3317](https://cve.now/CVE-2021-3317.md): KLog Server through 2.4.1 allows authenticated command injection. (no CVSS)
- [CVE-2021-1070](https://cve.now/CVE-2021-1070.md): NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB, L4T versions prior to 32.5, contains a vulnerability in the (CVSS 7.1, NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2…)
- [CVE-2021-1071](https://cve.now/CVE-2021-1071.md): NVIDIA Tegra kernel in Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB, all L4T versions prior to r32.5, contains a (CVSS 5.6, NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2…)
- [CVE-2020-23776](https://cve.now/CVE-2020-23776.md): A SSRF vulnerability exists in Winmail 6.5 in app.php in the key parameter when HTTPS is on. (no CVSS)
- [CVE-2020-23774](https://cve.now/CVE-2020-23774.md): A reflected XSS vulnerability exists in tohtml/convert.php of Winmail 6.5, which can cause JavaScript code to be executed. (no CVSS)
- [CVE-2021-21271](https://cve.now/CVE-2021-21271.md): Denial of service in TenderMint Core (CVSS 6.5, tendermint · github.com/tendermint/tendermint)
- [CVE-2021-21283](https://cve.now/CVE-2021-21283.md): XSS in Flarum Sticky extension. (CVSS 5.4, flarum sticky · flarum/sticky)
- [CVE-2021-26272](https://cve.now/CVE-2021-26272.md): It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted URL-like text into the (no CVSS, ckeditor4)
- [CVE-2021-26271](https://cve.now/CVE-2021-26271.md): It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted text into the Styles in (no CVSS, ckeditor4-dev)
- [CVE-2021-21278](https://cve.now/CVE-2021-21278.md): Risk of code injection in RSSHub (CVSS 8.6, DIYgod RSSHub · rsshub)
- [CVE-2021-3309](https://cve.now/CVE-2021-3309.md): packages/wekan-ldap/server/ldap.js in Wekan before 4.87 can process connections even though they are not authorized by the Certification Aut (no CVSS)
- [CVE-2021-3308](https://cve.now/CVE-2021-3308.md): An issue was discovered in Xen 4.12.3 through 4.12.4 and 4.13.1 through 4.14.x. (no CVSS)
- [CVE-2021-22159](https://cve.now/CVE-2021-22159.md): Insider Threat Management Windows Agent Local Privilege Escalation Vulnerability The Proofpoint Insider Threat Management (formerly ObserveI (no CVSS)
- [CVE-2020-27295](https://cve.now/CVE-2020-27295.md): The affected product has uncontrolled resource consumption issues, which may allow an attacker to cause a denial-of-service condition on the (no CVSS, OPC UA Tunneller)
- [CVE-2020-27297](https://cve.now/CVE-2020-27297.md): The affected product is vulnerable to a heap-based buffer overflow, which may allow an attacker to manipulate memory with controlled values (no CVSS, OPC UA Tunneller)
- [CVE-2020-27299](https://cve.now/CVE-2020-27299.md): The affected product is vulnerable to an out-of-bounds read, which may allow an attacker to obtain and disclose sensitive data information o (no CVSS, OPC UA Tunneller)
- [CVE-2020-27274](https://cve.now/CVE-2020-27274.md): Some parsing functions in the affected product do not check the return value of malloc and the thread handling the message is forced to clos (no CVSS, OPC UA Tunneller)
- [CVE-2020-13582](https://cve.now/CVE-2020-13582.md): A denial-of-service vulnerability exists in the HTTP Server functionality of Micrium uC-HTTP 3.01.00. (CVSS 8.6, Micrium)
- [CVE-2021-23272](https://cve.now/CVE-2021-23272.md): TIBCO BPM Cross Site Scripting (XSS) (CVSS 4.6, TIBCO Software TIBCO BPM Enterprise)
- [CVE-2020-35263](https://cve.now/CVE-2020-35263.md): EgavilanMedia User Registration & Login System 1.0 is affected by SQL injection to the admin panel, which may allow arbitrary code execution (no CVSS)
- [CVE-2020-23449](https://cve.now/CVE-2020-23449.md): newbee-mall all versions are affected by incorrect access control to remotely gain privileges through NewBeeMallIndexConfigServiceImpl.java. (no CVSS)
- [CVE-2020-23448](https://cve.now/CVE-2020-23448.md): newbee-mall all versions are affected by incorrect access control to remotely gain privileges through AdminLoginInterceptor.java. (no CVSS)
- [CVE-2020-23447](https://cve.now/CVE-2020-23447.md): newbee-mall 1.0 is affected by cross-site scripting in shop-cart/settle. (no CVSS)
- [CVE-2020-8295](https://cve.now/CVE-2020-8295.md): A wrong check in Nextcloud Server 19 and prior allowed to perform a denial of service attack when resetting the password for a user. (no CVSS, Nextcloud Server)
- [CVE-2020-8293](https://cve.now/CVE-2020-8293.md): A missing input validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows users to store unlimited data in workflow rules causing (no CVSS, Nextcloud Server)
- [CVE-2020-4949](https://cve.now/CVE-2020-4949.md): IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML d (CVSS 8.2, IBM WebSphere Application Server)
- [CVE-2020-4889](https://cve.now/CVE-2020-4889.md): IBM Spectrum Scale 5.0.0 through 5.0.5.4 and 5.1.0 could allow a local user to poison log files which could impact support and development e (CVSS 4.0, IBM Spectrum Scale)
- [CVE-2020-9492](https://cve.now/CVE-2020-9492.md): In Apache Hadoop 3.2.0 to 3.2.1, 3.0.0-alpha1 to 3.1.3, and 2.0.0-alpha to 2.10.0, WebHDFS client might send SPNEGO authorization header to (no CVSS, Apache Hadoop · org.apache.hadoop:hadoop-common)
- [CVE-2020-27284](https://cve.now/CVE-2020-27284.md): TPEditor (v1.98 and prior) is vulnerable to two out-of-bounds write instances in the way it processes project files, allowing an attacker to (no CVSS, TPEditor)
- [CVE-2020-27280](https://cve.now/CVE-2020-27280.md): A use after free issue has been identified in the way ISPSoft(v3.12 and prior) processes project files, allowing an attacker to craft a spec (no CVSS, ISPSoft)
- [CVE-2020-27288](https://cve.now/CVE-2020-27288.md): An untrusted pointer dereference has been identified in the way TPEditor(v1.98 and prior) processes project files, allowing an attacker to c (no CVSS, TPEditor)
- [CVE-2020-25169](https://cve.now/CVE-2020-25169.md): Reolink P2P Cameras (no CVSS, Reolink RLC-4XX series · Reolink RLC-5XX series +1)
- [CVE-2020-25173](https://cve.now/CVE-2020-25173.md): Reolink P2P Cameras (no CVSS, Reolink RLC-4XX series · Reolink RLC-5XX series +1)
- [CVE-2020-17522](https://cve.now/CVE-2020-17522.md): When ORT (now via atstccfg) generates ip\_allow.config files in Apache Traffic Control 3.0.0 to 3.1.0 and 4.0.0 to 4.1.0, those files include (no CVSS, Apache Traffic Control · github.com/apache/trafficcontrol)
- [CVE-2021-21615](https://cve.now/CVE-2021-21615.md): Jenkins 2.275 and LTS 2.263.2 allows reading arbitrary files using the file browser for workspaces and archived artifacts due to a time-of-c (no CVSS, Jenkins project Jenkins · org.jenkins-ci.main:jenkins-core)
- [CVE-2021-3297](https://cve.now/CVE-2021-3297.md): On Zyxel NBG2105 V1.00(AAGU.2)C0 devices, setting the login cookie to 1 provides administrator access. (no CVSS)
- [CVE-2021-25864](https://cve.now/CVE-2021-25864.md): node-red-contrib-huemagic 3.0.0 is affected by hue/assets/..%2F Directory Traversal.in the res.sendFile API, used in file hue-magic.js, to f (no CVSS, node-red-contrib-huemagic)
- [CVE-2021-25863](https://cve.now/CVE-2021-25863.md): Open5GS 2.1.3 listens on 0.0.0.0:3000 and has a default password of 1423 for the admin account. (no CVSS)
- [CVE-2020-36011](https://cve.now/CVE-2020-36011.md): A cross-site scripting (XSS) issue in Add Patient Form in QDOCS Smart Hospital Management System 3.1 allows a remote attacker to inject arbi (no CVSS)
- [CVE-2021-3291](https://cve.now/CVE-2021-3291.md): Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element (within the modules edit page) and (no CVSS, zencart/zencart)
- [CVE-2021-3304](https://cve.now/CVE-2021-3304.md): Sagemcom F@ST 3686 v2 3.495 devices have a buffer overflow via a long sessionKey to the goform/login URI. (no CVSS)
- [CVE-2021-3223](https://cve.now/CVE-2021-3223.md): Node-RED-Dashboard before 2.26.2 allows ui\_base/js/..%2f directory traversal to read files. (no CVSS, node-red-dashboard)
- [CVE-2021-26266](https://cve.now/CVE-2021-26266.md): cPanel before 92.0.9 allows a Reseller to bypass the suspension lock (SEC-578). (no CVSS)
- [CVE-2021-26267](https://cve.now/CVE-2021-26267.md): cPanel before 92.0.9 allows a MySQL user (who has an old-style password hash) to bypass suspension (SEC-579). (no CVSS)
- [CVE-2021-3114](https://cve.now/CVE-2021-3114.md): In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect outputs, related to an underflow of the lowest (no CVSS, stdlib)
- [CVE-2021-3115](https://cve.now/CVE-2021-3115.md): Go before 1.14.14 and 1.15.x before 1.15.7 on Windows is vulnerable to Command Injection and remote code execution when using the "go get" c (no CVSS, toolchain)
- [CVE-2020-29001](https://cve.now/CVE-2020-29001.md): An issue was discovered on Geeni GNC-CW028 Camera 2.7.2, Geeni GNC-CW025 Doorbell 2.9.5, Merkury MI-CW024 Doorbell 2.9.6, and Merkury MI-CW0 (no CVSS)
- [CVE-2020-29000](https://cve.now/CVE-2020-29000.md): An issue was discovered on Geeni GNC-CW013 doorbell 1.8.1 devices. (no CVSS)
- [CVE-2020-28999](https://cve.now/CVE-2020-28999.md): An issue was discovered in Apexis Streaming Video Web Application on Geeni GNC-CW013 doorbell 1.8.1 devices. (no CVSS)
- [CVE-2020-28998](https://cve.now/CVE-2020-28998.md): An issue was discovered on Geeni GNC-CW013 doorbell 1.8.1 devices. (no CVSS)
- [CVE-2021-3156](https://cve.now/CVE-2021-3156.md): Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root (CVSS 7.8, KEV)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-01-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.