Skip to content
OpenAdvisories

Archive

4 January 2021

Vulnerabilities first published on this day (UTC), newest first.

← December 2020 2021 / January /4 February 2021 →
  1. 119
  2. 22
  3. 38
  4. 445
  5. 548
  6. 660
  7. 757
  8. 895
  9. 92
  10. 10 
  11. 1184
  12. 12178
  13. 13172
  14. 1429
  15. 1552
  16. 16 
  17. 172
  18. 1814
  19. 1948
  20. 20242
  21. 2172
  22. 2254
  23. 231
  24. 242
  25. 2539
  26. 2653
  27. 2744
  28. 2831
  29. 2969
  30. 304
  31. 311
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 10.0
    CVE-2020-29492

    Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticat…

    Dell Wyse Proprietary OS (ThinOS)
  • Critical 10.0
    CVE-2020-29491

    Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticat…

    Dell Wyse Proprietary OS (ThinOS)
  • Critical 10.0
    CVE-2020-36155 Scanner template

    An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escala…

  • Critical 9.9
    CVE-2020-36156

    An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Authenticated Privilege Escalati…

  • Critical 10.0
    CVE-2020-36157

    An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escala…

  • Critical 9.8
    CVE-2020-28464

    Remote Code Execution (RCE)

    This affects the package djv before 2.1.4. By controlling the schema file, an attacker can run arbitrary JavaScript code on the victim machine.

    djv npm
  • Critical 9.8
    CVE-2021-3007 Public exploit Scanner template EPSS 75%

    Remote code execution in zendframework and laminas-http

    Laminas Project laminas-http before 2.14.2, and Zend Framework 3.0.0, has a deserialization vulnerability that can lead to remote code execution if the content is controllable, related to the __destruct method of the Zend\Http\Response\Stream class in Stream.…

    zendframework/zendframework laminas/laminas-http Packagist