Skip to content
OpenAdvisories

Archive

4 January 2021

Vulnerabilities first published on this day (UTC), newest first.

← December 2020 2021 / January /4 February 2021 →
  1. 119
  2. 22
  3. 38
  4. 445
  5. 548
  6. 660
  7. 757
  8. 895
  9. 92
  10. 10 
  11. 1184
  12. 12178
  13. 13172
  14. 1429
  15. 1552
  16. 16 
  17. 172
  18. 1814
  19. 1948
  20. 20242
  21. 2172
  22. 2254
  23. 231
  24. 242
  25. 2539
  26. 2653
  27. 2744
  28. 2831
  29. 2969
  30. 304
  31. 311
All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • Medium 5.1
    CVE-2020-5361

    Select Dell Client Commercial and Consumer platforms support a BIOS password reset capability that is designed to assis…

    Dell CPG BIOS
  • Medium 6.1
    CVE-2020-29498

    Dell Wyse Management Suite versions prior to 3.1 contain an open redirect vulnerability. A remote unauthenticated attac…

    Dell Wyse Management Suite
  • Medium 4.8
    CVE-2020-29496

    Dell Wyse Management Suite versions prior to 3.1 contain a stored cross-site scripting vulnerability. A remote authenti…

    Dell Wyse Management Suite
  • Medium 5.4
    CVE-2020-29497

    Dell Wyse Management Suite versions prior to 3.1 contain a stored cross-site scripting vulnerability. A remote authenti…

    Dell Wyse Management Suite
  • Medium 6.1
    CVE-2020-26293

    Possible XSS bypass if style tag is allowed

    HtmlSanitizer is a .NET library for cleaning HTML fragments and documents from constructs that can lead to XSS attacks. In HtmlSanitizer before version 5.0.372, there is a possible XSS bypass if style tag is allowed. If you have explicitly allowed the `<style…

    mganss HtmlSanitizer HtmlSanitizer NuGet
  • Medium 6.5
    CVE-2020-4942

    IBM Curam Social Program Management 7.0.9 and 7.0.11 is vulnerable to cross-site request forgery which could allow an a…

    IBM Curam SPM
  • Medium 6.7
    CVE-2020-4928

    IBM Cloud Pak System 2.3 could allow a local privileged attacker to upload arbitrary files. By intercepting the request…

    IBM Cloud Pak System
  • Medium 4.7
    CVE-2020-4919

    IBM Cloud Pak System 2.3 has insufficient logout controls which could allow an authenticated privileged user to imperso…

    IBM Cloud Pak System
  • Medium 4.3
    CVE-2020-4917

    IBM Cloud Pak System 2.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious…

    IBM Cloud Pak System
  • Medium 5.5
    CVE-2020-4916

    IBM Cloud Pak System 2.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Java…

    IBM Cloud Pak System
  • Medium 4.4
    CVE-2020-4913

    IBM Cloud Pak System 2.3 could reveal credential information in the HTTP response to a local privileged user. IBM X-For…

    IBM Cloud Pak System
  • Medium 4.7
    CVE-2020-4912

    IBM Cloud Pak System 2.3 Self Service Console could allow a privilege escalation by capturing the user request URL when…

    IBM Cloud Pak System
  • Medium 4.8
    CVE-2020-4910

    IBM Cloud Pak System 2.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Java…

    IBM Cloud Pak System
  • Medium 4.8
    CVE-2020-4909

    IBM Cloud Pak System 2.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Java…

    IBM Cloud Pak System
  • Medium 5.9
    CVE-2019-25013

    The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequ…

    glibc eglibc glibc Debian Ubuntu