Skip to content
OpenAdvisories

Archive

4 January 2021

Vulnerabilities first published on this day (UTC), newest first.

← December 2020 2021 / January /4 February 2021 →
  1. 119
  2. 22
  3. 38
  4. 445
  5. 548
  6. 660
  7. 757
  8. 895
  9. 92
  10. 10 
  11. 1184
  12. 12178
  13. 13172
  14. 1429
  15. 1552
  16. 16 
  17. 172
  18. 1814
  19. 1948
  20. 20242
  21. 2172
  22. 2254
  23. 231
  24. 242
  25. 2539
  26. 2653
  27. 2744
  28. 2831
  29. 2969
  30. 304
  31. 311
All Critical High Medium Low Exploited only Public exploit

45 results · Feed

  • Critical 9.8
    CVE-2021-3007 Public exploit Scanner template EPSS 75%

    Remote code execution in zendframework and laminas-http

    Laminas Project laminas-http before 2.14.2, and Zend Framework 3.0.0, has a deserialization vulnerability that can lead to remote code execution if the content is controllable, related to the __destruct method of the Zend\Http\Response\Stream class in Stream.…

    zendframework/zendframework laminas/laminas-http Packagist
  • Unscored —
    CVE-2021-21495

    MK-AUTH through 19.01 K4.9 allows CSRF for password changes via the central/executar_central.php?acao=altsenha_princ UR…

  • Unscored —
    CVE-2021-21494

    MK-AUTH through 19.01 K4.9 allows XSS via the admin/logs_ajax.php tipo parameter. An attacker can leverage this to read…

  • Unscored —
    CVE-2020-35965

    decode_frame in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when t…

    ffmpeg ffmpeg ffmpeg ffmpeg4 Debian Ubuntu Alpine
  • Medium 5.9
    CVE-2019-25013

    The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequ…

    glibc eglibc glibc Debian Ubuntu