Skip to content
OpenAdvisories

Archive

5 January 2021

Vulnerabilities first published on this day (UTC), newest first.

← December 2020 2021 / January /5 February 2021 →
  1. 119
  2. 22
  3. 38
  4. 445
  5. 548
  6. 660
  7. 757
  8. 895
  9. 92
  10. 10 
  11. 1184
  12. 12178
  13. 13172
  14. 1429
  15. 1552
  16. 16 
  17. 172
  18. 1814
  19. 1948
  20. 20242
  21. 2172
  22. 2254
  23. 231
  24. 242
  25. 2539
  26. 2653
  27. 2744
  28. 2831
  29. 2969
  30. 304
  31. 311
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.7
    CVE-2021-21234 Public exploit EPSS 21%

    Directory Traversal

    spring-boot-actuator-logview in a library that adds a simple logfile viewer as spring boot actuator endpoint. It is maven package "eu.hinsch:spring-boot-actuator-logview". In spring-boot-actuator-logview before version 0.2.13 there is a directory traversal vu…

    lukashinsch spring-boot-actuator-logview eu.hinsch:spring-boot-actuator-logview Maven
  • Unscored —
    CVE-2020-35488 Public exploit

    The fileop module of the NXLog service in NXLog Community Edition 2.10.2150 allows remote attackers to cause a denial o…

  • Critical 9.1
    CVE-2020-17519 Exploited Public exploit EPSS 98%

    Apache Flink directory traversal attack: reading remote files through the REST API

    A change introduced in Apache Flink 1.11.0 (and released in 1.11.1 and 1.11.2 as well) allows attackers to read any file on the local filesystem of the JobManager through the REST interface of the JobManager process. Access is restricted to files accessible b…

    Apache Software Foundation Apache Flink org.apache.flink:flink-runtime_2.11 org.apache.flink:flink-runtime_2.12 Maven
    KEV May 23, 2024
  • High 7.5
    CVE-2020-17518 Public exploit EPSS 49%

    Apache Flink directory traversal attack: remote file writing through the REST API

    Apache Flink 1.5.1 introduced a REST handler that allows you to write an uploaded file to an arbitrary location on the local file system, through a maliciously modified HTTP HEADER. The files can be written to any location accessible by Flink 1.5.1. All users…

    Apache Software Foundation Apache Flink org.apache.flink:flink-runtime Maven
  • Unscored —
    CVE-2021-3018 Public exploit EPSS 19%

    ipeak Infosystems ibexwebCMS (aka IPeakCMS) 3.5 is vulnerable to an unauthenticated Boolean-based SQL injection via the…

  • Unscored —
    CVE-2021-3019 Public exploit EPSS 17%

    ffay lanproxy 0.1 allows Directory Traversal to read /../conf/config.properties to obtain credentials for a connection …