Skip to content
OpenAdvisories

Archive

5 January 2021

Vulnerabilities first published on this day (UTC), newest first.

← December 2020 2021 / January /5 February 2021 →
  1. 119
  2. 22
  3. 38
  4. 445
  5. 548
  6. 660
  7. 757
  8. 895
  9. 92
  10. 10 
  11. 1184
  12. 12178
  13. 13172
  14. 1429
  15. 1552
  16. 16 
  17. 172
  18. 1814
  19. 1948
  20. 20242
  21. 2172
  22. 2254
  23. 231
  24. 242
  25. 2539
  26. 2653
  27. 2744
  28. 2831
  29. 2969
  30. 304
  31. 311
All Critical High Medium Low Exploited only Public exploit

48 results · Feed

  • Unscored —
    CVE-2020-26045

    FUEL CMS 1.4.11 allows SQL Injection via parameter 'name' in /fuel/permissions/create/. Exploiting this issue could all…

  • Unscored —
    CVE-2020-7202

    A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out…

  • Unscored —
    CVE-2020-35488 Public exploit

    The fileop module of the NXLog service in NXLog Community Edition 2.10.2150 allows remote attackers to cause a denial o…

  • Critical 9.1
    CVE-2020-17519 Exploited Public exploit Scanner template EPSS 98%

    Apache Flink directory traversal attack: reading remote files through the REST API

    A change introduced in Apache Flink 1.11.0 (and released in 1.11.1 and 1.11.2 as well) allows attackers to read any file on the local filesystem of the JobManager through the REST interface of the JobManager process. Access is restricted to files accessible b…

    Apache Software Foundation Apache Flink org.apache.flink:flink-runtime_2.11 org.apache.flink:flink-runtime_2.12 Maven
    KEV May 23, 2024
  • High 7.5
    CVE-2020-17518 Public exploit Scanner template EPSS 49%

    Apache Flink directory traversal attack: remote file writing through the REST API

    Apache Flink 1.5.1 introduced a REST handler that allows you to write an uploaded file to an arbitrary location on the local file system, through a maliciously modified HTTP HEADER. The files can be written to any location accessible by Flink 1.5.1. All users…

    Apache Software Foundation Apache Flink org.apache.flink:flink-runtime Maven
  • Unscored —
    CVE-2021-3018 Public exploit Scanner template EPSS 19%

    ipeak Infosystems ibexwebCMS (aka IPeakCMS) 3.5 is vulnerable to an unauthenticated Boolean-based SQL injection via the…

  • Unscored —
    CVE-2021-3019 Public exploit Scanner template EPSS 17%

    ffay lanproxy 0.1 allows Directory Traversal to read /../conf/config.properties to obtain credentials for a connection …

  • High 8.8
    CVE-2020-36158

    mwifiex_cmd_802_11_ad_hoc_start in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu