Skip to content
OpenAdvisories

Archive

6 January 2021

Vulnerabilities first published on this day (UTC), newest first.

← December 2020 2021 / January /6 February 2021 →
  1. 119
  2. 22
  3. 38
  4. 445
  5. 548
  6. 660
  7. 757
  8. 895
  9. 92
  10. 10 
  11. 1184
  12. 12178
  13. 13172
  14. 1429
  15. 1552
  16. 16 
  17. 172
  18. 1814
  19. 1948
  20. 20242
  21. 2172
  22. 2254
  23. 231
  24. 242
  25. 2539
  26. 2653
  27. 2744
  28. 2831
  29. 2969
  30. 304
  31. 311
All Critical High Medium Low Exploited only Public exploit

60 results · Feed

  • Unscored —
    CVE-2020-36170

    The Ultimate Member plugin before 2.1.13 for WordPress mishandles hidden name="timestamp" fields in forms.

  • Unscored —
    CVE-2020-8884

    rcdsvc in the Proofpoint Insider Threat Management Windows Agent (formerly ObserveIT Windows Agent) before 7.9 allows r…

  • Unscored —
    CVE-2020-10658

    The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in th…

  • Unscored —
    CVE-2020-10657

    The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in th…

  • Unscored —
    CVE-2020-10656

    The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in th…

  • Unscored —
    CVE-2020-10655

    The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in th…

  • Low 3.7
    CVE-2020-4336

    IBM WebSphere eXtreme Scale 8.6.1 stores sensitive information in URL parameters. This may lead to information disclosu…

    IBM WebSphere Extreme Scale
  • Critical 9.8
    CVE-2020-26759

    Arbitrary code execution in clickhouse-driver

    clickhouse-driver before 0.1.5 allows a malicious clickhouse server to trigger a crash or execute arbitrary code (on a database client) via a crafted server response, due to a buffer overflow.

    clickhouse-driver python-clickhouse-driver Debian PyPI
  • Medium 5.7
    CVE-2021-21235

    Infinite loop in parsing PNG files in

    kamadak-exif is an exif parsing library written in pure Rust. In kamadak-exif version 0.5.2, there is an infinite loop in parsing crafted PNG files. Specifically, reader::read_from_container can cause an infinite loop when a crafted PNG file is given. This is…

    kamadak exif-rs kamadak-exif rust-kamadak-exif Ubuntu crates.io
  • Critical 9.3
    CVE-2020-36160

    An issue was discovered in Veritas System Recovery before 21.2. On start-up, it loads the OpenSSL library from \usr\loc…

  • Unscored —
    CVE-2020-36161

    An issue was discovered in Veritas APTARE 10.4 before 10.4P9 and 10.5 before 10.5P3. By default, on Windows systems, us…

  • Critical 9.3
    CVE-2020-36162

    An issue was discovered in Veritas CloudPoint before 8.3.0.1+hotfix. The CloudPoint Windows Agent leverages OpenSSL. Th…

  • Critical 9.3
    CVE-2020-36163

    An issue was discovered in Veritas NetBackup and OpsCenter through 8.3.0.1. NetBackup processes using Strawberry Perl a…

  • Critical 9.3
    CVE-2020-36164

    An issue was discovered in Veritas Enterprise Vault through 14.0. On start-up, it loads the OpenSSL library. The OpenSS…

  • Critical 9.3
    CVE-2020-36165

    An issue was discovered in Veritas Desktop and Laptop Option (DLO) before 9.4. On start-up, it loads the OpenSSL librar…

  • Critical 9.3
    CVE-2020-36166

    An issue was discovered in Veritas InfoScale 7.x through 7.4.2 on Windows, Storage Foundation through 6.1 on Windows, S…

  • Critical 9.3
    CVE-2020-36167

    An issue was discovered in the server in Veritas Backup Exec through 16.2, 20.6 before hotfix 298543, and 21.1 before h…

  • Critical 9.3
    CVE-2020-36168

    An issue was discovered in Veritas Resiliency Platform 3.4 and 3.5. It leverages OpenSSL on Windows systems when using …

  • Critical 9.3
    CVE-2020-36169

    An issue was discovered in Veritas NetBackup through 8.3.0.1 and OpsCenter through 8.3.0.1. Processes using OpenSSL att…

  • Unscored —
    CVE-2020-8287 Public exploit EPSS 16%

    Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in an HTTP request (for ex…

    Node.js node nodejs nodejs Debian Ubuntu Alpine