Skip to content
OpenAdvisories

Archive

7 January 2021

Vulnerabilities first published on this day (UTC), newest first.

← December 2020 2021 / January /7 February 2021 →
  1. 119
  2. 22
  3. 38
  4. 445
  5. 548
  6. 660
  7. 757
  8. 895
  9. 92
  10. 10 
  11. 1184
  12. 12178
  13. 13172
  14. 1429
  15. 1552
  16. 16 
  17. 172
  18. 1814
  19. 1948
  20. 20242
  21. 2172
  22. 2254
  23. 231
  24. 242
  25. 2539
  26. 2653
  27. 2744
  28. 2831
  29. 2969
  30. 304
  31. 311
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Medium 5.9
    CVE-2020-4898

    IBM Emptoris Strategic Supply Management 10.1.3 uses weaker than expected cryptographic algorithms that could allow an …

    IBM Emptoris Strategic Supply Management
  • Medium 5.3
    CVE-2020-4897

    IBM Emptoris Contract Management and IBM Emptoris Spend Analysis 10.1.0, 10.1.1, and 10.1.3 could allow a remote attack…

    IBM Emptoris Spend Analysis Emptoris Contract Management
  • Medium 6.5
    CVE-2020-4896

    IBM Emptoris Sourcing 10.1.0, 10.1.1, and 10.1.3 is vulnerable to web cache poisoning, caused by improper input validat…

    IBM Emptoris Sourcing
  • Medium 5.9
    CVE-2020-4893

    IBM Emptoris Strategic Supply Management 10.1.0, 10.1.1, and 10.1.3 transmits sensitive information in HTTP GET request…

    IBM Emptoris Strategic Supply Management
  • Medium 6.4
    CVE-2020-4895

    IBM Emptoris Strategic Supply Management 10.1.0, 10.1.1, and 10.1.3 is vulnerable to stored cross-site scripting. This …

    IBM Emptoris Sourcing
  • Medium 5.4
    CVE-2020-4892

    IBM Emptoris Contract Management 10.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed…

    IBM Emptoris Contract Management
  • Medium 5.8
    CVE-2020-6656

    File parsing Type Confusion Remote code execution vulerability

    Eaton's easySoft software v7.xx prior to v7.22 are susceptible to file parsing type confusion remote code execution vulnerability. A malicious entity can execute a malicious code or make the application crash by tricking user upload a malformed .E70 file in t…

    Eaton easySoft Software
  • Medium 5.8
    CVE-2020-6655

    File parsing Out-Of-Bounds read remote code execution

    The Eaton's easySoft software v7.xx prior to v7.22 are susceptible to Out-of-bounds remote code execution vulnerability. A malicious entity can execute a malicious code or make the application crash by tricking user to upload the malformed .E70 file in the ap…

    Eaton easySoft Software
  • Medium 6.1
    CVE-2020-25476

    Liferay Portal Vulnerable to Cross-Site Scripting (XSS) via User Name Parameter

    Liferay CMS Portal version 7.1.3 and 7.2.1 have a blind persistent cross-site scripting (XSS) vulnerability in the user name parameter to Calendar. An attacker can insert the malicious payload on the username, lastname or surname fields of its own profile, an…

    com.liferay.portal:release.portal.bom Maven
  • Medium 4.7
    CVE-2020-24902

    Quixplorer <=2.4.1 is vulnerable to reflected cross-site scripting (XSS) caused by improper validation of user supplied…

  • Medium 6.1
    CVE-2020-24901

    The default installation of Krpano Panorama Viewer version <=1.20.8 is vulnerable to Reflected XSS due to insecure remo…

  • Medium 6.1
    CVE-2020-26768

    Formstone Vulnerable to Reflected XSS

    Formstone <=1.4.16 is vulnerable to a Reflected Cross-Site Scripting (XSS) vulnerability caused by improper validation of user supplied input in the upload-target.php and upload-chunked.php files. A remote attacker could exploit this vulnerability using a spe…

    formstone npm