Archive
8 January 2021
Vulnerabilities first published on this day (UTC), newest first.
95 results · Feed
-
Medium 5.4
IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…
-
Medium 5.4
IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…
-
Medium 4.3
IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical er…
-
Medium 4.6
IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…
-
Medium 4.3
IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical er…
-
Medium 5.3
IBM Spectrum Protect Plus 10.1.0 through 10.1.6 may allow unauthenticated and unauthorized access to VDAP proxy which c…
-
Medium 4.0
IBM Spectrum Protect Plus 10.1.0 through 10.1.6 does not invalidate session after a password reset which could allow a …
-
Medium 6.1
IBM Spectrum Protect Plus 10.1.0 through 10.1.6 could allow a remote attacker to hijack the clicking action of the vict…
-
Medium 6.5
IBM Spectrum Protect Plus 10.1.0 through 10.1.6 is vulnerable to HTTP header injection, caused by improper validation o…
-
Low 3.7
IBM Spectrum Protect Plus 10.1.0 through 10.1.6 may include sensitive information in its URLs increasing the risk of su…
-
Low 2.9
IBM Spectrum Protect Plus 10.1.0 through 10.1.6 may allow a local user to obtain access to information beyond their int…
-
Medium 6.8
Dell Inspiron 5675 BIOS versions prior to 1.4.1 contain a UEFI BIOS RuntimeServices overwrite vulnerability. A local at…
-
Unscored —
A flaw was found in ceph in versions prior to 16.y.z where ceph stores mgr module passwords in clear text. This can be …
-
Unscored —
Heap buffer overflow in audio in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit …
-
Unscored —
User after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised …
-
Unscored —CVE-2021-21110 Public exploit
Use after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially perfor…
-
Unscored —
Insufficient policy enforcement in WebUI in Google Chrome prior to 87.0.4280.141 allowed an attacker who convinced a us…
-
Unscored —
Heap buffer overflow in Skia in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit h…
-
Unscored —
Use after free in payments in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the re…
-
Unscored —
Use after free in drag and drop in Google Chrome on Linux prior to 87.0.4280.141 allowed a remote attacker who had comp…
-
Unscored —
Use after free in Blink in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap c…
-
Unscored —
Use after free in audio in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap c…
-
Unscored —
Use after free in media in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the rende…
-
Unscored —
Use after free in autofill in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the re…
-
Unscored —
Insufficient data validation in networking in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to bypass …
-
Unscored —
Insufficient data validation in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially expl…
-
Unscored —
Out of bounds read in networking in Google Chrome prior to 87.0.4280.88 allowed a remote attacker who had compromised t…
-
Unscored —
Use after free in media in Google Chrome on OS X prior to 87.0.4280.88 allowed a remote attacker to potentially exploit…
-
Unscored —
Uninitialized Use in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to obtain potentially sensitiv…
-
Unscored —
Use after free in extensions in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit he…
-
Unscored —
Use after free in clipboard in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit hea…
-
Unscored —
Inappropriate implementation in cookies in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to bypass cook…
-
Unscored —
Inappropriate implementation in WebUSB in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof securi…
-
Unscored —
Insufficient data validation in cros-disks in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker…
-
Unscored —
Inappropriate implementation in WebRTC in Google Chrome prior to 87.0.4280.66 allowed a local attacker to bypass policy…
-
Unscored —
Insufficient data validation in Blink in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to inject arbitr…
-
Unscored —
Insufficient data validation in sharing in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof the c…
-
Unscored —
Insufficient data validation in UI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof the conten…
-
Unscored —
Heap buffer overflow in WebRTC in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit …
-
Unscored —
Insufficient policy enforcement in developer tools in Google Chrome prior to 87.0.4280.66 allowed an attacker who convi…