Skip to content
OpenAdvisories

Archive

8 January 2021

Vulnerabilities first published on this day (UTC), newest first.

← December 2020 2021 / January /8 February 2021 →
  1. 119
  2. 22
  3. 38
  4. 445
  5. 548
  6. 660
  7. 757
  8. 895
  9. 92
  10. 10 
  11. 1184
  12. 12178
  13. 13172
  14. 1429
  15. 1552
  16. 16 
  17. 172
  18. 1814
  19. 1948
  20. 20242
  21. 2172
  22. 2254
  23. 231
  24. 242
  25. 2539
  26. 2653
  27. 2744
  28. 2831
  29. 2969
  30. 304
  31. 311
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.6
    CVE-2020-16017 Exploited

    Use after free in CefSharp

    Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu NuGet
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2020-7784

    command_injection

    This affects all versions of package ts-process-promises. The injection point is located in line 45 in main entry of package in lib/process-promises.js. The vulnerability is demonstrated with the following PoC:

    ts-process-promises npm
  • Critical 9.8
    CVE-2020-7794

    Command Injection

    This affects all versions of package buns. The injection point is located in line 678 in index file lib/index.js in the exported function install(requestedModule).

    buns npm