Archive

12 January 2021

Vulnerabilities first published on this day (UTC), newest first.

← December 2020 2021 / January /12 February 2021 →

All Critical High Medium Low Exploited only Public exploit

47 results · Clear filters · Feed

Medium 5.5

CVE-2021-1725

Bot Framework SDK Information Disclosure Vulnerability

Bot Framework SDK Information Disclosure Vulnerability

Microsoft Bot Framework SDK for .NET Framework Bot Framework SDK for JavaScript Bot Framework SDK for Python npm PyPI

Jan 12, 2021
Medium 4.6

CVE-2021-1717

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Foundation 2013 Service Pack 1

Jan 12, 2021
Medium 5.7

CVE-2021-1708

Windows GDI+ Information Disclosure Vulnerability

Windows GDI+ Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 12, 2021
Medium 4.2

CVE-2021-1705

Microsoft Edge (HTML-based) Memory Corruption Vulnerability

Microsoft Edge (HTML-based) Memory Corruption Vulnerability

Microsoft Microsoft Edge (EdgeHTML-based) Browsers

Jan 12, 2021
Medium 5.5

CVE-2021-1699 Public exploit

Windows (modem.sys) Information Disclosure Vulnerability

Windows (modem.sys) Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 12, 2021
Medium 5.5

CVE-2021-1696

Windows Graphics Component Information Disclosure Vulnerability

Windows Graphics Component Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 12, 2021
Medium 5.0

CVE-2021-1684

Windows Bluetooth Security Feature Bypass Vulnerability

Microsoft is aware of the "Impersonation in the Passkey Entry Protocol" vulnerability. For more information regarding the vulnerability, please see this statement from the Bluetooth SIG. To address the vulnerability, Microsoft has released a softwar…

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 12, 2021
Medium 5.0

CVE-2021-1683

Windows Bluetooth Security Feature Bypass Vulnerability

Microsoft is aware of the "Impersonation in the Passkey Entry Protocol" vulnerability. For more information regarding the vulnerability, please see this statement from the Bluetooth SIG. To address the vulnerability, Microsoft has released a softwar…

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 12, 2021
Medium 6.5

CVE-2021-1679

Windows CryptoAPI Denial of Service Vulnerability

Windows CryptoAPI Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 12, 2021
Medium 5.5

CVE-2021-1677

Azure Active Directory Pod Identity Spoofing Vulnerability

Azure Active Directory Pod Identity Spoofing Vulnerability

Microsoft Microsoft Azure Kubernetes Service

Jan 12, 2021
Medium 5.5

CVE-2021-1676

Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability

Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 12, 2021
Medium 5.5

CVE-2021-1672

Windows Projected File System FS Filter Driver Information Disclosure Vulnerability

Windows Projected File System FS Filter Driver Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 12, 2021
Medium 5.5

CVE-2021-1670

Windows Projected File System FS Filter Driver Information Disclosure Vulnerability

Windows Projected File System FS Filter Driver Information Disclosure Vulnerability

Microsoft Windows 10 Version 20H2 Windows Server version 20H2 Windows 10 Version 2004 Windows

Jan 12, 2021
Medium 5.5

CVE-2021-1663

Windows Projected File System FS Filter Driver Information Disclosure Vulnerability

Windows Projected File System FS Filter Driver Information Disclosure Vulnerability

Microsoft Windows 10 Version 20H2 Windows Server version 20H2 Windows 10 Version 2004 Windows

Jan 12, 2021
Medium 5.5

CVE-2021-1656 Public exploit

TPM Device Driver Information Disclosure Vulnerability

TPM Device Driver Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 12, 2021
Medium 6.6

CVE-2021-1646

Windows WLAN Service Elevation of Privilege Vulnerability

Windows WLAN Service Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 12, 2021
Medium 5.0

CVE-2021-1645

Windows Docker Information Disclosure Vulnerability

Windows Docker Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 12, 2021
Medium 4.6

CVE-2021-1641

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Foundation 2013 Service Pack 1

Jan 12, 2021
Medium 5.5

CVE-2021-1637

Windows DNS Query Information Disclosure Vulnerability

Windows DNS Query Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 12, 2021
Medium 6.1

CVE-2020-36190

rails_admin ruby gem XSS vulnerability

RailsAdmin (aka rails_admin) before 1.4.3 and 2.x before 2.0.2 allows XSS via nested forms.

rails_admin RubyGems

Jan 12, 2021
Medium 4.3

CVE-2020-4674

IBM Workload Automation 9.5 stores the server path in URLs that could aid in further attacks against the system. IBM X-…

IBM Workload Automation

Jan 12, 2021
Medium 6.4

CVE-2020-4838

IBM API Connect 5.0.0.0 through 5.0.8.10 is vulnerable to stored cross-site scripting. This vulnerability allows users …

IBM API Connect

Jan 12, 2021
Medium 4.3

CVE-2020-4673

IBM Workload Automation 9.5 stores sensitive information in HTML comments that could aid in further attacks against the…

IBM Workload Automation

Jan 12, 2021
Medium 5.3

CVE-2021-21469

When security guidelines for SAP NetWeaver Master Data Management running on windows have not been thoroughly reviewed,…

SAP_SE SAP NetWeaver Master Data Management

Jan 12, 2021
Medium 5.4

CVE-2021-21445

SAP Commerce Cloud, versions - 1808, 1811, 1905, 2005, 2011, allows an authenticated attacker to include invalidated da…

SAP_SE SAP Commerce Cloud

Jan 12, 2021
Medium 4.3

CVE-2021-21463

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted source…

SAP_SE SAP 3D Visual Enterprise Viewer

Jan 12, 2021
Medium 4.3

CVE-2021-21467

SAP Banking Services (Generic Market Data) does not perform necessary authorization checks for an authenticated user, r…

SAP_SE SAP Banking Services (Generic Market Data)

Jan 12, 2021
Medium 6.5

CVE-2021-21468

The BW Database Interface does not perform necessary authorization checks for an authenticated user, resulting in escal…

SAP_SE SAP Business Warehouse

Jan 12, 2021
Medium 4.3

CVE-2021-21462

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted source…

SAP_SE SAP 3D Visual Enterprise Viewer

Jan 12, 2021
Medium 5.4

CVE-2021-21447

SAP BusinessObjects Business Intelligence platform, versions 410, 420, allows an authenticated attacker to inject malic…

SAP_SE SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface)

Jan 12, 2021
Medium 4.3

CVE-2021-21457

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted source…

SAP_SE SAP 3D Visual Enterprise Viewer

Jan 12, 2021
Medium 4.3

CVE-2021-21456

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted source…

SAP_SE SAP 3D Visual Enterprise Viewer

Jan 12, 2021
Medium 5.3

CVE-2021-21448

SAP GUI for Windows, version - 7.60, allows an attacker to spoof logon credentials for Application Server ABAP backend …

SAP_SE SAP GUI for Windows Windows

Jan 12, 2021
Medium 4.3

CVE-2021-21461

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted source…

SAP_SE SAP 3D Visual Enterprise Viewer

Jan 12, 2021
Medium 4.3

CVE-2021-21449

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted source…

SAP_SE SAP 3D Visual Enterprise Viewer

Jan 12, 2021
Medium 4.3

CVE-2021-21458

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted source…

SAP_SE SAP 3D Visual Enterprise Viewer

Jan 12, 2021
Medium 4.3

CVE-2021-21450

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PSD file received from untrusted source…

SAP_SE SAP 3D Visual Enterprise Viewer

Jan 12, 2021
Medium 4.3

CVE-2021-21453

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated RLE file received from untrusted source…

SAP_SE SAP 3D Visual Enterprise Viewer

Jan 12, 2021
Medium 4.3

CVE-2021-21454

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated RLE file received from untrusted source…

SAP_SE SAP 3D Visual Enterprise Viewer

Jan 12, 2021
Medium 4.3

CVE-2021-21464

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted source…

SAP_SE SAP 3D Visual Enterprise Viewer

Jan 12, 2021