Skip to content
OpenAdvisories

Archive

13 January 2021

Vulnerabilities first published on this day (UTC), newest first.

← December 2020 2021 / January /13 February 2021 →
  1. 119
  2. 22
  3. 38
  4. 445
  5. 548
  6. 660
  7. 757
  8. 895
  9. 92
  10. 10 
  11. 1184
  12. 12178
  13. 13172
  14. 1429
  15. 1552
  16. 16 
  17. 172
  18. 1814
  19. 1948
  20. 20242
  21. 2172
  22. 2254
  23. 231
  24. 242
  25. 2539
  26. 2653
  27. 2744
  28. 2831
  29. 2969
  30. 304
  31. 311
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2020-23653

    ThinkAdmin insecure unserialize vulnerability

    An insecure unserialize vulnerability was discovered in ThinkAdmin versions 4.x through 6.x in app/admin/controller/api/Update.php and app/wechat/controller/api/Push.php, which may lead to arbitrary remote code execution.

    zoujingli/thinkadmin Packagist
  • Critical 9.8
    CVE-2021-3028

    git-big-picture Code Execution

    git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution.

    git-big-picture git-big-picture git-big-picture Debian Ubuntu PyPI
  • Critical 9.8
    CVE-2021-23899

    Arbitrary code injection in json-sanitizer

    OWASP json-sanitizer before 1.2.2 may emit closing SCRIPT tags and CDATA section delimiters for crafted input. This allows an attacker to inject arbitrary HTML or XML into embedding documents.

    com.mikesamuel:json-sanitizer Maven