Skip to content
OpenAdvisories

Archive

14 January 2021

Vulnerabilities first published on this day (UTC), newest first.

← December 2020 2021 / January /14 February 2021 →
  1. 119
  2. 22
  3. 38
  4. 445
  5. 548
  6. 660
  7. 757
  8. 895
  9. 92
  10. 10 
  11. 1184
  12. 12178
  13. 13172
  14. 1429
  15. 1552
  16. 16 
  17. 172
  18. 1814
  19. 1948
  20. 20242
  21. 2172
  22. 2254
  23. 231
  24. 242
  25. 2539
  26. 2653
  27. 2744
  28. 2831
  29. 2969
  30. 304
  31. 311
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.7
    CVE-2020-29494

    Dell EMC Avamar Server, versions 19.1, 19.2, 19.3, contain a Path Traversal Vulnerability in PDM. A remote user could p…

    Dell Avamar
  • High 8.8
    CVE-2020-6572 Exploited EPSS 11%

    Use after free in Media in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to execute arbitrary code via …

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu
    KEV Jan 10, 2022
  • High 7.3
    CVE-2021-21261

    Flatpak sandbox escape via spawn portal

    Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. A bug was discovered in the `flatpak-portal` service that can allow sandboxed applications to execute arbitrary code on the host system (a sandbox escape). Th…

    Flatpak Flatpak flatpak flatpak Debian Ubuntu Alpine
  • High 8.8
    CVE-2020-6776

    CSRF in Bosch PRAESIDEO and Bosch PRAESENSA Management Interface

    A vulnerability in the web-based management interface of Bosch PRAESIDEO until and including version 4.41 and Bosch PRAESENSA until and including version 1.10 allows an unauthenticated remote attacker to trigger actions on an affected system on behalf of anot…

    Bosch PRAESIDEO PRAESENSA
  • High 7.3
    CVE-2020-28470

    Cross-site Scripting (XSS)

    This affects the package @scullyio/scully before 1.0.9. The transfer state is serialised with the JSON.stringify() function and then written into the HTML page.

    @scullyio/ng-lib @scullyio/scully npm
  • High 7.5
    CVE-2020-26732 Public exploit

    SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 does not set the Secure flag for the session cookie…