Skip to content
OpenAdvisories

Archive

14 January 2021

Vulnerabilities first published on this day (UTC), newest first.

← December 2020 2021 / January /14 February 2021 →
  1. 119
  2. 22
  3. 38
  4. 445
  5. 548
  6. 660
  7. 757
  8. 895
  9. 92
  10. 10 
  11. 1184
  12. 12178
  13. 13172
  14. 1429
  15. 1552
  16. 16 
  17. 172
  18. 1814
  19. 1948
  20. 20242
  21. 2172
  22. 2254
  23. 231
  24. 242
  25. 2539
  26. 2653
  27. 2744
  28. 2831
  29. 2969
  30. 304
  31. 311
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.1
    CVE-2020-27219 Public exploit

    Cross-site Scripting in Eclipse Hawkbit

    In all version of Eclipse Hawkbit prior to 0.3.0M7, the HTTP 404 (Not Found) JSON response body returned by the REST API may contain unsafe characters within the path attribute. Sending a POST request to a non existing resource will return the full path from …

    The Eclipse Foundation Eclipse hawkBit org.eclipse.hawkbit:hawkbit-parent Maven
  • Medium 4.8
    CVE-2021-22132

    Insufficiently Protected Credentials in Elasticsearch

    Elasticsearch versions 7.7.0 to 7.10.1 contain an information disclosure flaw in the async search API. Users who execute an async search will improperly store the HTTP headers. An Elasticsearch user with the ability to read the .tasks index could obtain sensi…

    Elastic Elasticsearch elasticsearch org.elasticsearch:elasticsearch Ubuntu Maven
  • Medium 4.8
    CVE-2020-6777

    Stored XSS in Bosch PRAESIDEO and Bosch PRAESENSA Management Interface

    A vulnerability in the web-based management interface of Bosch PRAESIDEO until and including version 4.41 and Bosch PRAESENSA until and including version 1.10 allows an authenticated remote attacker with admin privileges to mount a stored Cross-Site-Scripting…

    Bosch PRAESENSA PRAESIDEO
  • Medium 5.9
    CVE-2021-24122 EPSS 23%

    Apache Tomcat information disclosure

    When serving resources from a network location using the NTFS file system, Apache Tomcat versions 10.0.0-M1 to 10.0.0-M9, 9.0.0.M1 to 9.0.39, 8.5.0 to 8.5.59 and 7.0.0 to 7.0.106 were susceptible to JSP source code disclosure in some configurations. The root …

    Apache Software Foundation Apache Tomcat tomcat9 tomcat8 Debian Ubuntu Maven
  • Medium 6.3
    CVE-2020-16119

    DCCP CCID structure use-after-free

    Use-after-free vulnerability in the Linux kernel exploitable by a local attacker due to reuse of a DCCP socket with an attached dccps_hc_tx_ccid object as a listener after being released. Fixed in Ubuntu Linux kernel 5.4.0-51.56, 5.3.0-68.63, 4.15.0-121.123, …

    Canonical Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu