Skip to content
OpenAdvisories

Archive

15 January 2021

Vulnerabilities first published on this day (UTC), newest first.

← December 2020 2021 / January /15 February 2021 →
  1. 119
  2. 22
  3. 38
  4. 445
  5. 548
  6. 660
  7. 757
  8. 895
  9. 92
  10. 10 
  11. 1184
  12. 12178
  13. 13172
  14. 1429
  15. 1552
  16. 16 
  17. 172
  18. 1814
  19. 1948
  20. 20242
  21. 2172
  22. 2254
  23. 231
  24. 242
  25. 2539
  26. 2653
  27. 2744
  28. 2831
  29. 2969
  30. 304
  31. 311
All Critical High Medium Low Exploited only Public exploit

52 results · Feed

  • Medium 5.3
    CVE-2021-22166

    An attacker could cause a Prometheus denial of service in GitLab 13.7+ by sending an HTTP request with a malformed meth…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 5.3
    CVE-2021-22167

    An issue has been discovered in GitLab affecting all versions starting from 12.1. Incorrect headers in specific project…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • High 7.3
    CVE-2021-22171

    Insufficient validation of authentication parameters in GitLab Pages for GitLab 11.5+ allows an attacker to steal a vic…

    GitLab GitLab Web / CMS
  • Medium 4.3
    CVE-2021-22168

    A regular expression denial of service issue has been discovered in NuGet API affecting all versions of GitLab starting…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Unscored —
    CVE-2020-35733

    An issue was discovered in Erlang/OTP before 23.2.2. The ssl application 10.2 accepts and trusts an invalid X.509 certi…

    erlang erlang erlang26 Debian Alpine
  • Unscored —
    CVE-2019-16961

    SolarWinds Web Help Desk 12.7.0 allows XSS via a Schedule Name.

  • Unscored —
    CVE-2021-23838

    An issue was discovered in flatCore before 2.0.0 build 139. A reflected XSS vulnerability was identified in the media_f…

  • Unscored —
    CVE-2021-23837

    An issue was discovered in flatCore before 2.0.0 build 139. A time-based blind SQL injection was identified in the sele…

  • Unscored —
    CVE-2021-23836

    An issue was discovered in flatCore before 2.0.0 build 139. A stored XSS vulnerability was identified in the prefs_smtp…

  • Unscored —
    CVE-2021-23835

    An issue was discovered in flatCore before 2.0.0 build 139. A local file disclosure vulnerability was identified in the…

  • Unscored —
    CVE-2020-35582

    A stored cross-site scripting (XSS) issue in Envira Gallery Lite before 1.8.3.3 allows remote attackers to inject arbit…

  • Unscored —
    CVE-2020-35581

    A stored cross-site scripting (XSS) issue in Envira Gallery Lite before 1.8.3.3 allows remote attackers to inject arbit…