Skip to content
OpenAdvisories

Archive

18 January 2021

Vulnerabilities first published on this day (UTC), newest first.

← December 2020 2021 / January /18 February 2021 →
  1. 119
  2. 22
  3. 38
  4. 445
  5. 548
  6. 660
  7. 757
  8. 895
  9. 92
  10. 10 
  11. 1184
  12. 12178
  13. 13172
  14. 1429
  15. 1552
  16. 16 
  17. 172
  18. 1814
  19. 1948
  20. 20242
  21. 2172
  22. 2254
  23. 231
  24. 242
  25. 2539
  26. 2653
  27. 2744
  28. 2831
  29. 2969
  30. 304
  31. 311
All Critical High Medium Low Exploited only Public exploit

14 results · Feed

  • High 7.5
    CVE-2020-36193 Exploited EPSS 71%

    Directory Traversal in Archive_Tar

    Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.

    drupal7 php-pear php-pear pear/archive_tar Debian Ubuntu Alpine Packagist
    KEV Aug 25, 2022
  • Unscored —
    CVE-2020-36192

    An issue was discovered in the Source Integration plugin before 2.4.1 for MantisBT. An attacker can gain access to the …

  • Medium 5.5
    CVE-2020-7343

    Improper Authorization vulnerability in MA

    Missing Authorization vulnerability in McAfee Agent (MA) for Windows prior to 5.7.1 allows local users to block McAfee product updates by manipulating a directory used by MA for temporary files. The product would continue to function with out-of-date detectio…

    McAfee McAfee Agent
  • Medium 6.8
    CVE-2020-28473

    Web Cache Poisoning

    The package bottle from 0 and before 0.12.19 are vulnerable to Web Cache Poisoning by using a vector called parameter cloaking. When the attacker can separate query parameters using a semicolon (;), they can cause a difference in the interpretation of the req…

    python-bottle python-bottle bottle Debian Ubuntu PyPI
  • Unscored —
    CVE-2021-25173

    An issue was discovered in Open Design Alliance Drawings SDK before 2021.12. A memory allocation with excessive size vu…

  • Unscored —
    CVE-2021-25174

    An issue was discovered in Open Design Alliance Drawings SDK before 2021.12. A memory corruption vulnerability exists w…

  • Unscored —
    CVE-2021-25175

    An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Conversion issue exists when render…

  • Unscored —
    CVE-2021-25176

    An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A NULL pointer dereference exists when ren…

  • Unscored —
    CVE-2021-25177

    An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Confusion issue exists when renderi…

  • Unscored —
    CVE-2021-25178

    An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A stack-based buffer overflow vulnerabilit…

  • Unscored —
    CVE-2021-25294 EPSS 11%

    OpenCATS through 0.9.5-3 unsafely deserializes index.php?m=activity requests, leading to remote code execution. This oc…

  • Unscored —
    CVE-2021-25295

    OpenCATS through 0.9.5-3 has multiple Cross-site Scripting (XSS) issues.

  • Unscored —
    CVE-2021-3166 Public exploit

    An issue was discovered on ASUS DSL-N14U-B1 1.1.2.3_805 devices. An attacker can upload arbitrary file content as a fir…

  • Unscored —
    CVE-2020-29446

    Affected versions of Atlassian Fisheye & Crucible allow remote attackers to browse local files via an Insecure Direct O…

    Atlassian Crucible Fisheye