Skip to content
OpenAdvisories

Archive

19 January 2021

Vulnerabilities first published on this day (UTC), newest first.

← December 2020 2021 / January /19 February 2021 →
  1. 119
  2. 22
  3. 38
  4. 445
  5. 548
  6. 660
  7. 757
  8. 895
  9. 92
  10. 10 
  11. 1184
  12. 12178
  13. 13172
  14. 1429
  15. 1552
  16. 16 
  17. 172
  18. 1814
  19. 1948
  20. 20242
  21. 2172
  22. 2254
  23. 231
  24. 242
  25. 2539
  26. 2653
  27. 2744
  28. 2831
  29. 2969
  30. 304
  31. 311
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 5.9
    CVE-2020-4881

    IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the lack of server …

    IBM Planning Analytics
  • Medium 5.3
    CVE-2020-4873

    IBM Planning Analytics 2.0 could allow an attacker to obtain sensitive information due to an overly permissive CORS pol…

    IBM Planning Analytics
  • Medium 4.0
    CVE-2020-4871

    IBM Planning Analytics 2.0 allows web pages to be stored locally which can be read by another user on the system. IBM X…

    IBM Planning Analytics
  • Medium 5.9
    CVE-2020-28482

    Cross-site Request Forgery (CSRF)

    This affects the package fastify-csrf before 3.0.0. 1. The generated cookie used insecure defaults, and did not have the httpOnly flag on: cookieOpts: { path: '/', sameSite: true } 2. The CSRF token was available in the GET query parameter

    fastify-csrf npm
  • Medium 5.9
    CVE-2020-28479

    Denial of Service (DoS)

    The package jointjs before 3.3.0 are vulnerable to Denial of Service (DoS) via the unsetByPath function.

    jointjs npm
  • Medium 5.3
    CVE-2020-28481

    Insecure Defaults

    The package socket.io before 2.4.0 are vulnerable to Insecure Defaults due to CORS Misconfiguration. All domains are whitelisted by default.

    socket.io npm
  • Medium 5.3
    CVE-2021-22850

    HGiga OAKloud Portal - Security Misconfiguration

    HGiga EIP product lacks ineffective access control in certain pages that allow attackers to access database or perform privileged functions.

    HGiga OAKSv30 OAKlouds-document_v3 OAKSv20 OAKlouds-document_v3