Skip to content
OpenAdvisories

Archive

22 January 2021

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Critical 9.8

    SQL injection without credentials in ming-soft MCMS

    An issue was discovered in ming-soft MCMS v5.0, where a malicious user can exploit SQL injection without logging in through /mcms/view.do.

  • Critical 9.8

    Buffer overflow in SmallVec::insert_many

    An issue was discovered in the smallvec crate before 0.6.14 and 1.x before 1.6.1 for Rust. There is a heap-based buffer overflow in SmallVec::insert_many.

  • Critical 9.1

    Out of bounds read in bra

    An issue was discovered in the bra crate before 0.1.1 for Rust. It lacks soundness because it can read uninitialized memory.

  • Critical 9.8

    Double free in containers

    An issue was discovered in the containers crate before 0.9.11 for Rust. When a panic occurs, a util::{mutate,mutate2} double drop can be performed.

  • Critical 9.8
    CVE-2021-3199 Exploited EPSS 30%

    Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JW…

    KEV Oct 8, 2026