Skip to content
OpenAdvisories

Archive

22 January 2021

Vulnerabilities first published on this day (UTC), newest first.

← December 2020 2021 / January /22 February 2021 →
  1. 119
  2. 22
  3. 38
  4. 445
  5. 548
  6. 660
  7. 757
  8. 895
  9. 92
  10. 10 
  11. 1184
  12. 12178
  13. 13172
  14. 1429
  15. 1552
  16. 16 
  17. 172
  18. 1814
  19. 1948
  20. 20242
  21. 2172
  22. 2254
  23. 231
  24. 242
  25. 2539
  26. 2653
  27. 2744
  28. 2831
  29. 2969
  30. 304
  31. 311
All Critical High Medium Low Exploited only Public exploit

54 results · Feed

  • Medium 5.3
    CVE-2021-25901

    Out of bounds read in lazy-init

    An issue was discovered in the lazy-init crate through 2021-01-17 for Rust. Lazy lacks a Send bound, leading to a data race.

    lazy-init crates.io
  • High 7.5
    CVE-2021-25902

    Double free in glsl-layout

    An issue was discovered in the glsl-layout crate before 0.4.0 for Rust. When a panic occurs, map_array can perform a double drop.

    glsl-layout crates.io
  • High 7.5
    CVE-2021-25903

    Null pointer deference in cache

    An issue was discovered in the cache crate through 2021-01-01 for Rust. A raw pointer is dereferenced.

    cache crates.io
  • High 7.5
    CVE-2021-25904

    Null pointer deference in av-data

    An issue was discovered in the av-data crate before 0.3.0 for Rust. A raw pointer is dereferenced, leading to a read of an arbitrary memory address, sometimes causing a segfault.

    av-data crates.io
  • Critical 9.1
    CVE-2021-25905

    Out of bounds read in bra

    An issue was discovered in the bra crate before 0.1.1 for Rust. It lacks soundness because it can read uninitialized memory.

    bra crates.io
  • High 7.5
    CVE-2021-25906

    Double free in basic_dsp_matrix

    An issue was discovered in the basic_dsp_matrix crate before 0.9.2 for Rust. When a TransformContent panic occurs, a double drop can be performed.

    basic_dsp_matrix crates.io
  • Critical 9.8
    CVE-2021-25907

    Double free in containers

    An issue was discovered in the containers crate before 0.9.11 for Rust. When a panic occurs, a util::{mutate,mutate2} double drop can be performed.

    containers crates.io
  • High 7.5
    CVE-2021-25908

    Double free in fil-ocl

    An issue was discovered in the fil-ocl crate through 2021-01-04 for Rust. From<EventList> can lead to a double free.

    fil-ocl crates.io
  • Medium 4.6
    CVE-2021-22849

    Hyweb HyCMS-J1 - Stored XSS

    Hyweb HyCMS-J1 backend editing function does not filter special characters. Users after log-in can inject JavaScript syntax to perform a stored XSS (Stored Cross-site scripting) attack.

    Hyweb HyCMS-J1
  • High 8.8
    CVE-2021-22847

    Hyweb HyCMS-J1 - SQL Injection

    Hyweb HyCMS-J1's API fail to filter POST request parameters. Remote attackers can inject SQL syntax and execute commands without privilege.

    Hyweb HyCMS-J1
  • Unscored —
    CVE-2020-29443

    ide_atapi_cmd_reply_end in hw/ide/atapi.c in QEMU 5.1.0 allows out-of-bounds read access because a buffer index is not …

    qemu qemu qemu Debian Ubuntu Alpine
  • Unscored —
    CVE-2021-3193

    Improper access and command validation in the Nagios Docker Config Wizard before 1.1.2, as used in Nagios XI through 5.…

  • Unscored —
    CVE-2020-35753

    The job posting recommendation form in Persis Human Resource Management Portal (Versions 17.2.00 through 17.2.35 and 19…

  • Critical 9.8
    CVE-2021-3199 Exploited EPSS 30%

    Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JW…

    KEV Oct 8, 2026