Skip to content
OpenAdvisories

Archive

26 January 2021

Vulnerabilities first published on this day (UTC), newest first.

← December 2020 2021 / January /26 February 2021 →
  1. 119
  2. 22
  3. 38
  4. 445
  5. 548
  6. 660
  7. 757
  8. 895
  9. 92
  10. 10 
  11. 1184
  12. 12178
  13. 13172
  14. 1429
  15. 1552
  16. 16 
  17. 172
  18. 1814
  19. 1948
  20. 20242
  21. 2172
  22. 2254
  23. 231
  24. 242
  25. 2539
  26. 2653
  27. 2744
  28. 2831
  29. 2969
  30. 304
  31. 311
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Unscored —
    CVE-2021-3317 Public exploit EPSS 41%

    KLog Server through 2.4.1 allows authenticated command injection. async.php calls shell_exec() on the original value of…

  • High 8.2
    CVE-2020-4949 Public exploit

    IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack …

    IBM WebSphere Application Server
  • High 7.2
    CVE-2021-3291 Public exploit EPSS 17%

    Zen Cart vulnerable to authenticated remote code execution

    Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element (within the modules edit page) and inserting a command.

    zencart/zencart Packagist
  • High 7.8
    CVE-2021-3156 Exploited Public exploit EPSS 100%

    Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privileg…

    sudo sudo sudo Debian Ubuntu Alpine
    KEV Apr 6, 2022