Skip to content
OpenAdvisories

Archive

26 January 2021

Vulnerabilities first published on this day (UTC), newest first.

← December 2020 2021 / January /26 February 2021 →
  1. 119
  2. 22
  3. 38
  4. 445
  5. 548
  6. 660
  7. 757
  8. 895
  9. 92
  10. 10 
  11. 1184
  12. 12178
  13. 13172
  14. 1429
  15. 1552
  16. 16 
  17. 172
  18. 1814
  19. 1948
  20. 20242
  21. 2172
  22. 2254
  23. 231
  24. 242
  25. 2539
  26. 2653
  27. 2744
  28. 2831
  29. 2969
  30. 304
  31. 311
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 7.1
    CVE-2021-1070

    NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB, L4T versions prior to 32.5, contains a …

    NVIDIA NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB
  • High 8.6
    CVE-2021-21278

    Risk of code injection in RSSHub

    RSSHub is an open source, easy to use, and extensible RSS feed generator. In RSSHub before version 7f1c430 (non-semantic versioning) there is a risk of code injection. Some routes use `eval` or `Function constructor`, which may be injected by the target site …

    DIYgod RSSHub rsshub npm
  • High 8.6
    CVE-2020-13582

    A denial-of-service vulnerability exists in the HTTP Server functionality of Micrium uC-HTTP 3.01.00. A specially craft…

  • High 8.2
    CVE-2020-4949 Public exploit

    IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack …

    IBM WebSphere Application Server
  • High 8.8
    CVE-2020-9492

    Improper Privilege Management in Apache Hadoop

    In Apache Hadoop 3.2.0 to 3.2.1, 3.0.0-alpha1 to 3.1.3, and 2.0.0-alpha to 2.10.0, WebHDFS client might send SPNEGO authorization header to remote URL without proper verification.

    org.apache.hadoop:hadoop-common Maven
  • High 7.5
    CVE-2021-25864 Scanner template

    Path Traversal in node-red-contrib-huemagic

    node-red-contrib-huemagic 3.0.0 is affected by hue/assets/..%2F Directory Traversal.in the res.sendFile API, used in file hue-magic.js, to fetch an arbitrary file.

    node-red-contrib-huemagic npm
  • High 7.2
    CVE-2021-3291 Public exploit EPSS 17%

    Zen Cart vulnerable to authenticated remote code execution

    Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element (within the modules edit page) and inserting a command.

    zencart/zencart Packagist
  • High —
    CVE-2021-3223 Scanner template EPSS 19%

    Path traversal in Node-RED-Dashboard

    Node-RED-Dashboard before 2.26.2 allows ui_base/js/..%2f directory traversal to read files.

    node-red-dashboard npm
  • High 7.8
    CVE-2021-3156 Exploited Public exploit EPSS 100%

    Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privileg…

    sudo sudo sudo Debian Ubuntu Alpine
    KEV Apr 6, 2022