Skip to content
OpenAdvisories

Archive

26 January 2021

Vulnerabilities first published on this day (UTC), newest first.

← December 2020 2021 / January /26 February 2021 →
  1. 119
  2. 22
  3. 38
  4. 445
  5. 548
  6. 660
  7. 757
  8. 895
  9. 92
  10. 10 
  11. 1184
  12. 12178
  13. 13172
  14. 1429
  15. 1552
  16. 16 
  17. 172
  18. 1814
  19. 1948
  20. 20242
  21. 2172
  22. 2254
  23. 231
  24. 242
  25. 2539
  26. 2653
  27. 2744
  28. 2831
  29. 2969
  30. 304
  31. 311
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 5.6
    CVE-2021-1071

    NVIDIA Tegra kernel in Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB, all L4T versions prior …

    NVIDIA NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB
  • Medium 6.5
    CVE-2021-21271

    Denial of service in TenderMint Core

    Tendermint Core is an open source Byzantine Fault Tolerant (BFT) middleware that takes a state transition machine - written in any programming language - and securely replicates it on many machines. Tendermint Core v0.34.0 introduced a new way of handling evi…

    tendermint tendermint github.com/tendermint/tendermint Go
  • Medium 5.4
    CVE-2021-21283

    XSS in Flarum Sticky extension.

    Flarum is an open source discussion platform for websites. The "Flarum Sticky" extension versions 0.1.0-beta.14 and 0.1.0-beta.15 has a cross-site scripting vulnerability. A change in release beta 14 of the Sticky extension caused the plain text content of th…

    flarum sticky flarum/sticky Packagist
  • Medium 6.5
    CVE-2021-26272

    Inclusion of Functionality from Untrusted Control Sphere in CKEditor 4

    It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted URL-like text into the editor, and then press Enter or Space (in the Autolink plugin).

    ckeditor ckeditor ckeditor4 Debian Ubuntu npm
  • Medium 6.5
    CVE-2021-26271

    CKEditor 4 ReDoS Vulnerability

    It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted text into the Styles input of specific dialogs (in the Advanced Tab for Dialogs plugin).

    ckeditor ckeditor ckeditor4-dev Debian Ubuntu npm
  • Medium 4.6
    CVE-2021-23272

    TIBCO BPM Cross Site Scripting (XSS)

    The Application Development Clients component of TIBCO Software Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric contains a vulnerability that theoretically allows a low privileged attacker with network access to execu…

    TIBCO Software TIBCO BPM Enterprise TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric
  • Medium 4.0
    CVE-2020-4889

    IBM Spectrum Scale 5.0.0 through 5.0.5.4 and 5.1.0 could allow a local user to poison log files which could impact supp…

    IBM Spectrum Scale
  • Medium 5.8
    CVE-2020-17522

    Cache Manipulation Attack in Apache Traffic Control

    When ORT (now via atstccfg) generates ip_allow.config files in Apache Traffic Control 3.0.0 to 3.1.0 and 4.0.0 to 4.1.0, those files include permissions that allow bad actors to push arbitrary content into and remove arbitrary content from CDN cache servers. …

    github.com/apache/trafficcontrol Go
  • Medium 5.3
    CVE-2021-21615

    Time-of-check Time-of-use (TOCTOU) Race Condition in Jenkins

    Jenkins 2.275 and LTS 2.263.2 allows reading arbitrary files using the file browser for workspaces and archived artifacts due to a time-of-check to time-of-use (TOCTOU) race condition.

    Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core jenkins Web / CMS Alpine Maven