Skip to content
OpenAdvisories

Archive

26 January 2021

Vulnerabilities first published on this day (UTC), newest first.

← December 2020 2021 / January /26 February 2021 →
  1. 119
  2. 22
  3. 38
  4. 445
  5. 548
  6. 660
  7. 757
  8. 895
  9. 92
  10. 10 
  11. 1184
  12. 12178
  13. 13172
  14. 1429
  15. 1552
  16. 16 
  17. 172
  18. 1814
  19. 1948
  20. 20242
  21. 2172
  22. 2254
  23. 231
  24. 242
  25. 2539
  26. 2653
  27. 2744
  28. 2831
  29. 2969
  30. 304
  31. 311
All Critical High Medium Low Exploited only Public exploit

53 results · Feed

  • Unscored —
    CVE-2020-36011

    A cross-site scripting (XSS) issue in Add Patient Form in QDOCS Smart Hospital Management System 3.1 allows a remote at…

  • High 7.2
    CVE-2021-3291 Public exploit EPSS 17%

    Zen Cart vulnerable to authenticated remote code execution

    Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element (within the modules edit page) and inserting a command.

    zencart/zencart Packagist
  • Unscored —
    CVE-2021-3304

    Sagemcom F@ST 3686 v2 3.495 devices have a buffer overflow via a long sessionKey to the goform/login URI.

  • High —
    CVE-2021-3223 Scanner template EPSS 19%

    Path traversal in Node-RED-Dashboard

    Node-RED-Dashboard before 2.26.2 allows ui_base/js/..%2f directory traversal to read files.

    node-red-dashboard npm
  • Unscored —
    CVE-2021-26266

    cPanel before 92.0.9 allows a Reseller to bypass the suspension lock (SEC-578).

  • Unscored —
    CVE-2021-26267

    cPanel before 92.0.9 allows a MySQL user (who has an old-style password hash) to bypass suspension (SEC-579).

  • Unscored —
    CVE-2021-3114

    Incorrect operations on the P-224 curve in crypto/elliptic

    In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect outputs, related to an underflow of the lowest limb during the final complete reduction in the P-224 field.

    golang go stdlib golang-1.8 Debian Ubuntu Azure Linux Alpine Go
  • Unscored —
    CVE-2021-3115

    Arbitrary code injection via the go command with cgo on Windows in cmd/go

    Go before 1.14.14 and 1.15.x before 1.15.7 on Windows is vulnerable to Command Injection and remote code execution when using the "go get" command to fetch modules that make use of cgo (for example, cgo can execute a gcc program from an untrusted download).

    go python-tensorboard toolchain golang-1.15 Debian Azure Linux Alpine Go
  • Unscored —
    CVE-2020-29001

    An issue was discovered on Geeni GNC-CW028 Camera 2.7.2, Geeni GNC-CW025 Doorbell 2.9.5, Merkury MI-CW024 Doorbell 2.9.…

  • Unscored —
    CVE-2020-29000

    An issue was discovered on Geeni GNC-CW013 doorbell 1.8.1 devices. A vulnerability exists in the RTSP service that allo…

  • Unscored —
    CVE-2020-28999

    An issue was discovered in Apexis Streaming Video Web Application on Geeni GNC-CW013 doorbell 1.8.1 devices. A remote a…

  • Unscored —
    CVE-2020-28998

    An issue was discovered on Geeni GNC-CW013 doorbell 1.8.1 devices. A vulnerability exists in the Telnet service that al…

  • High 7.8
    CVE-2021-3156 Exploited Public exploit EPSS 100%

    Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privileg…

    sudo sudo sudo Debian Ubuntu Alpine
    KEV Apr 6, 2022