Skip to content
OpenAdvisories

Archive

29 January 2021

Vulnerabilities first published on this day (UTC), newest first.

← December 2020 2021 / January /29 February 2021 →
  1. 119
  2. 22
  3. 38
  4. 445
  5. 548
  6. 660
  7. 757
  8. 895
  9. 92
  10. 10 
  11. 1184
  12. 12178
  13. 13172
  14. 1429
  15. 1552
  16. 16 
  17. 172
  18. 1814
  19. 1948
  20. 20242
  21. 2172
  22. 2254
  23. 231
  24. 242
  25. 2539
  26. 2653
  27. 2744
  28. 2831
  29. 2969
  30. 304
  31. 311
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.8
    CVE-2021-25646 Public exploit EPSS 99%

    Authenticated users can override system configurations in their requests which allows them to execute arbitrary code.

    Apache Druid includes the ability to execute user-provided JavaScript code embedded in various types of requests. This functionality is intended for use in high-trust environments, and is disabled by default. However, in Druid 0.20.0 and earlier, it is possib…

    Apache Software Foundation Apache Druid org.apache.druid:druid Maven
  • High 7.8
    CVE-2021-3347 Public exploit

    An issue was discovered in the Linux kernel through 5.10.11. PI futexes have a kernel stack use-after-free during fault…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2021-3345 Public exploit

    _gcry_md_block_write in cipher/hash-common.c in Libgcrypt version 1.9.0 has a heap-based buffer overflow when the diges…

  • Unscored —
    CVE-2021-3298 Public exploit

    Collabtive 3.1 allows XSS when an authenticated user enters an XSS payload into the address section of the profile edit…

    collabtive Ubuntu