Skip to content
OpenAdvisories

Archive

29 January 2021

Vulnerabilities first published on this day (UTC), newest first.

← December 2020 2021 / January /29 February 2021 →
  1. 119
  2. 22
  3. 38
  4. 445
  5. 548
  6. 660
  7. 757
  8. 895
  9. 92
  10. 10 
  11. 1184
  12. 12178
  13. 13172
  14. 1429
  15. 1552
  16. 16 
  17. 172
  18. 1814
  19. 1948
  20. 20242
  21. 2172
  22. 2254
  23. 231
  24. 242
  25. 2539
  26. 2653
  27. 2744
  28. 2831
  29. 2969
  30. 304
  31. 311
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 8.8
    CVE-2021-25646 Public exploit EPSS 99%

    Authenticated users can override system configurations in their requests which allows them to execute arbitrary code.

    Apache Druid includes the ability to execute user-provided JavaScript code embedded in various types of requests. This functionality is intended for use in high-trust environments, and is disabled by default. However, in Druid 0.20.0 and earlier, it is possib…

    Apache Software Foundation Apache Druid org.apache.druid:druid Maven
  • High 7.8
    CVE-2021-3347 Public exploit

    An issue was discovered in the Linux kernel through 5.10.11. PI futexes have a kernel stack use-after-free during fault…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • High 8.6
    CVE-2021-25909

    ZIV AUTOMATION 4CCT Denial of Service vulnerability

    ZIV Automation 4CCT-EA6-334126BF firmware version 3.23.80.27.36371, allows an unauthenticated, remote attacker to cause a denial of service condition on the device. An attacker could exploit this vulnerability by sending specific packets to the port 7919.

    ZIV AUTOMATION 4CCT-EA6-334126BF
  • High 8.0
    CVE-2021-25910

    ZIV AUTOMATION 4CCT vulnerable to improper authentication

    Improper Authentication vulnerability in the cookie parameter of ZIV AUTOMATION 4CCT-EA6-334126BF allows a local attacker to perform modifications in several parameters of the affected device as an authenticated user.

    ZIV AUTOMATION 4CCT-EA6-334126BF
  • High 8.8
    CVE-2020-28405

    An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthor…

  • High 8.0
    CVE-2020-28403

    A Cross-Site Request Forgery (CSRF) vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing a…

  • High 7.5
    CVE-2021-26306

    Soundness issue in raw-cpuid

    An issue was discovered in the raw-cpuid crate before 9.0.0 for Rust. It has unsound transmute calls within as_string() methods.

    raw-cpuid crates.io
  • High 7.5
    CVE-2021-26308

    Uninitialized buffer use in marc

    An issue was discovered in the marc crate before 2.0.0 for Rust. A user-provided Read implementation can gain access to the old contents of newly allocated memory, violating soundness.

    marc crates.io