Skip to content
OpenAdvisories

Archive

January 2021

Vulnerabilities first published in this month (UTC), newest first.

← December 2020 2021 / January February 2021 →
  1. 119
  2. 22
  3. 38
  4. 445
  5. 548
  6. 660
  7. 757
  8. 895
  9. 92
  10. 10 
  11. 1184
  12. 12178
  13. 13172
  14. 1429
  15. 1552
  16. 16 
  17. 172
  18. 1814
  19. 1948
  20. 20242
  21. 2172
  22. 2254
  23. 231
  24. 242
  25. 2539
  26. 2653
  27. 2744
  28. 2831
  29. 2969
  30. 304
  31. 311
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2021-1994 Public exploit

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported ve…

    Oracle WebLogic Server
  • Critical 9.8
    CVE-2020-14756 Public exploit EPSS 75%

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core Components). Supported versi…

    Oracle Utilities Framework
  • Critical 9.8
    CVE-2021-3129 Exploited · Ransomware Public exploit EPSS 100%

    Unauthenticated remote code execution in Ignition

    Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitrary code because of insecure usage of file_get_contents() and file_put_contents(). This is exploitable on sites using debug mode with Larave…

    facade/ignition Packagist
    KEV Sep 18, 2023
  • Critical 9.1
    CVE-2020-17519 Exploited Public exploit EPSS 98%

    Apache Flink directory traversal attack: reading remote files through the REST API

    A change introduced in Apache Flink 1.11.0 (and released in 1.11.1 and 1.11.2 as well) allows attackers to read any file on the local filesystem of the JobManager through the REST interface of the JobManager process. Access is restricted to files accessible b…

    Apache Software Foundation Apache Flink org.apache.flink:flink-runtime_2.12 org.apache.flink:flink-runtime_2.11 Maven
    KEV May 23, 2024
  • Critical 9.8
    CVE-2021-3007 Public exploit EPSS 75%

    Remote code execution in zendframework and laminas-http

    Laminas Project laminas-http before 2.14.2, and Zend Framework 3.0.0, has a deserialization vulnerability that can lead to remote code execution if the content is controllable, related to the __destruct method of the Zend\Http\Response\Stream class in Stream.…

    zendframework/zendframework laminas/laminas-http Packagist
  • Critical 9.9
    CVE-2020-35948 Public exploit EPSS 25%

    An issue was discovered in the XCloner Backup and Restore plugin before 4.2.13 for WordPress. It gave authenticated att…

  • Critical 9.6
    CVE-2020-35391 Public exploit EPSS 35%

    Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information (possibly including an http_pa…