Skip to content
OpenAdvisories

Archive

January 2021

Vulnerabilities first published in this month (UTC), newest first.

← December 2020 2021 / January February 2021 →
  1. 119
  2. 22
  3. 38
  4. 445
  5. 548
  6. 660
  7. 757
  8. 895
  9. 92
  10. 10 
  11. 1184
  12. 12178
  13. 13172
  14. 1429
  15. 1552
  16. 16 
  17. 172
  18. 1814
  19. 1948
  20. 20242
  21. 2172
  22. 2254
  23. 231
  24. 242
  25. 2539
  26. 2653
  27. 2744
  28. 2831
  29. 2969
  30. 304
  31. 311
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Critical 9.8
    CVE-2020-29557 Exploited EPSS 56%

    An issue was discovered on D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20. A buffer overflow in the web inte…

    KEV Nov 3, 2021
  • High 7.8
    CVE-2021-3156 Exploited Public exploit EPSS 100%

    Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privileg…

    sudo sudo sudo Debian Ubuntu Alpine
    KEV Apr 6, 2022
  • Critical 9.8
    CVE-2021-3199 Exploited EPSS 30%

    Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JW…

    KEV Oct 8, 2026
  • High 7.5
    CVE-2020-36193 Exploited EPSS 71%

    Directory Traversal in Archive_Tar

    Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.

    drupal7 php-pear php-pear pear/archive_tar Debian Ubuntu Alpine Packagist
    KEV Aug 25, 2022
  • High 8.8
    CVE-2020-6572 Exploited EPSS 11%

    Use after free in Media in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to execute arbitrary code via …

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu
    KEV Jan 10, 2022
  • High 7.8
    CVE-2021-1647 Exploited Public exploit EPSS 40%

    Microsoft Defender Remote Code Execution Vulnerability

    Microsoft Defender Remote Code Execution Vulnerability

    Microsoft Microsoft Security Essentials Windows Defender Microsoft System Center Endpoint Protection Windows
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2021-3129 Exploited · Ransomware Public exploit EPSS 100%

    Unauthenticated remote code execution in Ignition

    Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitrary code because of insecure usage of file_get_contents() and file_put_contents(). This is exploitable on sites using debug mode with Larave…

    facade/ignition Packagist
    KEV Sep 18, 2023
  • Critical 9.6
    CVE-2020-16017 Exploited

    Use after free in CefSharp

    Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu NuGet
    KEV Nov 3, 2021
  • High 8.8
    CVE-2020-16013 Exploited

    Inappropriate implementation in V8 in CefSharp

    Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu NuGet
    KEV Nov 3, 2021
  • Critical 9.1
    CVE-2020-17519 Exploited Public exploit EPSS 98%

    Apache Flink directory traversal attack: reading remote files through the REST API

    A change introduced in Apache Flink 1.11.0 (and released in 1.11.1 and 1.11.2 as well) allows attackers to read any file on the local filesystem of the JobManager through the REST interface of the JobManager process. Access is restricted to files accessible b…

    Apache Software Foundation Apache Flink org.apache.flink:flink-runtime_2.11 org.apache.flink:flink-runtime_2.12 Maven
    KEV May 23, 2024