Skip to content
OpenAdvisories

Archive

January 2021

Vulnerabilities first published in this month (UTC), newest first.

← December 2020 2021 / January February 2021 →
  1. 119
  2. 22
  3. 38
  4. 445
  5. 548
  6. 660
  7. 757
  8. 895
  9. 92
  10. 10 
  11. 1184
  12. 12178
  13. 13172
  14. 1429
  15. 1552
  16. 16 
  17. 172
  18. 1814
  19. 1948
  20. 20242
  21. 2172
  22. 2254
  23. 231
  24. 242
  25. 2539
  26. 2653
  27. 2744
  28. 2831
  29. 2969
  30. 304
  31. 311
All Critical High Medium Low Exploited only Public exploit

375 results · Clear filters · Feed

  • Medium 5.4
    CVE-2020-29497

    Dell Wyse Management Suite versions prior to 3.1 contain a stored cross-site scripting vulnerability. A remote authenti…

    Dell Wyse Management Suite
  • Medium 6.1
    CVE-2020-26293

    Possible XSS bypass if style tag is allowed

    HtmlSanitizer is a .NET library for cleaning HTML fragments and documents from constructs that can lead to XSS attacks. In HtmlSanitizer before version 5.0.372, there is a possible XSS bypass if style tag is allowed. If you have explicitly allowed the `<style…

    mganss HtmlSanitizer HtmlSanitizer NuGet
  • Medium 6.5
    CVE-2020-4942

    IBM Curam Social Program Management 7.0.9 and 7.0.11 is vulnerable to cross-site request forgery which could allow an a…

    IBM Curam SPM
  • Medium 6.7
    CVE-2020-4928

    IBM Cloud Pak System 2.3 could allow a local privileged attacker to upload arbitrary files. By intercepting the request…

    IBM Cloud Pak System
  • Medium 4.7
    CVE-2020-4919

    IBM Cloud Pak System 2.3 has insufficient logout controls which could allow an authenticated privileged user to imperso…

    IBM Cloud Pak System
  • Medium 4.3
    CVE-2020-4917

    IBM Cloud Pak System 2.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious…

    IBM Cloud Pak System
  • Medium 5.5
    CVE-2020-4916

    IBM Cloud Pak System 2.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Java…

    IBM Cloud Pak System
  • Medium 4.4
    CVE-2020-4913

    IBM Cloud Pak System 2.3 could reveal credential information in the HTTP response to a local privileged user. IBM X-For…

    IBM Cloud Pak System
  • Medium 4.7
    CVE-2020-4912

    IBM Cloud Pak System 2.3 Self Service Console could allow a privilege escalation by capturing the user request URL when…

    IBM Cloud Pak System
  • Medium 4.8
    CVE-2020-4910

    IBM Cloud Pak System 2.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Java…

    IBM Cloud Pak System
  • Medium 4.8
    CVE-2020-4909

    IBM Cloud Pak System 2.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Java…

    IBM Cloud Pak System
  • Medium 5.9
    CVE-2019-25013

    The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequ…

    glibc eglibc glibc Debian Ubuntu
  • Medium 5.4
    CVE-2020-35946

    An issue was discovered in the All in One SEO Pack plugin before 3.6.2 for WordPress. The SEO Description and Title fie…

  • Medium 4.3
    CVE-2020-35934

    The Advanced Access Manager plugin before 6.6.2 for WordPress displays the unfiltered user object (including all metada…

  • Medium 6.5
    CVE-2020-35933

    A Reflected Authenticated Cross-Site Scripting (XSS) vulnerability in the Newsletter plugin before 6.8.2 for WordPress …