Skip to content
OpenAdvisories

Archive

1 February 2021

Vulnerabilities first published on this day (UTC), newest first.

← January 2021 2021 / February /1 March 2021 →
  1. 149
  2. 254
  3. 363
  4. 4117
  5. 538
  6. 616
  7. 76
  8. 878
  9. 9145
  10. 10114
  11. 1196
  12. 1249
  13. 132
  14. 147
  15. 1540
  16. 1655
  17. 17112
  18. 1838
  19. 1944
  20. 201
  21. 215
  22. 2266
  23. 2362
  24. 2441
  25. 2574
  26. 2674
  27. 2717
  28. 281
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.8
    CVE-2019-20471

    An issue was discovered on TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices. When using the device at initial setup…

  • High 7.5
    CVE-2019-20470

    An issue was discovered on TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices. It performs actions based on certain S…

  • High 7.7
    CVE-2021-21287 EPSS 24%

    Server-Side Request Forgery in MinIO Browser API

    MinIO is a High Performance Object Storage released under Apache License v2.0. In MinIO before version RELEASE.2021-01-30T00-20-58Z there is a server-side request forgery vulnerability. The target application may have functionality for importing data from a U…

    minio minio
  • High 7.5
    CVE-2021-3282

    Improper Authentication in HashiCorp Vault

    HashiCorp Vault Enterprise 1.6.0 & 1.6.1 allowed the `remove-peer` raft operator command to be executed against DR secondaries without authentication. Fixed in 1.6.2.

    github.com/hashicorp/vault vault Alpine Go
  • High 7.5
    CVE-2021-3283

    Improper Privilege Management in HashiCorp Nomad

    HashiCorp Nomad and Nomad Enterprise up to 0.12.9 exec and java task drivers can access processes associated with other tasks on the same node. Fixed in 0.12.10, and 1.0.3.

    nomad github.com/hashicorp/nomad nomad Ubuntu Alpine Go
  • High 7.3
    CVE-2020-28426

    Command Injection

    All versions of package kill-process-on-port are vulnerable to Command Injection via a.getProcessPortId.

    kill-process-on-port npm
  • High 7.7
    CVE-2021-21286

    Authorization Bypass in AVideo Platform

    AVideo Platform is an open-source Audio and Video platform. It is similar to a self-hosted YouTube. In AVideo Platform before version 10.2 there is an authorization bypass vulnerability which enables an ordinary user to get admin control. This is fixed in ver…

    WWBN AVideo
  • High 8.5
    CVE-2021-21277

    Angular Expressions - Remote Code Execution

    angular-expressions is "angular's nicest part extracted as a standalone module for the browser and node". In angular-expressions before version 1.1.2 there is a vulnerability which allows Remote Code Execution if you call "expressions.compile(userControlledIn…

    peerigon angular-expressions angular-expressions npm