Week 1, 2021

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.1
  CVE-2020-17519 Apache Flink directory traversal attack: reading remote files through the REST API

  Apache Software Foundation · Apache Flink

  EPSS 98%
• Critical 9.8
  CVE-2021-3007 Remote code execution in zendframework and laminas-http
  EPSS 75%
• Critical 10.0
  CVE-2020-36155 An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalation via User Meta. An attacker could su…
  EPSS 9.8%
• Critical 9.8
  CVE-2020-28464 Remote Code Execution (RCE)
  EPSS 3%
• Critical 10.0
  CVE-2020-36157 An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalation via User Roles. Due to the lack of …
  EPSS 3%
• Critical 9.6
  CVE-2020-16017 Use after free in CefSharp

  Google · Chrome

  EPSS 2.7%
• Critical 9.8
  CVE-2020-26759 Arbitrary code execution in clickhouse-driver
  EPSS 2.7%
• Critical 9.9
  CVE-2020-26085 Cisco Jabber Desktop and Mobile Client Software Vulnerabilities

  Cisco · Cisco Jabber

  EPSS 2.3%
• Critical 9.9
  CVE-2020-36156 An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Authenticated Privilege Escalation via Profile Update. Any user with wp-…
  EPSS 2.1%
• Critical 10.0
  CVE-2020-29491 Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially exploit th…

  Dell · Wyse Proprietary OS (ThinOS)

  EPSS 1.8%
• Critical 10.0
  CVE-2020-29492 Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially exploit th…

  Dell · Wyse Proprietary OS (ThinOS)

  EPSS 1.7%
• Critical 9.8
  CVE-2020-7794 Command Injection
  EPSS 1.6%
• Critical 9.8
  CVE-2020-7784 command_injection
  EPSS 1.4%
• Critical 9.3
  CVE-2020-13541 An exploitable local privilege elevation vulnerability exists in the file system permissions of the Mobile-911 Server V2.5 install directory. Depending on the …
• Critical 9.3
  CVE-2020-13539 An exploitable local privilege elevation vulnerability exists in the file system permissions of the Win-911 Enterprise V4.20.13 install directory via “WIN-911 …

All 25 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• Unscored
  CVE-2020-16040 Insufficient data validation in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p…

  Google · Chrome

  EPSS 100%
• Medium 6.1
  CVE-2020-8264 Cross-site scripting in actionpack
  EPSS 67%
• Unscored
  CVE-2020-35131 Cockpit before 0.6.1 allows an attacker to inject custom PHP code and achieve Remote Command Execution via registerCriteriaFunction in lib/MongoLite/Database.p…
  EPSS 50%
• High 7.5
  CVE-2020-17518 Apache Flink directory traversal attack: remote file writing through the REST API

  Apache Software Foundation · Apache Flink

  EPSS 49%
• High 7.7
  CVE-2021-21234 Directory Traversal

  lukashinsch · spring-boot-actuator-logview

  EPSS 21%
• Unscored
  CVE-2020-24577 An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. The One Touch application discloses sensitive information, such…
  EPSS 19%
• Unscored
  CVE-2021-3018 ipeak Infosystems ibexwebCMS (aka IPeakCMS) 3.5 is vulnerable to an unauthenticated Boolean-based SQL injection via the id parameter on the /cms/print.php page.
  EPSS 19%
• Unscored
  CVE-2020-36112 CSE Bookstore version 1.0 is vulnerable to time-based blind, boolean-based blind and OR error-based SQL injection in pubid parameter in bookPerPub.php and in c…
  EPSS 18%