Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: January 2021

76 records · 10 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2020-35948
    42Plan

    An issue was discovered in the XCloner Backup and Restore plugin before 4.2.13 for WordPress.

    HighCVSS 8.8Proof of conceptEPSS 24%

    xcloner · xclonerJan 1, 2021

  • CVE-2020-35951
    62This week

    An issue was discovered in the Quiz and Survey Master plugin before 7.0.1 for WordPress.

    CriticalCVSS 9.9Proof of conceptEPSS 76%

    expresstech · quiz and survey masterJan 1, 2021

  • CVE-2020-35391
    37Monitor

    Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information (possibly including an http_passwd line) via a dire

    MediumCVSS 6.5Proof of conceptEPSS 35%

    tenda · f3 firmwareJan 1, 2021

  • CVE-2021-3007
    62This week

    Laminas Project laminas-http before 2.14.2, and Zend Framework 3.0.0, has a deserialization vulnerability that can lead to remote code execu

    CriticalCVSS 9.8Proof of conceptEPSS 75%

    zend · zend frameworkJan 3, 2021

  • CVE-2020-36112
    44Plan

    CSE Bookstore version 1.0 is vulnerable to time-based blind, boolean-based blind and OR error-based SQL injection in pubid parameter in book

    CriticalCVSS 9.8Proof of conceptEPSS 18%

    cse bookstore project · cse bookstoreJan 4, 2021

  • CVE-2021-3018
    45Plan

    ipeak Infosystems ibexwebCMS (aka IPeakCMS) 3.5 is vulnerable to an unauthenticated Boolean-based SQL injection via the id parameter on the

    CriticalCVSS 9.8Proof of conceptEPSS 18%

    ipeak · ipeakcmsJan 5, 2021

  • CVE-2021-3019
    35Monitor

    ffay lanproxy 0.1 allows Directory Traversal to read /../conf/config.properties to obtain credentials for a connection to the intranet.

    HighCVSS 7.5Proof of conceptEPSS 16%

    lanproxy project · lanproxyJan 5, 2021

  • CVE-2020-17518
    45Plan

    Apache Flink directory traversal attack: remote file writing through the REST API

    HighCVSS 7.5Proof of conceptEPSS 49%

    apache · flinkJan 5, 2021

  • CVE-2020-17519
    89Now

    Apache Flink directory traversal attack: reading remote files through the REST API

    HighCVSS 7.5KEVWeaponizedEPSS 97%

    apache · flinkJan 5, 2021

  • CVE-2021-21234
    36Monitor

    spring-boot-actuator-logview in a library that adds a simple logfile viewer as spring boot actuator endpoint.

    HighCVSS 7.7Proof of conceptEPSS 21%

    spring-boot-actuator-logview project · spring-boot-actuator-logviewJan 5, 2021

  • CVE-2020-8264
    44Plan

    In actionpack gem >= 6.0.0, a possible XSS vulnerability exists when an application is running in development mode allowing an attacker to s

    MediumCVSS 6.1No exploitEPSS 66%

    rubyonrails · railsJan 6, 2021

  • CVE-2020-8287
    31Monitor

    Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in an HTTP request (for example, two Transfer-E

    MediumCVSS 6.5Proof of conceptEPSS 16%

    nodejs · node.jsJan 6, 2021

  • CVE-2020-36179
    37Monitor

    FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apac

    HighCVSS 8.1Proof of conceptEPSS 17%

    fasterxml · jackson-databindJan 6, 2021

  • CVE-2020-28672
    32Monitor

    MonoCMS Blog 1.0 is affected by incorrect access control that can lead to remote arbitrary code execution.

    HighCVSS 7.2No exploitEPSS 12%

    monocms · monocmsJan 7, 2021

  • CVE-2021-23241
    25Monitor

    MERCUSYS Mercury X18G 1.0.5 devices allow Directory Traversal via ../ in conjunction with a loginLess or login.htm URI (for authentication b

    MediumCVSS 5.3Proof of conceptEPSS 13%

    mercusys · mercury x18g firmwareJan 7, 2021

  • CVE-2020-24577
    36Monitor

    An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55.

    HighCVSS 7.5No exploitEPSS 19%

    dlink · dsl-2888a firmwareJan 8, 2021

  • CVE-2020-35131
    54Plan

    Cockpit before 0.6.1 allows an attacker to inject custom PHP code and achieve Remote Command Execution via registerCriteriaFunction in lib/M

    CriticalCVSS 9.8Proof of conceptEPSS 50%

    agentejo · cockpitJan 8, 2021

  • CVE-2020-28208
    24Monitor

    An email address enumeration vulnerability exists in the password reset function of Rocket.Chat through 3.9.1.

    MediumCVSS 5.3Proof of conceptEPSS 10%

    rocket.chat · rocket.chatJan 8, 2021

  • CVE-2020-16013
    66This week

    Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.198 allowed a remote attacker to potentially exploit heap corruption

    HighCVSS 8.8KEVWeaponizedEPSS 2%

    google · chromeJan 8, 2021

  • CVE-2020-16017
    69This week

    Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised the renderer process

    CriticalCVSS 9.6KEVWeaponizedEPSS 2%

    google · chromeJan 8, 2021

  • CVE-2020-16040
    60This week

    Insufficient data validation in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption v

    MediumCVSS 6.5WeaponizedEPSS 99%

    google · chromeJan 8, 2021

  • CVE-2021-3129
    99Now

    Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitrary code because of i

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    laravel · laravelJan 12, 2021

  • CVE-2021-1647
    73This week

    Microsoft Defender Remote Code Execution Vulnerability

    HighCVSS 7.8KEVWeaponizedEPSS 39%

    microsoft · windows defenderJan 12, 2021

  • CVE-2021-1678
    38Monitor

    Windows Print Spooler Spoofing Vulnerability

    HighCVSS 8.8Proof of conceptEPSS 10%

    microsoft · windows 10Jan 12, 2021

  • CVE-2021-23124
    48Plan

    [20210102] - Core - XSS in mod_breadcrumbs aria-label attribute

    MediumCVSS 6.1No exploitEPSS 78%

    joomla · joomla\!Jan 12, 2021

  • CVE-2020-35578
    53Plan

    An issue was discovered in the Manage Plugins page in Nagios XI before 5.8.0.

    HighCVSS 7.2WeaponizedEPSS 81%

    nagios · nagios xiJan 13, 2021

  • CVE-2020-27265
    42Plan

    KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All ver

    CriticalCVSS 9.8No exploitEPSS 10%

    ge · industrial gateway serverJan 13, 2021

  • CVE-2021-24122
    30Monitor

    Apache Tomcat information disclosure

    MediumCVSS 5.9No exploitEPSS 22%

    apache · tomcatJan 14, 2021

  • CVE-2020-6572
    68This week

    Use after free in Media in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to execute arbitrary code via a crafted HTML page.

    HighCVSS 8.8KEVWeaponizedEPSS 10%

    google · chromeJan 14, 2021

  • CVE-2020-35749
    39Monitor

    Directory traversal vulnerability in class-simple_job_board_resume_download_handler.php in the Simple Board Job plugin 2.9.3 and earlier for

    HighCVSS 7.7Proof of conceptEPSS 30%

    presstigers · simple board jobJan 15, 2021

  • CVE-2021-21243
    55Plan

    Pre-Auth Unsafe Deserialization on KubernetesResource

    CriticalCVSS 9.8No exploitEPSS 54%

    onedev project · onedevJan 15, 2021

  • CVE-2021-21242
    61This week

    Pre-Auth Unsafe Deserialization on AttachmentUploadServet

    CriticalCVSS 9.8No exploitEPSS 74%

    onedev project · onedevJan 15, 2021

  • CVE-2021-21246
    45Plan

    Pre-Auth Access token leak

    HighCVSS 7.5Proof of conceptEPSS 49%

    onedev project · onedevJan 15, 2021

  • CVE-2021-21251
    39Monitor

    ZipSlip Arbitrary File Upload

    HighCVSS 8.8No exploitEPSS 12%

    onedev project · onedevJan 15, 2021

  • CVE-2021-25294
    42Plan

    OpenCATS through 0.9.5-3 unsafely deserializes index.php?m=activity requests, leading to remote code execution.

    CriticalCVSS 9.8No exploitEPSS 11%

    opencats · opencatsJan 18, 2021

  • CVE-2020-36193
    81Now

    Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a relat

    HighCVSS 7.5KEVWeaponizedEPSS 70%

    php · archive tarJan 18, 2021

  • CVE-2021-3177
    46Plan

    Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Pyth

    CriticalCVSS 9.8No exploitEPSS 24%

    python · pythonJan 19, 2021

  • CVE-2020-23342
    39Monitor

    A CSRF vulnerability exists in Anchor CMS 0.12.7 anchor/views/users/edit.php that can change the Delete admin users.

    HighCVSS 8.8Proof of conceptEPSS 12%

    anchorcms · anchor cmsJan 19, 2021

  • CVE-2020-19360
    35Monitor

    Local file inclusion in FHEM 6.0 allows in fhem/FileLog_logWrapper file parameter can allow an attacker to include a file, which can lead to

    HighCVSS 7.5Proof of conceptEPSS 17%

    fhem · fhemJan 19, 2021

  • CVE-2020-19364
    56Plan

    OpenEMR 5.0.1 allows an authenticated attacker to upload and execute malicious PHP scripts through /controller.php.

    HighCVSS 8.8No exploitEPSS 70%

    open-emr · openemrJan 19, 2021

  • CVE-2020-25385
    29Monitor

    Nagios Log Server 2.1.7 contains a cross-site scripting (XSS) vulnerability in /nagioslogserver/configure/create_snapshot through the snapsh

    MediumCVSS 6.1No exploitEPSS 16%

    nagios · log serverJan 19, 2021

  • CVE-2021-3110
    45Plan

    The store system in PrestaShop 1.7.7.0 allows time-based boolean SQL injection via the module=productcomments controller=CommentGrade id_pro

    CriticalCVSS 9.8Proof of conceptEPSS 18%

    prestashop · prestashopJan 20, 2021

  • CVE-2020-14756
    61This week

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core Components).

    CriticalCVSS 9.8Proof of conceptEPSS 74%

    oracle · coherenceJan 20, 2021

  • CVE-2021-2021
    22Monitor

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

    MediumCVSS 4.9No exploitEPSS 10%

    oracle · mysqlJan 20, 2021

  • CVE-2021-2109
    49Plan

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).

    HighCVSS 7.2Proof of conceptEPSS 70%

    oracle · weblogic serverJan 20, 2021

  • CVE-2021-2114
    50Plan

    Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Applications Calendar).

    HighCVSS 8.2No exploitEPSS 59%

    oracle · common applications calendarJan 20, 2021

  • CVE-2020-25683
    49Plan

    A flaw was found in dnsmasq before version 2.83.

    MediumCVSS 5.9No exploitEPSS 86%

    thekelleys · dnsmasqJan 20, 2021

  • CVE-2020-25681
    56Plan

    A flaw was found in dnsmasq before version 2.83.

    HighCVSS 8.1No exploitEPSS 81%

    thekelleys · dnsmasqJan 20, 2021

  • CVE-2020-25682
    53Plan

    A flaw was found in dnsmasq before 2.83.

    HighCVSS 8.1No exploitEPSS 70%

    thekelleys · dnsmasqJan 20, 2021

  • CVE-2020-25687
    49Plan

    A flaw was found in dnsmasq before version 2.83.

    MediumCVSS 5.9No exploitEPSS 86%

    thekelleys · dnsmasqJan 20, 2021

  • CVE-2020-27858
    52Plan

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of CA Arcserve D2D 16.5.

    HighCVSS 7.5No exploitEPSS 73%

    arcserve · d2dJan 20, 2021

  • CVE-2020-12513
    44Plan

    Pepper+Fuchs Comtrol IO-Link Master OS Command Injection

    HighCVSS 8.8No exploitEPSS 31%

    pepperl-fuchs · io-link master 4-eip firmwareJan 22, 2021

  • CVE-2020-23826
    39Monitor

    The Yale WIPC-303W 2.21 through 2.31 camera is vulnerable to remote command execution (RCE) through command injection via the HTTP API.

    HighCVSS 8.8No exploitEPSS 13%

    assaabloy · yale wipc-303w firmwareJan 26, 2021

  • CVE-2020-35576
    48Plan

    A Command Injection issue in the traceroute feature on TP-Link TL-WR841N V13 (JP) with firmware versions prior to 201216 allows authenticate

    HighCVSS 8.8Proof of conceptEPSS 42%

    tp-link · tl-wr841n firmwareJan 26, 2021

  • CVE-2021-22873
    45Plan

    Revive Adserver before 5.1.0 is vulnerable to open redirects via the `dest`, `oadest`, and/or `ct0` parameters of the lg.php and ck.php deli

    MediumCVSS 6.1Proof of conceptEPSS 69%

    revive-adserver · revive adserverJan 26, 2021

  • CVE-2021-3223
    36Monitor

    Node-RED-Dashboard before 2.26.2 allows ui_base/js/..%2f directory traversal to read files.

    HighCVSS 7.5Proof of conceptEPSS 18%

    nodered · node-red-dashboardJan 26, 2021

  • CVE-2021-3278
    47Plan

    Local Service Search Engine Management System 1.0 has a vulnerability through authentication bypass using SQL injection .

    CriticalCVSS 9.8Proof of conceptEPSS 25%

    local services search engine management system project · local services search engine management systemJan 26, 2021

  • CVE-2021-3291
    33Monitor

    Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element (within the modules edit page) and

    HighCVSS 7.2Proof of conceptEPSS 16%

    zen-cart · zen cartJan 26, 2021

  • CVE-2021-3297
    37Monitor

    On Zyxel NBG2105 V1.00(AAGU.2)C0 devices, setting the login cookie to 1 provides administrator access.

    HighCVSS 7.8Proof of conceptEPSS 20%

    zyxel · nbg2105 firmwareJan 26, 2021

  • CVE-2021-3156
    91Now

    Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root

    HighCVSS 7.8KEVWeaponizedEPSS 99%

    sudo project · sudoJan 26, 2021

  • CVE-2020-36221
    55Plan

    An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing, result

    HighCVSS 7.5No exploitEPSS 84%

    openldap · openldapJan 26, 2021

  • CVE-2020-36222
    53Plan

    A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial

    HighCVSS 7.5No exploitEPSS 77%

    openldap · openldapJan 26, 2021

  • CVE-2020-36227
    53Plan

    A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop Cancel operation, resulting in de

    HighCVSS 7.5No exploitEPSS 77%

    openldap · openldapJan 26, 2021

  • CVE-2020-36228
    55Plan

    An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate List Exact Assertion processing, r

    HighCVSS 7.5No exploitEPSS 84%

    openldap · openldapJan 26, 2021

  • CVE-2020-36230
    34Monitor

    A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_elemen

    HighCVSS 7.5No exploitEPSS 11%

    openldap · openldapJan 26, 2021

  • CVE-2021-3199
    75This week

    Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JWT is used, via a /..

    CriticalCVSS 9.8KEVWeaponizedEPSS 20%

    onlyoffice · document serverJan 26, 2021

  • CVE-2021-3317
    47Plan

    KLog Server through 2.4.1 allows authenticated command injection.

    HighCVSS 8.8Proof of conceptEPSS 41%

    klogserver · klog serverJan 26, 2021

  • CVE-2021-26117
    33Monitor

    ActiveMQ: LDAP-Authentication does not verify passwords on servers with anonymous bind

    HighCVSS 7.5No exploitEPSS 11%

    apache · activemqJan 27, 2021

  • CVE-2020-4888
    54Plan

    IBM QRadar SIEM 7.4.0 to 7.4.2 Patch 1 and 7.3.0 to 7.3.3 Patch 7 could allow a remote attacker to execute arbitrary commands on the system,

    HighCVSS 8.8No exploitEPSS 61%

    ibm · qradar security information and event managerJan 28, 2021

  • CVE-2021-22874
    29Monitor

    Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in userlog-index.php via the `period_preset` parameter.

    MediumCVSS 6.1No exploitEPSS 18%

    revive-adserver · revive adserverJan 28, 2021

  • CVE-2021-22875
    29Monitor

    Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in stats.php via the `setPerPage` parameter.

    MediumCVSS 6.1No exploitEPSS 18%

    revive-adserver · revive adserverJan 28, 2021

  • CVE-2020-35754
    31Monitor

    OpenSolution Quick.CMS < 6.7 and Quick.Cart < 6.7 allow an authenticated user to perform code injection (and consequently Remote Code Execut

    HighCVSS 7.2Proof of conceptEPSS 10%

    opensolution · quick.cartJan 28, 2021

  • CVE-2021-3337
    33Monitor

    The Hide-Thread-Content plugin through 2021-01-27 for MyBB allows remote attackers to bypass intended content-reading restrictions by clicki

    HighCVSS 7.5Proof of conceptEPSS 11%

    hide thread content project · hide thread contentJan 28, 2021

  • CVE-2020-29557
    85Now

    An issue was discovered on D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20.

    CriticalCVSS 9.8KEVWeaponizedEPSS 54%

    dlink · dir-825 r1 firmwareJan 29, 2021

  • CVE-2021-25646
    65This week

    Authenticated users can override system configurations in their requests which allows them to execute arbitrary code.

    HighCVSS 8.8WeaponizedEPSS 99%

    apache · druidJan 29, 2021

  • CVE-2020-15568
    48Plan

    TerraMaster TOS before 4.1.29 has Invalid Parameter Checking that leads to code injection as root.

    CriticalCVSS 9.8Proof of conceptEPSS 28%

    terra-master · tosJan 30, 2021