CVE-2020-25533 15 Jan 2021
An issue was discovered in Malwarebytes before 4.0 on macOS. A malicious application was able to perform a privileged action within the Malwarebytes l... Read more ➔
CVE-2021-3162 15 Jan 2021
Docker Desktop Community before 2.5.0.0 on macOS mishandles certificate checking, leading to local privilege escalation. Read more ➔
CVE-2021-21242 15 Jan 2021
OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is a critical vulnerability which can lead to pre-auth remote code exec... Read more ➔
CVE-2021-21245 15 Jan 2021
OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, AttachmentUploadServlet also saves user controlled data (`request.getInputStr... Read more ➔
CVE-2021-21246 15 Jan 2021
OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, the REST UserResource endpoint performs a security check to make sure that on... Read more ➔
CVE-2021-21247 15 Jan 2021
OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, the application's BasePage registers an AJAX event listener (`AbstractPostAja... Read more ➔
CVE-2021-21248 15 Jan 2021
OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is a critical vulnerability involving the build endpoint parameters. In... Read more ➔
CVE-2021-21249 15 Jan 2021
OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is an issue involving YAML parsing which can lead to post-auth remote c... Read more ➔
CVE-2021-21250 15 Jan 2021
OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is a critical vulnerability which may lead to arbitrary file read. When... Read more ➔
CVE-2021-21251 15 Jan 2021
OneDev is an all-in-one devops platform. In OneDev before version 4.0.3 there is a critical "zip slip" vulnerability. This issue may lead to arbitrary... Read more ➔
CVE-2021-21243 15 Jan 2021
OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, a Kubernetes REST endpoint exposes two methods that deserialize untrusted dat... Read more ➔
CVE-2021-21244 15 Jan 2021
OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, There is a vulnerability that enabled pre-auth server side template injection... Read more ➔
CVE-2020-24638 15 Jan 2021
Multiple authenticated remote command executions are possible in Airwave Glass before 1.3.3 via the glassadmin cli. These allow for a user with glassa... Read more ➔
CVE-2020-24639 15 Jan 2021
There is a vulnerability caused by unsafe Java deserialization that allows for arbitrary command execution in a containerized environment within Airwa... Read more ➔
CVE-2020-24640 15 Jan 2021
There is a vulnerability caused by insufficient input validation that allows for arbitrary command execution in a containerized environment within Air... Read more ➔
CVE-2020-24641 15 Jan 2021
In Aruba AirWave Glass before 1.3.3, there is a Server-Side Request Forgery vulnerability through an unauthenticated endpoint that if successfully exp... Read more ➔
CVE-2021-0202 (v3: 7.5) 15 Jan 2021
On Juniper Networks MX Series and EX9200 Series platforms with Trio-based MPC (Modular Port Concentrator) where Integrated Routing and Bridging (IRB)... Read more ➔
CVE-2021-0203 (v3: 8.6) 15 Jan 2021
On Juniper Networks EX and QFX5K Series platforms configured with Redundant Trunk Group (RTG), Storm Control profile applied on the RTG interface migh... Read more ➔
CVE-2021-0204 (v3: 7.8) 15 Jan 2021
A sensitive information disclosure vulnerability in delta-export configuration utility (dexp) of Juniper Networks Junos OS may allow a locally authent... Read more ➔
CVE-2021-0205 (v3: 5.8) 15 Jan 2021
When the "Intrusion Detection Service" (IDS) feature is configured on Juniper Networks MX series with a dynamic firewall filter using IPv6 source or d... Read more ➔
CVE-2021-0206 (v3: 7.5) 15 Jan 2021
A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS allows an attacker to send a specific packet causing the packet forwarding engin... Read more ➔
CVE-2021-0207 (v3: 7.5) 15 Jan 2021
An improper interpretation conflict of certain data between certain software components within the Juniper Networks Junos OS devices does not allow ce... Read more ➔
CVE-2021-0208 (v3: 8.8) 15 Jan 2021
An improper input validation vulnerability in the Routing Protocol Daemon (RPD) service of Juniper Networks Junos OS allows an attacker to send a malf... Read more ➔
CVE-2021-0209 15 Jan 2021
In Juniper Networks Junos OS Evolved an attacker sending certain valid BGP update packets may cause Junos OS Evolved to access an uninitialized pointe... Read more ➔