CVEs published in February 2021
1,593 vulnerabilities, 240 critical, 19 exploited.
-
miscreantcrates.io project abandoned; migrate to the `aes-siv` crate No score -
grokOSS-Fuzz Heap-buffer-overflow in grk::Quantizer::read_SQcd_SQcc No score -
phpOSS-Fuzz Heap-use-after-free in zend_hash_iterator_pos_ex No score -
irssiOSS-Fuzz Heap-buffer-overflow in irc_parse_message_tags No score -
uwebsocketsOSS-Fuzz UNKNOWN WRITE in std::__1::pair<unsigned int, void*> uWS::HttpParser::fenceAndConsumePostPadded<0 No score -
kimageformatsOSS-Fuzz Heap-buffer-overflow in void apply_sao_internal<unsigned short> No score -
libcoapOSS-Fuzz Global-buffer-overflow in coap_pdu_parse_opt No score - sercomm agcombo vd625 firmware SerComm AG Combo VD625 AGSOT_2.1.0 devices allow CRLF injection (for HTTP header injection) in... 9.8 Critical
- scytl secure vote An issue was discovered in Scytl sVote 2.1. Because the sdm-ws-rest API does not require... 7.5 High
- scytl secure vote An issue was discovered in Scytl sVote 2.1. Due to the implementation of the database manager, an... 7.5 High
- scytl secure vote An issue was discovered in Scytl sVote 2.1. Because the IP address from an X-Forwarded-For header... 6.5 Medium
- scytl secure vote An issue was discovered in Scytl sVote 2.1. An attacker can inject code that gets executed by... 9.8 Critical
- i-doit i-doit before 1.16.0 is affected by Stored Cross-Site Scripting (XSS) issues that could allow... 5.4 Medium
-
tensorflowPyPI UNKNOWN READ in std::pair<absl::lts_NUMBER_02_25::container_internal::raw_hash_set<absl::lts_NUM No score - visualware myconnection server An issue was discovered in Visualware MyConnection Server through 11.0b build 5382.... 9.8 Critical
- zenphoto Zenphoto through 1.5.7 is affected by authenticated arbitrary file upload, leading to remote code... 7.2 High
- debian linux, fedoraproject fedora, w1.fi wpa supplicant +2 more A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P ... 7.5 High
- eclipse jetty, the eclipse foundation eclipse jetty, apache nifi +14 more +16 more DOS vulnerability for Quoted Quality CSV headers 5.2 Medium
- faad2 project faad2, synology diskstation manager, diskstation manager unified controller +2 more +4 more Use of unmaintained third party components vulnerability in faad in Synology DiskStation Manager ... 7.8 High
- synology diskstation manager, diskstation manager (dsm), diskstation manager unified controller +2 more +4 more Insertion of sensitive information into sent data vulnerability in synorelayd in Synology... 8.3 High
- synology diskstation manager, diskstation manager (dsm), diskstation manager unified controller +2 more +4 more Cleartext transmission of sensitive information vulnerability in synorelayd in Synology... 8.3 High
- synology diskstation manager, diskstation manager (dsm), diskstation manager unified controller +2 more +4 more Cleartext transmission of sensitive information vulnerability in synorelayd in Synology... 8.3 High
- synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +2 more +4 more Improper access control vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM)... 8.2 High
- synology diskstation manager, diskstation manager (dsm), diskstation manager unified controller +2 more +4 more Out-of-bounds write vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM)... 9.0 Critical
- synology diskstation manager, diskstation manager (dsm), diskstation manager unified controller +2 more +4 more Stack-based buffer overflow vulnerability in synoagentregisterd in Synology DiskStation Manager ... 9.0 Critical
- synology diskstation manager, diskstation manager (dsm), diskstation manager unified controller +2 more +4 more Cleartext transmission of sensitive information vulnerability in synoagentregisterd in Synology... 9.0 Critical
- zint barcode generator ean_leading_zeroes in backend/upcean.c in Zint Barcode Generator 2.19.1 has a stack-based buffer... 7.5 High
- google android In vpu, there is a possible memory corruption due to a race condition. This could lead to local... 6.4 Medium
- google android In vpu, there is a possible memory corruption due to a race condition. This could lead to local... 6.4 Medium
- google android In vow, there is a possible memory corruption due to a race condition. This could lead to local... 6.4 Medium
- google android In jpeg, there is a possible out of bounds write due to improper input validation. This could... 6.7 Medium
- google android In netdiag, there is a possible information disclosure due to a missing permission check. This... 4.4 Medium
- google android In mobile_log_d, there is a possible information disclosure due to improper input validation.... 4.4 Medium
- google android In performance driver, there is a possible out of bounds write due to a missing bounds check.... 6.7 Medium
- google android In cameraisp, there is a possible out of bounds write due to a missing bounds check. This could... 6.7 Medium
- prestashop Improper session management for soft logout 6.1 Medium
- prestashop CSV Injection via csv export 6.8 Medium
- element-hq synapse, fedoraproject fedora +1 more Open redirects on some federation and push requests 3.1 Low
- element-hq synapse, fedoraproject fedora +1 more Denial of service attack via .well-known lookups 4.3 Medium
- thecodingmachine gotenberg Server-side Request Forgery (SSRF) 5.3 Medium
-
pcpopenSUSE Security update for pcp No score - node-red Path traversal in Node-Red 3.5 Low
- node-red Prototype Pollution in Node-Red 7.7 High
-
csync2SUSE Security update for csync2 No score - mozilla firefox Mozilla developers reported memory safety bugs present in Firefox 85. Some of these bugs showed... 8.8 High
- abb ac500 v2 products with onboard ethernet, pm554 firmware, pm556 firmware +4 more +6 more AC500 V2 webserver denial of service vulnerability 7.5 High
- bosch video recording manager, divar ip 5000 firmware, video management system +2 more Improper Access Control in Bosch Video Recording Manager 9.9 Critical
- bestit amazon pay best it Amazon Pay Plugin before 9.4.2 for Shopware exposes Sensitive Information to an... 9.1 Critical
- owncloud desktop client ownCloud owncloud/client before 2.7 allows DLL Injection. The desktop client loaded development... 7.8 High
- prosoft-technology icx35-hwc-a firmware, icx35-hwc-e firmware +1 more Changing the password on the module webpage does not require the user to type in the current... 7.5 High
- Show olderLoading…