CVEs published in February 2021
1,593 vulnerabilities, 240 critical, 19 exploited.
- google androidIn ged, there is a possible out of bounds write due to an integer overflow. This could lead to...6.7 Medium
- google androidIn kisd, there is a possible out of bounds write due to an integer overflow. This could lead to...6.7 Medium
- google androidIn netdiag, there is a possible command injection due to improper input validation. This could...6.7 Medium
- google androidIn netdiag, there is a possible out of bounds write due to a missing bounds check. This could...6.7 Medium
- google androidIn netdiag, there is a possible command injection due to improper input validation. This could...6.7 Medium
- google androidIn netdiag, there is a possible out of bounds write due to a missing bounds check. This could...6.7 Medium
- google androidIn netdiag, there is a possible out of bounds write due to an incorrect bounds check. This could...6.7 Medium
- google androidIn kisd, there is a possible out of bounds read due to improper input validation. This could lead...6.7 Medium
- google androidIn aee, there is a possible memory corruption due to a stack buffer overflow. This could lead to...6.7 Medium
- google androidIn mobile_log_d, there is a possible command injection due to a missing bounds check. This could...6.7 Medium
- google androidIn mobile_log_d, there is a possible command injection due to improper input validation. This...6.7 Medium
- google androidIn display driver, there is a possible memory corruption due to a use after free. This could lead...6.7 Medium
- http4sUnbounded connection acceptance in http4s-blaze-server7.5 High
- http4s blazeUnbounded connection acceptance leads to file handle exhaustion7.5 High
- intel biosOut of bound read in BIOS firmware for 8th, 9th Generation Intel(R) Core(TM), Intel(R) Celeron(R)...7.8 High
- linuxfoundation harbor"catalog's registry v2 api exposed on unauthenticated path in Harbor"5.3 Medium
- pryanikiA cross-site scripting (XSS) vulnerability in Pryaniki 6.44.3 allows remote authenticated users...5.4 Medium
- intel m10jnp2sb firmwareImproper input validation in the firmware for Intel(R) Server Board M10JNP2SB before version 7...6.7 Medium
- No product listedTest update for SLE-MicroNo score
- hcl software digital experienceIn Digital Experience 8.5, 9.0, and 9.5, WSRP consumer is vulnerable to cross-site scripting (XSS).6.1 Medium
- facebook whatsapp business for android, whatsapp for android, whatsapp +3 more +5 moreA missing bounds check in WhatsApp for Android prior to v2.21.1.13 and WhatsApp Business for...7.8 High
- hcl software digital experienceHCL Digital Experience 9.5 containers include vulnerabilities that could expose sensitive data to...7.5 High
- traccarUnquoted Windows binary path in Traccar5.5 Medium
- hcl software digital experienceHCL Digital Experience 8.5, 9.0, and 9.5 exposes information about the server to unauthorized users.4.9 Medium
segv_handlerSUSESecurity update for segv_handlerNo score- oauth2 proxy project proxy, oauth2-proxy +1 moreSubdomain checking of whitelisted domains could allow unintended redirects4.7 Medium
- indutny ellipticCryptographic Issues6.8 Medium
- mechanize project mechanize, debian linux, fedoraproject fedora +2 moreCommand Injection Vulnerability in Mechanize7.4 High
- dotty project dottyPrototype pollution in dotty9.8 Critical
- tibco ebxTIBCO EBX Cross Site Scripting (XSS)8.0 High
- freediskspace project freediskprojectCommand Injection9.8 Critical
- containers podmanPodman Origin Validation Error5.9 Medium
- canonical apportapport can be stalled by reading a FIFO8.8 High
- canonical apportapport improperly parses /proc/pid/stat8.8 High
- canonical apportapport improperly parses /proc/pid/status8.8 High
ca-certificatesUbuntuca-certificates updateNo score- mozilla bleachCross-site scripting in Bleach6.1 Medium
- docker, moby, debian linux +1 more +3 moreprivilege escalation in Moby6.8 Medium
- docker, debian linux, moby +1 more +3 moreDocker daemon crash during image pull of malicious image6.5 Medium
- loklakPath Traversal in loklak9.1 Critical
- mit krb5-applAn issue was discovered in rcp in MIT krb5-appl through 1.0.3. Due to the rcp implementation...5.9 Medium
- mit krb5-applIn the rcp client in MIT krb5-appl through 1.0.3, malicious servers could bypass intended access...7.5 High
- adobe consulting services commons, experience manager +1 moreReflected Cross-site Scripting (XSS) on version-compare and page-compare tools6.1 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAcrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code Execution8.8 High
- ua-parser uap-coreDenial of Service in uap-core5.3 Medium
- ibm content navigatorIBM Content Navigator 3.0.CD could allow a remote attacker to traverse directories on the system....4.3 Medium
- belkin linksys wrt160nl firmware, linksys wrt 160nl +1 more** UNSUPPORTED WHEN ASSIGNED ** The administration web interface on Belkin Linksys WRT160NL 1.0...8.8 High
- dlink dsr-1000n firmware, dsr-250 firmware +1 moreThe D-Link DSR-250 (3.14) DSR-1000N (2.11B201) UPnP service contains a command injection...9.8 Critical
segv_handlerSUSESecurity update for segv_handlerNo score- d-link dns-320 device, dlink dns-320 firmware +1 moreD-Link DNS-320 FW v2.06B01 Revision Ax is affected by command injection in the system_mgr.cgi...9.8 Critical
- Show moreLoading…