CVEs published in February 2021
1,593 vulnerabilities, 240 critical, 19 exploited.
- solarwinds serv-uSolarWinds Serv-U before 15.2.2 allows Authenticated Directory Traversal.6.5 Medium
- gfi software helpdeskimproper access control vulnerability in Helpdesk7.3 High
- jetbrains teamcityJetBrains TeamCity Plugin before 2020.2.85695 SSRF. Vulnerability that could potentially expose...7.5 High
- gfi software helpdeskcommand injection vulnerability in Helpdesk9.8 Critical
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.1, permissions during token removal were checked improperly.5.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.1, permissions during user deletion were checked improperly.5.3 Medium
- solarwinds serv-uSolarWinds Serv-U before 15.2.2 allows authenticated reflected XSS.5.4 Medium
- solarwinds serv-uSolarWinds Serv-U before 15.2.2 allows Unauthenticated Macro Injection.9.8 Critical
- eclipse californium, the eclipse foundation eclipse californium +1 moreIn Eclipse Californium version 2.3.0 to 2.6.0, the certificate based (x509 and RPK) DTLS...7.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.1, the server admin could create and see access tokens for...3.8 Low
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.1, a user could get access to the GitHub access token of...4.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2020.2, an ECR token could be exposed in a build's parameters.7.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.2, TeamCity server DoS was possible via server integration.5.3 Medium
- jetbrains teamcityJetBrains TeamCity before 2020.2 was vulnerable to reflected XSS on several pages.6.1 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2020.6.1099, project information could be potentially disclosed.4.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2020.5.3123, server-side template injection (SSTI) was possible,...9.8 Critical
- jetbrains youtrackIn JetBrains YouTrack before 2020.4.6808, the YouTrack administrator wasn't able to access...7.5 High
- jetbrains youtrackIn JetBrains YouTrack before 2020.4.4701, permissions for attachments actions were checked...5.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2020.6.1767, an issue's existence could be disclosed via YouTrack...5.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2020.4.4701, improper resource access checks were made.5.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2020.4.4701, an attacker could enumerate users via the REST API...5.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2020.4.4701, CSRF via attachment upload was possible.8.8 High
- jetbrains ktorIn JetBrains Ktor before 1.4.3, HTTP Request Smuggling was possible.5.3 Medium
- jetbrains ktorIn JetBrains Ktor before 1.4.2, weak cipher suites were enabled by default.5.3 Medium
- jetbrains ktorIn JetBrains Ktor before 1.5.0, a birthday attack on SessionStorage key was possible.5.3 Medium
- jetbrains kotlin, oracle communications cloud native core network slice selection function, communications cloud native core policy +1 more +3 moreIncorrect Default Permissions in JetBrains Kotlin5.3 Medium
- jetbrains hubIn JetBrains Hub before 2020.1.12669, information disclosure via the public API was possible.5.3 Medium
- jetbrains hubIn JetBrains Hub before 2020.1.12629, an authenticated user can delete 2FA settings of any other...6.5 Medium
- jetbrains hubIn JetBrains Hub before 2020.1.12629, an open redirect was possible.6.1 Medium
- windriver vxworks, oracle communications eagle +1 moreinteger overflow in calloc7.3 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2020.3, potentially insecure deserialization of the workspace...7.8 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2020.2, HTTP links were used for several remote repositories...5.3 Medium
- jetbrains code with meIn JetBrains Code With Me before 2020.3, an attacker on the local network, knowing a session ID,...2.5 Low
- moxa edr-810-2gsfp-t firmware, edr-810-2gsfp firmware, edr-810-vpn-2gsfp-t firmware +5 more +7 moreCertain Moxa Inc products are affected by an improper restriction of operations in EDR-G903...9.8 Critical
- rainbowfishsoftware pacsone serverPacsOne Server (PACS Server In One Box) below 7.1.1 is affected by file read/manipulation, which...7.5 High
- rainbowfishsoftware pacsone serverPacsOne Server (PACS Server In One Box) below 7.1.1 is affected by incorrect access control,...9.8 Critical
- rainbowfishsoftware pacsone serverPacsOne Server (PACS Server In One Box) below 7.1.1 is affected by cross-site scripting (XSS).6.1 Medium
- rainbowfishsoftware pacsone serverPacsOne Server (PACS Server In One Box) below 7.1.1 is affected by SQL injection.8.8 High
- rdiff project rdiffWindow may read from uninitialized memory locations in rdiff7.5 High
- qwutils project qwutilsinsert_slice_clone can double drop if Clone panics.5.3 Medium
- privoxyA flaw was found in Privoxy in versions before 3.0.29. Dereference of a NULL-pointer that could...7.5 High
- privoxyA flaw was found in Privoxy in versions before 3.0.29. Memory leak if multiple filters are...7.5 High
- privoxyA flaw was found in Privoxy in versions before 3.0.29. Memory leak when client tags are active...7.5 High
- privoxyA flaw was found in Privoxy in versions before 3.0.29. Memory leak in the show-status CGI handler...7.5 High
- privoxyA memory leak vulnerability was found in Privoxy before 3.0.29 in the show-status CGI handler...7.5 High
- squaredupSquaredUp allowed Stored XSS before version 4.6.0. A user was able to create a dashboard that...5.4 Medium
- squaredupCSRF protection was not present in SquaredUp before version 4.6.0. A CSRF attack could have been...6.5 Medium
- cloudflare warp for windows, warp +1 morePrivilege escalation through unquoted service binary path on Cloudflare WARP for Windows4.5 Medium
- google androidIn RT regmap driver, there is a possible memory corruption due to type confusion. This could lead...4.4 Medium
- google androidIn kisd, there is a possible memory corruption due to a heap buffer overflow. This could lead to...6.7 Medium
- Show moreLoading…