CVEs published in February 2021
1,593 vulnerabilities, 240 critical, 19 exploited.
- cisco small business rv series router firmware, rv160 vpn router firmware, rv160w wireless-ac vpn router firmware +3 more +5 moreCisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution Vulnerabilities9.8 Critical
- decal project decalPrototype Pollution8.6 High
- decal project decalPrototype Pollution8.6 High
- store-opart op\'art devisAn Insecure Direct Object Reference (IDOR) vulnerability was found in Prestashop Opart devis < 4...5.3 Medium
officecrates.iooffice is unmaintained, use calamine insteadNo score- xcb project xcbUnchecked Return Value in xcb8.8 High
- xcb project xcbOut of bounds read in xcb9.8 Critical
- xcb project xcbArbitrary return types in xcb9.8 Critical
- xcb project xcbUnchecked Return Value in xcb9.8 Critical
- hcltechsw onetest performanceHCL OneTest Performance V9.5, V10.0, V10.1 uses basic authentication which is relatively weak. An...7.5 High
- hcltechsw onetest performanceHCL OneTest Performance V9.5, V10.0, V10.1 contains an inadequate session timeout, which could...6.5 Medium
- softmaker planmaker 2021A memory corruption vulnerability exists in the Excel Document SST Record 0x00fc functionality of...8.8 High
- hcltechsw onetest performanceHCL OneTest UI V9.5, V10.0, and V10.1 does not perform authentication for functionality that...9.8 Critical
- rockwellautomation flex io 1794-aent\/b firmwareAn exploitable denial of service vulnerability exists in the ENIP Request Path Network Segment...7.5 High
- softmaker planmaker 2021A specially crafted document can cause the document parser to copy data from a particular record...8.8 High
- softmaker planmaker 2021A specially crafted document can cause the document parser to copy data from a particular record...8.8 High
- softmaker planmaker 2021A specially crafted document can cause the document parser to copy data from a particular record...8.8 High
- softmaker planmaker 2021An exploitable integer overflow vulnerability exists in the PlanMaker document parsing...8.8 High
- softmaker planmaker 2021An exploitable heap-based buffer overflow vulnerability exists in the PlanMaker document parsing...8.8 High
- google androidAn issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. In...9.8 Critical
- google androidAn issue was discovered on LG Wing mobile devices with Android OS 10 software. The biometric...9.8 Critical
- google androidAn issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. The...9.8 Critical
- bitcoinBitcoin Core before 0.19.0 might allow remote attackers to execute arbitrary code when another...9.8 Critical
usrsctpOSS-FuzzHeap-use-after-free in sctp_sorecvmsgNo scorec-blosc2OSS-FuzzHeap-buffer-overflow in blosc_run_decompression_with_contextNo scoreselinuxOSS-FuzzHeap-use-after-free in cil_destroy_blockNo scorewiresharkOSS-FuzzStack-use-after-return in sta_prop_equal_fnNo score- nagios favoritesThe Favorites component before 1.0.2 for Nagios XI 5.8.0 is vulnerable to Insecure Direct Object...5.3 Medium
- nagios favoritesThe Favorites component before 1.0.2 for Nagios XI 5.8.0 is vulnerable to XSS.6.1 Medium
- sonicwall sma100, sslvpn sma100, sma 100 firmware +5 more +7 moreA SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote...9.8 Critical
- squaredupA username enumeration issue was discovered in SquaredUp before version 4.6.0. The login...3.7 Low
- squareup connect java software development kitInsecure Temporary File4.4 Medium
- zohocorp manageengine remote access plusZoho ManageEngine Remote Access Plus 10.0.259 allows HTML injection via the Description field on...4.8 Medium
- netapp clustered data ontapClustered Data ONTAP versions prior to 9.3P20 and 9.5P15 are susceptible to a vulnerability which...3.5 Low
- netapp clustered data ontapClustered Data ONTAP versions prior to 9.3P20 and 9.5P15 are susceptible to a vulnerability which...3.5 Low
- altn mdaemon webmailAuthenticated stored cross-site scripting (XSS) in the contact name field in the distribution...5.4 Medium
- altn mdaemon webmailStored cross-site scripting (XSS) in file attachment field in MDaemon webmail 19.5.5 allows an...5.4 Medium
- solarwinds serv-uIn SolarWinds Serv-U before 15.2.2 Hotfix 1, there is a directory containing user profile files ...7.1 High
- apache shiroAuthentication bypass in Apache Shiro9.8 Critical
- solarwinds orion platformThe Collector Service in SolarWinds Orion Platform before 2020.2.4 uses MSMQ (Microsoft Message...9.8 Critical
- realtek rtl8195a firmwareThe function CheckMic() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April...7.5 High
- solarwinds orion platformSolarWinds Orion Platform before 2020.2.4, as used by various SolarWinds products, installs and...7.8 High
- realtek rtl8195a firmwareThe function DecWPA2KeyData() in the Realtek RTL8195A Wi-Fi Module prior to versions released in...8.1 High
- realtek rtl8195a firmwareThe function AES_UnWRAP() in the Realtek RTL8195A Wi-Fi Module prior to versions released in...8.1 High
- realtek rtl8195a firmwareThe function DecWPA2KeyData() in the Realtek RTL8195A Wi-Fi Module prior to versions released in...8.1 High
- realtek rtl8195a firmwareThe function ClientEAPOLKeyRecvd() in the Realtek RTL8195A Wi-Fi Module prior to versions...7.5 High
- hackerone nextcloud server, nextcloud server +1 moreA missing link validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows execution of...5.4 Medium
- apache cassandraAuthentication Bypass in Apache Cassandra7.5 High
- zohocorp manageengine opmanagerZoho ManageEngine OpManager Stable build before 125203 (and Released build before 125233) allows...9.8 Critical
- solarwinds serv-uSolarWinds Serv-U before 15.2.2 allows Authenticated Stored XSS.5.4 Medium
- Show moreLoading…