CVEs published in February 2021
1,593 vulnerabilities, 240 critical, 19 exploited.
- huawei ecns280 td firmwareThere is an information leak vulnerability in eCNS280_TD versions V100R005C00 and V100R005C10. A...4.1 Medium
- huawei taurus-al00a, taurus-al00a firmware +1 moreThere is a pointer double free vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). There is a lack...3.3 Low
serenityOSS-FuzzUNKNOWN READ in _finiNo scorelibrawOSS-FuzzHeap-buffer-overflow in LibRaw_buffer_datastream::readNo scoreflatbuffersOSS-FuzzHeap-buffer-overflow in flatbuffers::Table* flatbuffers::GetMutableRoot<flatbuffers::Table>No score- huawei mate 30, mate 30 firmware +1 moreThere is a weak algorithm vulnerability in Mate 3010.0.0.203(C00E201R7P2). The protection is...5.5 Medium
- huawei mate 30, mate 30 firmware +1 moreMate 30 10.0.0.203(C00E201R7P2) have a buffer overflow vulnerability. After obtaining the root...6.7 Medium
- tenable nessus amazon machine imageNessus AMI versions 8.12.0 and earlier were found to either not validate, or incorrectly validate...5.9 Medium
- google androidOPPO Android Phone with MTK chipset and Android 8.1/9/10/11 versions have an information leak...5.5 Medium
- helmInjection attack in Helm5.9 Medium
- asus rt-ax3000 firmwareDenial of service in ASUSWRT ASUS RT-AX3000 firmware versions 3.0.0.4.384_10177 and earlier...7.5 High
- google slashifyOpen redirect in Slashify6.1 Medium
- nvidia geforce experience, geforce experience software +1 moreNVIDIA GeForce Experience, all versions prior to 3.21, contains a vulnerability in GameStream ...6.0 Medium
- newmediacompany smartyAn issue was discovered in New Media Smarty before 9.10. Passwords are stored in the database in...5.5 Medium
- psypraxAn issue was discovered in Psyprax before 3.2.2. The Firebird database is accessible with the...8.1 High
- psypraxAn issue was discovered in Psyprax before 3.2.2. The file %PROGRAMDATA%\Psyprax32\PPScreen.ini...5.5 Medium
- psypraxAn issue was discovered in Psyprax beforee 3.2.2. Passwords used to encrypt the data are stored...7.5 High
- zulip desktopZulip Desktop before 5.0.0 improperly uses shell.openExternal and shell.openItem with untrusted...9.8 Critical
- zulip desktopZulip Desktop before 5.0.0 allows attackers to perform recording via the webcam and microphone...5.3 Medium
- epson iprojectionIn Epson iProjection v2.30, the driver file EMP_MPAU.sys allows local users to cause a denial of...5.5 Medium
- maxpcsecure max spyware detectorIn Max Secure Max Spyware Detector 1.0.0.044, the driver file (MaxProc64.sys) allows local users...7.8 High
- iobit advanced systemcareThe AscRegistryFilter.sys kernel driver in IObit Advanced SystemCare 13.2 allows an unprivileged...6.5 Medium
- epson iprojectionIn Epson iProjection v2.30, the driver file (EMP_NSAU.sys) allows local users to cause a denial...5.5 Medium
- flowpaper pdf2jsonBuffer overflow in pdf2json 0.69 allows local users to execute arbitrary code by converting a...7.8 High
- linkedin oncallLinkedIn Oncall vulnerable to Cross-Site Scripting6.1 Medium
- qa-themes q2a ultimate seoQuestion2Answer Q2A Ultimate SEO Version 1.3 is affected by cross-site scripting (XSS), which may...5.4 Medium
- typoraAn issue was discovered in Typora 0.9.67. There is an XSS vulnerability that causes Remote Code...6.1 Medium
- giteaBuffer Overflow in gitea7.5 High
- ibm powerhaIBM PowerHA 7.2 could allow a local attacker to obtain sensitive information from temporary...6.2 Medium
- opmantek open-auditOpmantek Open-AudIT 4.0.1 is affected by cross-site scripting (XSS). When outputting SQL...6.1 Medium
- hyperMultiple Transfer-Encoding headers misinterprets request payload4.8 Medium
- j. peters name directory, name directory project directory +1 moreCross-site request forgery (CSRF) vulnerability in Name Directory 1.17.4 and earlier allows...8.8 High
- panasonic video insight vmsVideo Insight VMS versions prior to 7.8 allows a remote attacker to execute arbitrary code with...9.8 Critical
- epikurAn issue was discovered in Epikur before 20.1.1. The Epikur server contains the checkPasswort()...9.8 Critical
- epikurAn issue was discovered in Epikur before 20.1.1. It stores the secret passwords of the users as...5.5 Medium
- epikurAn issue was discovered in Epikur before 20.1.1. A Glassfish 4.1 server with a default...7.8 High
- electriccoin zcashdIn Electric Coin Company Zcashd before 2.1.1-1, the time offset between messages could be...5.3 Medium
- electriccoin zcashdElectric Coin Company Zcashd before 2.1.1-1 allows attackers to trigger consensus failure and...7.5 High
- zohocorp manageengine applications managerdoFilter in com.adventnet.appmanager.filter.UriCollector in Zoho ManageEngine Applications...8.8 High
- redwood report2webA cross-site scripting (XSS) issue in the login panel in Redwood Report2Web 4.3.4.5 and 4.5.3...6.1 Medium
- redwood report2webA frame-injection issue in the online help in Redwood Report2Web 4.3.4.5 allows remote attackers...5.3 Medium
- linux kernel, netapp aff baseboard management controller, baseboard management controller 500f firmware +6 more +8 moreA local privilege escalation was discovered in the Linux kernel before 5.10.13. Multiple race...7.0 High
- gnome gnome-autoar, fedoraproject fedora +1 moreautoar-extractor.c in GNOME gnome-autoar through 0.2.4, as used by GNOME Shell, Nautilus, and...5.5 Medium
- octobercms octoberOctober CMS Session ID not invalidated after logout9.8 Critical
matioOSS-FuzzHeap-buffer-overflow in H5MM_memcpyNo scoreqemuOSS-FuzzGlobal-buffer-overflow in mode_sense_pageNo scorec-blosc2OSS-FuzzMemcpy-param-overlap in frame_get_metalayersNo score- privoxyA flaw was found in Privoxy in versions before 3.0.31. An assertion failure triggered by a...7.5 High
- privoxyA flaw was found in Privoxy in versions before 3.0.31. A memory leak that occurs when...7.5 High
- privoxyA flaw was found in Privoxy in versions before 3.0.29. Memory leaks in the show-status CGI...7.5 High
- Show moreLoading…