CVEs published in February 2021
1,593 vulnerabilities, 240 critical, 19 exploited.
- ibm cloud pak for automationIBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 - Business Automation Application Designer...6.5 Medium
- ibm cloud pak for automationIBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 stores potentially sensitive information in...6.5 Medium
- phpokPhpOK 5.4.137 contains a SQL injection vulnerability that can inject an attachment data through...9.8 Critical
- emlogemlog v5.3.1 has full path disclosure vulnerability in t/index.php, which allows an attacker to...5.3 Medium
- phpgurukul online marriage registration systemOnline Marriage Registration System 1.0 is affected by stored cross-site scripting (XSS)...5.4 Medium
- college management system project management systemCollege Management System Php 1.0 suffers from SQL injection vulnerabilities in the index.php...9.8 Critical
- otrs ag otrscisincustomerfrontend, otrs cis in customer frontend +1 moreAgent is able to link customer's Config Items without permission3.5 Low
- otrsInformation exposure in PDF export5.7 Medium
- checkbox surveyXSS in Survey Module3.5 Low
- otrs ag otrsticketforms, otrs ticket forms +1 moreDynamic templates reveal sensitive data when OTRS tags are used4.3 Medium
- librenmsSQL Injection in librenms8.8 High
- svakom siime eye, siime eye firmware +1 moreAn issue was discovered in Svakom Siime Eye 14.1.00000001.3.330.0.0.3.14. A command injection...9.8 Critical
- svakom siime eye firmwareAn issue was discovered in Svakom Siime Eye 14.1.00000001.3.330.0.0.3.14. By sending a set_params...6.8 Medium
serenityOSS-FuzzGlobal-buffer-overflow in Gfx::decode_frameNo scoreghostscriptOSS-FuzzHeap-use-after-free in sampled_data_continueNo scoreflatbuffersOSS-FuzzHeap-buffer-overflow in flatbuffers::JsonPrinter::GenFieldOffsetNo scoreunicornOSS-FuzzUNKNOWN READ in cpu_arm_exec_armebNo scorehtslibOSS-FuzzHeap-buffer-overflow in rle_decodeNo scorendpiOSS-FuzzStack-buffer-overflow in processClientServerHelloNo scoreunicornOSS-FuzzUNKNOWN WRITE in tb_flush_armebNo scorendpiOSS-FuzzHeap-buffer-overflow in http_process_user_agentNo score- intel connman, debian linux, opensuse leap +2 moregdhcp in ConnMan before 1.39 could be used by network-adjacent attackers to leak sensitive stack...6.5 Medium
- intel connman, debian linux, opensuse leap +2 moreA stack-based buffer overflow in dnsproxy in ConnMan before 1.39 could be used by network...8.8 High
- wpdatatableswpDataTables before 3.4.1 mishandles order direction for server-side tables, aka admin-ajax.php...9.8 Critical
- openwrtIn OpenWrt 19.07.x before 19.07.7, when IPv6 is used, a routing loop can occur that generates...6.5 Medium
- sthttpd project sthttpdAn issue was discovered in sthttpd through 2.27.1. On systems where the strcpy function is...7.5 High
- open-emr openemrThe Patient Portal of OpenEMR 5.0.2.1 is affected by a Command Injection vulnerability in ...8.8 High
- cryptography.io cryptography, fedoraproject fedora, oracle communications cloud native core network function cloud native environment +2 morePyCA Cryptography symmetrically encrypting large values can lead to integer overflow9.1 Critical
- ncr command center agentCMCAgent in NCR Command Center Agent 16.3 on Aloha POS/BOH servers permits the submission of a...9.8 Critical
libtsmOSS-FuzzGlobal-buffer-overflow in vte_write_debugNo scorewabtOSS-FuzzUNKNOWN READ in wabt::ReadBinaryNo score- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Skia in Google Chrome prior to 88.0.4324.146 allowed a local...4.3 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in Navigation in Google Chrome prior to 88.0.4324.146 allowed a remote attacker...9.6 Critical
- google chrome, fedoraproject fedora +1 moreUse after free in Fonts in Google Chrome prior to 88.0.4324.146 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in Tab Groups in Google Chrome prior to 88.0.4324.146 allowed an attacker...8.8 High
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in Extensions in Google Chrome prior to 88.0.4324.146 allowed an attacker...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Payments in Google Chrome on Mac prior to 88.0.4324.146 allowed a remote...9.6 Critical
- jenzabarJenzabar 9.2.x through 9.2.2 allows /ics?tool=search&query= XSS.6.1 Medium
- huawei mate 30, mate 30 firmware +1 moreThere is a buffer overflow vulnerability in Mate 30 10.1.0.126(C00E125R5P3). A module does not...3.3 Low
- huawei taurus-al00a, taurus-al00a firmware +1 moreThere is a use after free vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). A module may refer...3.3 Low
- huawei campusinsight, manageone, taurus-al00a firmware +2 moreSome Huawei products have an inconsistent interpretation of HTTP requests vulnerability....7.5 High
- huawei ecns280 firmwareThere is a denial of service (DoS) vulnerability in eCNS280 versions V100R005C00, V100R005C10....7.5 High
- huawei taurus-al00a, taurus-al00a firmware +1 moreThere is an out-of-bound read vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). A module does...7.1 High
- huawei imaster mae-m, manageone, smc2.0 +2 more +4 moreThere is a local privilege escalation vulnerability in some Huawei products. A local,...7.8 High
- huawei manageoneThere has a CSV injection vulnerability in ManageOne 8.0.1. An attacker with common privilege may...4.9 Medium
- huawei manageoneThere is a logic vulnerability in Huawei Gauss100 OLTP Product. An attacker with certain...6.5 Medium
- huawei ais-bw80h-00 firmwareThere is an insufficient integrity check vulnerability in Huawei Sound X Product. The system does...6.8 Medium
- microfocus application performance managementCross Site Request Forgery vulnerability in Micro Focus Application Performance Management...6.5 Medium
- microfocus application performance managementPersistent Cross-Site scripting vulnerability in Micro Focus Application Performance Management...4.8 Medium
- huawei mate 30, mate 30 firmware +1 moreThere is an out-of-bound read vulnerability in Mate 30 10.0.0.182(C00E180R6P2). A module does not...4.6 Medium
- Show moreLoading…