CVEs published in February 2021
1,593 vulnerabilities, 240 critical, 19 exploited.
- cesanta mongooseThe mg_tls_init function in Cesanta Mongoose HTTPS server 7.0 (compiled with OpenSSL support) is...9.1 Critical
- cesanta mongooseThe mg_tls_init function in Cesanta Mongoose HTTPS server 7.0 and 6.7-6.18 (compiled with mbedTLS...9.1 Critical
- cesanta mongooseThe mg_http_serve_file function in Cesanta Mongoose HTTP server 7.0 is vulnerable to remote OOB...9.1 Critical
- ezxml project ezxmlThe ezxml_new function in ezXML 0.8.6 and earlier is vulnerable to OOB write when opening XML...8.1 High
- ezxml project ezxmlThe ezxml_new function in ezXML 0.8.6 and earlier is vulnerable to OOB write when opening XML...8.1 High
- ezxml project ezxmlThe ezxml_toxml function in ezxml 0.8.6 and earlier is vulnerable to OOB write when opening XML...8.1 High
- symonics libmysofa, fedoraproject fedora +1 moreBuffer overflow in readDataVar in hdf/dataobject.c in Symonics libmysofa 0.5 - 1.1 allows...8.8 High
- symonics libmysofa, fedoraproject fedora +1 moreIncorrect handling of input data in mysofa_resampler_reset_mem function in the libmysofa library...6.5 Medium
- symonics libmysofa, fedoraproject fedora +1 moreIncorrect handling of input data in loudness function in the libmysofa library 0.5 - 1.1 will...6.5 Medium
- symonics libmysofa, fedoraproject fedora +1 moreIncorrect handling of input data in changeAttribute function in the libmysofa library 0.5 - 1.1...6.5 Medium
- symonics libmysofa, fedoraproject fedora +1 moreIncorrect handling of input data in verifyAttribute function in the libmysofa library 0.5 - 1.1...6.5 Medium
- privateoctopus picoquicpicoquic (before 3rd of July 2020) allows attackers to cause a denial of service (infinite loop)...7.5 High
- netty, debian linux, netapp active iq unified manager +10 more +12 moreLocal Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files6.2 Medium
- hpe baseboard management controllerThe Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0...7.8 High
- firejail project firejail, debian linux +1 moreFirejail before 0.9.64.4 allows attackers to bypass intended access restrictions because there is...7.8 High
- hpe baseboard management controllerThe Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0...7.8 High
- hpe baseboard management controllerThe Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0...7.8 High
- hpe baseboard management controllerThe Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0...7.8 High
- httplib2Regular Expression Denial of Service in httplib27.5 High
- carrierwave project carrierwaveCode Injection vulnerability in CarrierWave7.4 High
- carrierwave project carrierwaveServer-side request forgery in CarrierWave4.3 Medium
- 1password scim bridge1Password SCIM Bridge before 1.6.2 mishandles validation of requests for log files.6.5 Medium
- hpe baseboard management controllerThe Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0...7.8 High
- hpe baseboard management controllerThe Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0...7.8 High
- hpe baseboard management controllerThe Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0...7.8 High
- hpe baseboard management controllerThe Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0...7.8 High
- hpe baseboard management controllerThe Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0...7.8 High
- macfromip project macfromipCommand Injection9.8 Critical
- hpe baseboard management controllerThe Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0...7.8 High
- spritesheet-js project spritesheet-jsCommand Injection9.8 Critical
- node-ps project node-psCommand Injection9.8 Critical
- hpe baseboard management controllerThe Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0...7.8 High
- hpe baseboard management controllerThe Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0...7.8 High
- hpe baseboard management controllerThe Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0...7.8 High
- php, debian linux, netapp clustered data ontap +1 more +3 moreNull Dereference in SoapClient5.3 Medium
- chainsafe ethermintAuthentication bypass by capture-replay in github.com/cosmos/ethermint7.5 High
- hpe baseboard management controllerThe Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0...7.8 High
- chainsafe ethermintCosmos Network Ethermint <= v0.4.0 is affected by cache lifecycle inconsistency in the EVM module. Due to the inconsistency between the Storage caching cycle and the Tx processing cycle, Storage chang…7.5 High
- chainsafe ethermintCosmos Network Ethermint <= v0.4.0 is affected by cache lifecycle inconsistency in the EVM module. The bytecode set in a FAILED transaction wrongfully remains in memory(stateObject.code) and is furthe…7.5 High
- chainsafe ethermintAuthentication bypass by capture-replay in github.com/cosmos/ethermint7.5 High
dynamodb-encryption-sdkPyPIKey Caching behavior in the DynamoDB Encryption Client.No scorecom.amazonaws:aws-dynamodb-encryption-javaMavenKey Caching behavior in the DynamoDB Encryption Client.No score- dynamoosePrototype Pollution in Dynamoose7.2 High
- gitlog project gitlogCommand injection in gitlog9.8 Critical
- apostrophecms sanitize-htmlImproper Input Validation in sanitize-html5.3 Medium
- apostrophecms sanitize-htmlImproper Input Validation in sanitize-html5.3 Medium
- fortinet fortiwebAn improper neutralization of input during web page generation in FortiWeb GUI interface 6.3.0...6.1 Medium
- fortinet fortiisolatorAn insufficient session expiration vulnerability in FortiNet's FortiIsolator version 2.0.1 and...9.8 Critical
- godotengine godot engineAn integer overflow issue exists in Godot Engine up to v3.2 that can be triggered when loading...7.8 High
- godotengine godot engineA stack overflow issue exists in Godot Engine up to v3.2 and is caused by improper boundary...7.8 High
- Show moreLoading…