CVEs published in February 2021
1,593 vulnerabilities, 240 critical, 19 exploited.
- siemens pcs neo (administration console), tia portal, simatic process control system neo +1 more +3 moreA vulnerability has been identified in PCS neo (Administration Console) (V3.0), TIA Portal (V15,...7.8 High
- siemens sinec nms, sinema server, sinec network management system +2 moreA vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1 Update 1), SINEMA...8.1 High
- siemens simatic hmi comfort panels (incl. siplus variants), simatic hmi ktp mobile panels, sinamics gh150 +17 more +19 moreA vulnerability has been identified in SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All...9.8 Critical
- siemens simatic pcs 7, simatic wincc +1 moreA vulnerability has been identified in SIMATIC PCS 7 (All versions), SIMATIC WinCC (All versions ...5.5 Medium
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreHeap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to...8.8 High
- millewinMillennium Millewin (also known as "Cartella clinica") 13.39.028, 13.39.28.3342, and 13.39.146.1...8.8 High
- ibm security identity governance and intelligenceIBM Security Identity Governance and Intelligence 5.2.6 could allow a local user to obtain...6.5 Medium
- ibm security identity governance and intelligenceIBM Security Identity Governance and Intelligence 5.2.6 does not invalidate session after logout...4.0 Medium
- ibm security identity governance and intelligenceIBM Security Identity Governance and Intelligence 5.2.6 could disclose sensitive information to...5.3 Medium
- ibm security identity governance and intelligenceIBM Security Identity Governance and Intelligence 5.2.6 could allow an attacker to obtain...6.9 Medium
- ibm security identity governance and intelligenceIBM Security Identity Governance and Intelligence 5.2.6 could allow a user to cause a denial of...5.3 Medium
- omron cx-one, cx-position, cx-protocol +1 more +3 moreOmron CX-One7.8 High
- omron cx-one, cx-position, cx-protocol +1 more +3 moreOmron CX-One8.8 High
- omron cx-one, cx-position, cx-protocol +1 more +3 moreOmron CX-One8.8 High
- argoproj argo cdIn util/session/sessionmanager.go in Argo CD before 1.8.4, tokens continue to work even when the user account is disabled.6.5 Medium
java-11-openjdkSUSESecurity update for java-11-openjdkNo score- gradle maven, enterprise test distribution agent, test distribution +2 moreA directory traversal issue was discovered in Gradle gradle-enterprise-test-distribution-agent...6.5 Medium
- b2evolutionStored XSS in b2evolution CMS version 6.11.6 and prior allows an attacker to perform malicious...4.8 Medium
- b2evolutionOpen redirect vulnerability in b2evolution CMS version prior to 6.11.6 allows an attacker to...6.1 Medium
- rocketUse after free in Rocket7.3 High
- yottadbUse-after-free in yottadb9.8 Critical
- fedoraproject fedora, roundcube webmail +1 moreRoundcube before 1.4.11 allows XSS via crafted Cascading Style Sheets (CSS) token sequences...5.4 Medium
- fusioncharts apexchartsCross-site Scripting (XSS)6.3 Medium
- tufin securetrackInsecure Direct Object Reference (IDOR) exists in Tufin SecureChange, affecting all versions...5.7 Medium
- tufin securetrackUsername enumeration in present in Tufin SecureTrack. It's affecting all versions of SecureTrack....4.3 Medium
- tufin securetrackMultiple Cross-Site Request Forgery (CSRF) vulnerabilities were present in Tufin SecureTrack,...8.8 High
- tufin securetrackTufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is reflected back...5.9 Medium
- tufin securetrackTufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is reflected back...5.9 Medium
- tufin securetrackTufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is reflected back...5.9 Medium
- abb ac500 v2 products with onboard ethernet, ac500 cpu firmware +1 moreAC500 V2 unauthenticated crafter packet vulnerability8.6 High
- probot botThe ProBot bot through 2021-02-08 for Discord might allow attackers to interfere with the...9.8 Critical
relicOSS-FuzzHeap-buffer-overflow in bn_sqr_karat_impNo score- siemens apogee pxc compact (bacnet), apogee pxc compact (p2 ethernet), apogee pxc modular (bacnet) +9 more +11 moreA vulnerability has been identified in Nucleus NET (All versions < V5.2), Nucleus ReadyStart for...6.5 Medium
- pyyaml, oracle communications cloud native core network function cloud native environment +1 moreImproper Input Validation in PyYAML9.8 Critical
- casap automated enrollment system project automated enrollment systemCASAP Automated Enrollment System 1.0 is affected by cross-site scripting (XSS) in users.php. An...5.4 Medium
firefoxUbuntufirefox regressionNo score- bitmessage pybitmessage** DISPUTED ** PyBitmessage through 0.6.3.2 allows attackers to write screen captures to...5.5 Medium
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 moreScripting tag chars < > not filtered in input fields could cause Cross-Site Scripting (XSS)3.5 Low
- netapp clustered data ontapClustered Data ONTAP versions prior to 9.1P18 and 9.3P12 are susceptible to a vulnerability which...3.3 Low
- netapp clustered data ontapClustered Data ONTAP versions prior to 9.3P20 are susceptible to a vulnerability which could...3.3 Low
- netapp oncommand system managerOnCommand System Manager 9.x versions prior to 9.3P20 and 9.4 prior to 9.4P3 are susceptible to a...5.5 Medium
- apache activemq, oracle communications session report manager, communications session route manager +2 moreCross-site scripting (XSS) in Apache ActiveMQ6.1 Medium
- set-or-get project set-or-getPrototype Pollution in set-or-get9.8 Critical
- nopcommerceIn nopCommerce 4.30, a Reflected XSS issue in the Discount Coupon component allows remote...6.1 Medium
- marked project markedDenial of Service in Marked5.3 Medium
- micro focus operation bridge reporter (obr), microfocus operation bridge reporter +1 moreRemote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product,...9.8 Critical
- netmotionsoftware netmotion mobilityNetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to...8.1 High
- netmotionsoftware netmotion mobilityNetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to...8.1 High
- netmotionsoftware netmotion mobilityNetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to...8.1 High
- netmotionsoftware netmotion mobilityNetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to...8.1 High
- Show moreLoading…