CVEs published in February 2021
1,593 vulnerabilities, 240 critical, 19 exploited.
- mcafee total protection, mcafee,llc mcafee total protection (mtp) +1 moreMcAfee Total Protection (MTP) Bypass Remote Procedure call vulnerability7.8 High
- mcafee total protection, mcafee,llc mcafee total protection (mtp) +1 moreMcAfee Total Protection (MTP) privilege escalation vulnerability7.8 High
- mcafee endpoint security, mcafee llc endpoint security (ens) for windows +1 moreNull Pointer Dereference vulnerability in McAfee Endpoint Security (ENS)4.0 Medium
- mcafee endpoint security, mcafee llc endpoint security (ens) for windows +1 moreImproper Access Control in the ENS installer8.2 High
- mcafee endpoint security, mcafee llc endpoint security (ens) for windows +1 moreImproper Access Control in the ENS installer6.7 Medium
- mcafee endpoint security, mcafee llc endpoint security (ens) for windows +1 moreClear text storage of sensitive Information in ENS7.3 High
- wekanWekan, open source kanban board system, between version 3.12 and 4.11, is vulnerable to multiple...5.4 Medium
- runzero platform, shopware +1 moreLeak of information via Store-API9.1 Critical
shopware/platformPackagistGeneration of fake documents via public GET-callNo score- inoideas inoerpIn InoERP 0.7.2, an unauthorized attacker can execute arbitrary code on the server side due to...9.8 Critical
flatbuffersOSS-FuzzHeap-buffer-overflow in flatbuffers::vector_downward::fillNo scoreflatbuffersOSS-FuzzHeap-buffer-overflow in flatbuffers::Table* flatbuffers::GetMutableRoot<flatbuffers::Table>No scoreunicornOSS-FuzzUNKNOWN READ in cpu_arm_exec_armNo scoreusrsctpOSS-FuzzHeap-use-after-free in sctp_sorecvmsgNo scorelibheifOSS-FuzzHeap-buffer-overflow in derive_collocated_motion_vectorsNo scoreghostscriptOSS-FuzzHeap-use-after-free in sampled_data_sampleNo scoreflatbuffersOSS-FuzzHeap-buffer-overflow in int flatbuffers::ReadScalar<int>No score- facebook zstandardIn the Zstandard command-line utility prior to v1.4.1, output files were created with default...5.5 Medium
- genivi diagnostic log and trace, debian linux +1 moreThe daemon in GENIVI Diagnostic Log and Trace (DLT) before 2.18.6 has a heap-based buffer...9.8 Critical
- openvswitch, debian linux, fedoraproject fedora +2 moreA vulnerability was found in openvswitch. A limitation in the implementation of userspace packet...7.5 High
- monitorrRemote code execution in Monitorr v1.7.6m in upload.php allows an unauthorized person to execute...9.8 Critical
- canonical snapd, ubuntu linux +1 moreWhen generating the systemd service units for the docker snap (and other similar snaps), snapd...9.3 Critical
- genivia gsoap, fedoraproject fedora +1 moreA denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP...7.5 High
- genivia gsoap, fedoraproject fedora +1 moreA denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP...7.5 High
- genivia gsoap, fedoraproject fedora +1 moreA code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP...9.8 Critical
- genivia gsoap, fedoraproject fedora +1 moreA denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP...7.5 High
- acquia mauticMautic is vulnerable to XSS vulnerability9.6 Critical
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS versions 8.1.0 – 9.1.0 contain a "use of SSH key past account expiration"...9.8 Critical
- dell emc powerscale onefs, powerscale onefs +1 moreDell EMC PowerScale OneFS versions 8.1.0-9.1.0 contain a Backup/Restore Privilege implementation...5.5 Medium
- dell emc powerscale onefs, powerscale onefs +1 moreDell EMC PowerScale OneFS versions 8.1.2 – 9.1.0 contain an issue where the OneFS SMB directory...5.3 Medium
- dell emc powerscale onefs, powerscale onefs +1 moreDell EMC PowerScale OneFS versions 8.1.2 and 8.2.2 contain an Incorrect Permission Assignment for...7.0 High
- dell emc powerscale onefs, powerscale onefs +1 moreDell EMC PowerScale OneFS versions 8.1.0 - 9.1.0 contain an improper input validation...7.8 High
- dell emc powerscale onefs, powerscale onefs +1 moreDell EMC PowerScale OneFS versions 8.2.0 - 9.1.0 contain a privilege escalation vulnerability. A...7.8 High
- dell emc powerscale onefs, powerscale onefs +1 moreDell EMC PowerScale OneFS versions 8.1.0 - 9.1.0 contain a privilege escalation vulnerability. A...7.8 High
- sap scimonoRemote Code Execution in SCIMono8.1 High
- sap web dynpro abap, sap se netweaver as abap (web dynpro abap) +1 moreSAP Web Dynpro ABAP allow an attacker to redirect users to a malicious site due to Reverse...4.7 Medium
- sap ui5SAP UI5, versions - 1.38.49, 1.52.49, 1.60.34, 1.71.31, 1.78.18, 1.84.5, 1.85.4, 1.86.1, allows...4.7 Medium
- sap businessobjects business intelligence, sap se business objects business intelligence platform (cmc and bi launchpad) +1 moreSAP Business Objects BI Platform, versions - 410, 420, 430, allows multiple X-Frame-Options...5.4 Medium
- sap hana databaseSAP HANA Database, versions - 1.0, 2.0, accepts SAML tokens with MD5 digest, an attacker who...6.5 Medium
- sap commerceSAP Commerce Cloud, versions - 1808,1811,1905,2005,2011, enables certain users with required...9.9 Critical
- sap netweaver master data management serverUnder specific circumstances SAP Master Data Management, versions - 710, 710.750, allows an...6.8 Medium
- sap software provisioning manager, sap se software provisioning manager 1.0 (sap netweaver master data management server 7.1) +1 moreSAP Software Provisioning Manager 1.0 (SAP NetWeaver Master Data Management Server 7.1) does not...6.3 Medium
- b2evolution cmsReflected cross-site scripting vulnerability (XSS) in the evoadm.php file in b2evolution cms...6.1 Medium
- gnu screen, debian linux, fedoraproject fedora +2 moreencoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service ...9.8 Critical
- smartfoxserverAn issue was discovered in SmartFoxServer 2.17.0. An attacker can execute arbitrary Python code,...8.8 High
- smartfoxserverAn issue was discovered in SmartFoxServer 2.17.0. Cleartext password disclosure can occur via ...5.5 Medium
- smartfoxserverAn XSS issue was discovered in SmartFoxServer 2.17.0. Input passed to the AdminTool console is...5.4 Medium
- phpsheMultiple SQL Injection vulnerabilities in PHPSHE 1.7 in phpshe/admin.php via the (1) ad_id, (2)...8.8 High
- wavlink wn575a4 firmware, wn579x3 firmware +1 moreWavlink WN575A4 and WN579X3 devices through 2020-05-15 allow unauthenticated remote users to...9.8 Critical
- owncloudDeleting users with certain names caused system files to be deleted. Risk is higher for systems...9.1 Critical
- Show moreLoading…