CVEs published in February 2021
1,593 vulnerabilities, 240 critical, 19 exploited.
- nb-connect project nb-connectnb-connect invalidly assumes the memory layout of std::net::SocketAddr9.8 Critical
- horde groupware, debian linux +1 moreAn XSS issue was discovered in Horde Groupware Webmail Edition through 5.2.22 (where the...6.1 Medium
- limesurveyLimeSurvey before 4.0.0-RC4 allows SQL injection via the participant model.9.8 Critical
- pystemon project pystemonconfig.py in pystemon before 2021-02-13 allows code execution via YAML deserialization because...9.8 Critical
- openldap, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreIn OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur...7.5 High
harfbuzzOSS-FuzzHeap-buffer-overflow in OT::OffsetTo<OT::Anchor, OT::IntType<unsigned short, 2u>, true>* hb_serialize_coNo scoreserenityOSS-FuzzHeap-buffer-overflow in Crypto::der_decode_integerNo scoreserenityOSS-FuzzHeap-buffer-overflow in Crypto::der_decode_sequenceNo scoremrubyOSS-FuzzHeap-buffer-overflow in heredoc_remove_indentNo score- tp-link archer c5v firmwareIn the management interface on TP-Link Archer C5v 1.7_181221 devices, credentials are sent in a...7.1 High
- tp-link archer c5v firmwareTP-Link Archer C5v 1.7_181221 devices allows remote attackers to retrieve cleartext credentials...6.5 Medium
popplerOSS-FuzzBad-cast to tt_cmap_t' (aka 'struct _tt_cmap')_cairo_truetype_index_to_ucs4No scoreopenthreadOSS-FuzzStack-buffer-overflow in ot::Coap::Message::AppendUintOptionNo scorecryptofuzzOSS-FuzzHeap-buffer-overflow in des_ede3_wrapNo scorec-blosc2OSS-FuzzHeap-buffer-overflow in frame_get_vlmetalayersNo score- nediNeDi 1.9C allows an authenticated user to perform a SQL Injection in the Monitoring History...8.8 High
- nediNeDi 1.9C allows an authenticated user to execute operating system commands in the Nodes Traffic...8.8 High
- nediNeDi 1.9C allows an authenticated user to inject PHP code in the System Files function on the...9.9 Critical
- microfocus operations bridge managerArbitrary code execution vulnerability on Micro Focus Operations Bridge Manager product,...9.8 Critical
- apache thrift, hive, oracle communications cloud native core network slice selection function +1 more +3 moreUncontrolled Resource Consumption in Apache Thrift7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreOn BIG-IP version 16.0.0-16.0.1 and 14.1.2.4-14.1.3, cooperation between malicious HTTP client...7.5 High
- f5 big-ip advanced web application firewall, big-ip application security manager +1 moreOn BIG-IP Advanced WAF and ASM version 15.1.x before 15.1.0.2, 15.0.x before 15.0.1.4, 14.1.x...6.1 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreOn BIG-IP version 16.0.x before 16.0.1, 15.1.x before 15.1.1, 14.1.x before 14.1.3.1, 13.1.x...8.3 High
- f5 big-ip afm, big-ip advanced firewall manager +1 moreOn BIG-IP AFM version 15.1.x before 15.1.1, 14.1.x before 14.1.3.1, and 13.1.x before 13.1.3.5,...5.4 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreOn BIG-IP version 16.0.x before 16.0.1, 15.1.x before 15.1.1, 14.1.x before 14.1.2.8, 13.1.x...6.1 Medium
- f5 access policy manager clients, big-ip access policy manager +1 moreIn Edge Client version 7.2.x before 7.2.1.1, 7.1.9.x before 7.1.9.8, and 7.1.x-7.1.8.x before 7.1...7.8 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreOn all versions of BIG-IP 12.1.x and 11.6.x, the original TLS protocol includes a weakness in the...4.8 Medium
- f5 big-ip apm, big-ip application security manager +1 moreOn BIG-IP APM version 16.0.x before 16.0.1.1, under certain conditions, when processing VPN...7.5 High
- f5 big-ip domain name system, big-ip global traffic manager +1 moreOn BIG-IP DNS and GTM version 13.1.x before 13.1.0.4, and all versions of 12.1.x and 11.6.x,...7.2 High
- f5 big-ip advanced web application firewall, big-ip application security manager +1 moreOn BIG-IP Advanced WAF and ASM version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x...7.5 High
- ibm security verify information queueIBM Security Verify Information Queue 1.0.6 and 1.0.7 contains hard-coded credentials, such as a...5.9 Medium
- ibm security verify information queueIBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a user to impersonate another...7.5 High
- ibm security verify information queueIBM Security Verify Information Queue 1.0.6 and 1.0.7 sends user credentials in plain clear text...5.3 Medium
- ibm security verify information queueIBM Security Verify Information Queue information disclosure5.9 Medium
- ibm security verify information queueIBM Security Verify Information Queue 1.0.6 and 1.0.7 could disclose highly sensitive information...7.1 High
- ibm security verify information queueIBM Security Verify Information Queue information disclosure5.3 Medium
- ibm security verify information queueIBM Security Verify Information Queue information disclosure2.2 Low
- f5 big-ip, big-iq, big-ip access policy manager, big-ip advanced firewall manager +13 more +15 moreOn BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, and 13.1...7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +8 more +10 moreOn BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x...7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreOn BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, and 14.1.x before 14.1.3.1,...7.5 High
- pelco digital sentry serverDSUtility.dll in Pelco Digital Sentry Server before 7.19.67 has an arbitrary file write...8.1 High
- rand core project coreIncorrect check on buffer length in rand_core9.8 Critical
- xn--b1agzlht fx aggregator terminal clientThe Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 allows attackers to cause a...7.5 High
- xn--b1agzlht fx aggregator terminal clientThe Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 stores authentication...7.5 High
- telegramTelegram before 7.4 (212543) Stable on macOS stores the local passcode in cleartext, leading to...5.5 Medium
- telegramTelegram before 7.4 (212543) Stable on macOS stores the local copy of self-destructed messages in...5.5 Medium
- elecom file managerDirectory traversal vulnerability in ELECOM File Manager all versions allows remote attackers to...9.1 Critical
- elecom co.,ltd. ncc-ewf100rmwh2, elecom ncc-ewf100rmwh2 firmware +1 moreCross-site request forgery (CSRF) vulnerability in ELECOM NCC-EWF100RMWH2 allows remote attackers...6.5 Medium
- elecom co.,ltd. wrc-300febk-s, elecom wrc-300febk-s firmware +1 moreELECOM WRC-300FEBK-S contains an improper certificate validation vulnerability. Via a man-in-the...4.8 Medium
- elecom co.,ltd. wrc-300febk-s, elecom wrc-300febk-s firmware +1 moreELECOM WRC-300FEBK-S allows an attacker with administrator rights to execute arbitrary OS...6.8 Medium
- Show moreLoading…