CVEs published in February 2021
1,593 vulnerabilities, 240 critical, 19 exploited.
- mumble, debian linux +1 moreMumble before 1.3.4 allows remote code execution if a victim navigates to a crafted URL on a...8.8 High
uwebsocketsOSS-FuzzSegv on unknown address in us_internal_dispatch_ready_pollNo scorespipDebianspip - security updateNo score- qemu, debian linux, redhat enterprise linux +2 moreAn out-of-bounds heap buffer access issue was found in the ARM Generic Interrupt Controller...6.0 Medium
- dell avamar, emc avamar server, emc integrated data protection appliance +2 moreDell EMC Avamar Server, versions 19.3 and 19.4 contain an Improper Authorization vulnerability in...8.1 High
- phpgurukul teachers record management systemTeachers Record Management System 1.0 is affected by a SQL injection vulnerability in ...9.8 Critical
- batflat** UNSUPPORTED WHEN ASSIGNED ** Sruu.pl in Batflat 1.3.6 allows an authenticated user to perform...7.2 High
- casap automated enrollment system project automated enrollment systemThe Login Panel of CASAP Automated Enrollment System 1.0 is vulnerable to SQL injection...9.8 Critical
- library system project systemThe user area for Library System 1.0 is vulnerable to SQL injection where a user can bypass the...9.8 Critical
- e-learning system project systemE-Learning System 1.0 suffers from an unauthenticated SQL injection vulnerability, which allows...9.8 Critical
- open-emr openemrA SQL injection vulnerability in interface/reports/non_reported.php in OpenEMR before 5.0.2.5...7.2 High
- open-emr openemrA SQL injection vulnerability in interface/main/finder/patient_select.php from library/patient...7.2 High
- open-emr openemrA SQL injection vulnerability in interface/reports/immunization_report.php in OpenEMR before 5.0...7.2 High
- open-emr openemrA SQL injection vulnerability in interface/usergroup/usergroup_admin.php in OpenEMR before 5.0.2...7.2 High
- microweberZip slip in Microweber7.2 High
chromium-browser-stableMageiaUpdated chromium-browser packages fix security vulnerabilityNo score- steghide project steghidesteghide 0.5.1 relies on a certain 32-bit seed value, which makes it easier for attackers to...7.5 High
- endian firewall communityEndian Firewall Community (aka EFW) 3.3.2 allows remote authenticated users to execute arbitrary...8.8 High
- atomisystems activepresenterActivePresenter 6.1.6 is affected by a memory corruption vulnerability that may result in a...9.8 Critical
- nagios xiNagios XI 5.7.2 is affected by a remote code execution (RCE) vulnerability. An authenticated user...8.8 High
- nagios xiNagiosXI 5.6.11 is affected by a remote code execution (RCE) vulnerability. An authenticated user...7.2 High
- centreonCentreon 19.10-3.el7 is affected by a SQL injection vulnerability, where an authorized user is...8.8 High
- gnome glib, broadcom brocade fabric operating system firmware, debian linux +7 more +9 moreAn issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function...7.5 High
- gnome glib, broadcom brocade fabric operating system firmware, debian linux +7 more +9 moreAn issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If...7.5 High
- freedesktop dbusA use-after-free flaw was found in D-Bus 1.12.20 when a system has multiple usernames sharing the...7.8 High
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 moreInsecure Direct Object Reference in GateManager WebUI can cause privilege escalation7.1 High
- microsoft qlibDeserialization of Untrusted Data6.6 Medium
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 moreA directory traversal vulnerability exists in the file upload function of the GateManager that...9.0 Critical
- ibm spectrum protect operations centerIBM Spectrum Protect Operations Center 7.1 and 8.1 is vulnerable to a denial of service, caused...4.8 Medium
- ibm spectrum protect operations centerIBM Spectrum Protect Operations Center 7.1 and 8.1could allow a remote attacker to execute...8.0 High
- ibm spectrum protect operations centerIBM Spectrum Protect Operations Center 7.1 and 8.1 could allow a remote attacker to bypass...4.2 Medium
- citsmartCITSmart before 9.1.2.23 allows LDAP Injection.9.8 Critical
- nagios xiNagios XI version xi-5.7.5 is affected by cross-site scripting (XSS). The vulnerability exists in...6.1 Medium
- lodash, netapp active iq unified manager, cloud manager +20 more +22 moreCommand Injection7.2 High
jsonrpc-quiccrates.iocrate has been renamed to `qjsonrpc`No scoresafe-apicrates.iocrate has been renamed to `sn_api`No score- lodash, oracle banking corporate lending process management, banking credit facilities process management +16 more +18 moreRegular Expression Denial of Service (ReDoS)5.3 Medium
- atlassian data center, jira, jira server +1 more +3 moreAffected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate...4.3 Medium
serenityOSS-FuzzHeap-buffer-overflow in void AK::__format_value<unsigned char>No scorekeystoneOSS-FuzzSegv on unknown address in llvm_ks::StringRef::operatorNo scoreserenityOSS-FuzzHeap-buffer-overflow in Crypto::UnsignedBigInteger::UnsignedBigIntegerNo score- atlassian data center, jira, jira server +1 more +3 moreAffected versions of Atlassian Jira Server and Data Center allow remote attackers to inject...4.8 Medium
- nagios xiNagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the...8.8 High
- nagios xiNagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the...8.8 High
- nagios xiNagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the...8.8 High
- python, debian linux, djangoproject django +12 more +14 moreWeb Cache Poisoning5.9 Medium
- webkit, webkitgtk +1 moreA code execution vulnerability exists in the AudioSourceProviderGStreamer functionality of Webkit...8.8 High
- atlassian data center, jira, jira server +1 more +3 moreAffected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers...5.3 Medium
- atlassian jira, jira server, jira data center +1 more +3 moreAffected versions of Atlassian Jira Server and Data Center allow remote attackers to inject...6.1 Medium
- atlassian jira, jira server, jira data center +1 more +3 moreAffected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers...5.3 Medium
- Show moreLoading…