CVEs published in February 2021
1,593 vulnerabilities, 240 critical, 19 exploited.
- opcfoundation ua-.netstandardImproper Certificate Validation in OPCFoundation.NetStandard.Opc.Ua.Core4.4 Medium
- blackcat-cms blackcat cmsThe admin panel in BlackCat CMS 1.3.6 allows stored XSS (by an admin) via the Display Name field...4.8 Medium
- openssl, apple ipados, iphone os +20 more +22 moreNull pointer deref in X509_issuer_and_serial_hash()5.9 Medium
- openssl, debian linux, fujitsu m10-1 firmware +18 more +20 moreInteger overflow in CipherUpdate7.5 High
- openssl, oracle business intelligence, enterprise manager for storage management +5 more +7 moreIncorrect SSLv2 rollback protection3.7 Low
- npm package system information library for node.js, sebhildebrandt systeminformation, apache cordova +2 moreCommand Injection Vulnerability7.1 High
- hilscher ethernet/ip core v2, ethernet\/ip adapter firmware, pepper+fuchs pcv/pxv/pgv +8 more +10 moreHilscher: EtherNet/IP stack crash for specific CIP service8.6 High
- hilscher profinet io device, profinet io device firmware, pepper+fuchs ohv +28 more +30 moreHilscher: Denial of Service vulnerability in PROFINET IO Device7.5 High
- helmholz myrex24, myrex24.virtual, mbconnectline mbconnect24 +1 more +3 moreSSRF in variuos products of MB connect line and Helmholz5.3 Medium
- secomea sitemanager, sitemanager 1129 firmware, sitemanager 1139 firmware +7 more +9 moreReflected Cross Site Scripting5.4 Medium
- mbconnectline mbconnect24, mymbconnect24 +1 moreAn issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. The login...9.8 Critical
- mbconnectline mbconnect24, mymbconnect24 +1 moreAn issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. The...7.8 High
- secomea sitemanager embedded (sm-e), sitemanager embedded +1 moreDOM-based Javascript injection5.4 Medium
- helmholz myrex24, myrex24.virtual, mbconnectline mbconnect24 +1 more +3 moreSensitive Information Exposure in products of MB connect line and Helmholz4.3 Medium
- mbconnectline mbconnect24, mymbconnect24 +1 moreAn issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is...4.3 Medium
- helmholz myrex24, myrex24.virtual, mbconnectline mbconnect24 +1 more +3 moreLocal file inclusion vulnerability in products of MB connect line and Helmholz5.3 Medium
- mbconnectline mbconnect24, mymbconnect24 +1 moreAn issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is...6.1 Medium
- mbconnectline mbconnect24, mymbconnect24 +1 moreAn issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is...7.5 High
- mbconnectline mbconnect24, mymbconnect24 +1 moreAn issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is...5.4 Medium
- mbconnectline mbconnect24, mymbconnect24 +1 moreAn issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is...6.1 Medium
- helmholz myrex24, myrex24.virtual, mbconnectline mbconnect24 +1 more +3 moreSSRF in products of MB connect line and Helmholz7.5 High
- helmholz myrex24, myrex24.virtual, mbconnectline mbconnect24 +1 more +3 moreForeced Browsing vulnerability in products of MB connect line and Helmholz5.3 Medium
- helmholz myrex24, myrex24.virtual, mbconnectline mbconnect24 +1 more +3 moreImproper Access Validation in products of MB connect line and Helmholz6.5 Medium
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 moreCSV Formula Injection possible due to improper fields escaping in GateManager3.5 Low
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 moreHost Header Injection allowing web cache poisoning attacks5.3 Medium
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 moreMissing HtppOnly and Secure flags5.3 Medium
- testes-codigo testes de codigoMobile application "Testes de Codigo" 11.4 and prior allows an attacker to gain access to the...9.8 Critical
- pelco digital sentry serverThe RTSPLive555.dll ActiveX control in Pelco Digital Sentry Server 7.18.72.11464 has a...8.8 High
- nfstreamNFStream Local Denial of Service (DoS)5.5 Medium
- sdg pnpscadaPNPSCADA 2.200816204020 allows SQL injection via parameter 'interf' in /browse.jsp. Exploiting...9.8 Critical
mumbleopenSUSESecurity update for mumbleNo scoredbxtoolAlmaLinuxdbxtool bug fix and enhancement updateNo scoreNetworkManager-libnm-develAlmaLinuxNetworkManager bug fix and enhancement updateNo scorekmod-develAlmaLinuxkmod bug fix and enhancement updateNo scoreglibc-benchtestsAlmaLinux,glibc-nss-develAlmaLinux,glibc-staticAlmaLinux +1 more +3 moreglibc bug fix and enhancement updateNo scorelibsmbclient-develAlmaLinux,libwbclient-develAlmaLinux +1 moresamba bug fix and enhancement updateNo scoredevice-mapper-develAlmaLinux,device-mapper-event-develAlmaLinux,lvm2-develAlmaLinux +2 morelvm2 bug fix and enhancement updateNo scorepcpAlmaLinux,pcp-confAlmaLinux,pcp-libsAlmaLinux +2 more +4 morepcp bug fix and enhancement updateNo scorecustodiaAlmaLinux,python3-custodiaAlmaLinux,python3-jwcryptoAlmaLinux +5 more +7 moreidm:DL1 bug fix and enhancement updateNo scoreskopeoAlmaLinux,cockpit-podmanAlmaLinux,conmonAlmaLinux +12 more +14 morecontainer-tools:2.0 bug fix updateNo scorehivexAlmaLinux,hivex-develAlmaLinux,libguestfs-winsupportAlmaLinux +68 more +70 morevirt:rhel bug fix updateNo scorefence-agents-aliyunAlmaLinux,fence-agents-awsAlmaLinux,fence-agents-azure-armAlmaLinux +1 more +3 morefence-agents bug fix and enhancement updateNo scorelibblockdev-crypto-develAlmaLinux,libblockdev-develAlmaLinux,libblockdev-fs-develAlmaLinux +7 more +9 morelibblockdev bug fix and enhancement updateNo scoreresource-agentsAlmaLinux,resource-agents-aliyunAlmaLinux,resource-agents-gcpAlmaLinux +2 moreresource-agents bug fix and enhancement updateNo scorespirv-tools-develAlmaLinuxvulkan bug fix and enhancement updateNo score- mutare voiceAn issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8. On the admin portal of the web...4.9 Medium
- mutare voiceAn issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8. The web application suffers from...9.8 Critical
- mutare voiceAn issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8. On the admin portal of the web...4.9 Medium
- mutare voiceAn issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8. getfile.asp allows...9.8 Critical
- hestiacp control panelHestia Control Panel through 1.3.3, in a shared-hosting environment, sometimes allows remote...5.4 Medium
- Show moreLoading…