CVEs published in February 2021
1,593 vulnerabilities, 240 critical, 19 exploited.
- intel trace analyzer and collectorUncontrolled search path in the Intel(R) Trace Analyzer and Collector before version 2020 update...7.8 High
- hr portal project portal, soar cloud hr portal +1 moreSoar Cloud System Co., Ltd. HR Portal - Arbitrary Code Execution9.8 Critical
- hr portal project portal, soar cloud hr portal +1 moreSoar Cloud System Co., Ltd. HR Portal - SQL Injection7.5 High
- hr portal project portal, soar cloud hr portal +1 moreSoar Cloud System Co., Ltd. HR Portal - Broken Access Control5.4 Medium
- efm networks & multimedia iptime c200 ip camera, iptime c200 firmware +1 moreThe EFM ipTIME C200 IP Camera is affected by a Command Injection vulnerability in /login.cgi...8.0 High
- uprism curix, uprism.io curix 7.0 agent +1 moreUPRISM CURIX arbitrary code execution vulnerability8.0 High
- gerritHeap Memory exhaustion in Gerrit6.5 Medium
- tectonic xdv project xdvDuplicate Advisory: `Read` on uninitialized buffer may cause UB ('tectonic_xdv' crate)9.8 Critical
- telemetry project telemetryFree of uninitialized memory in telemetry9.8 Critical
- uu od project odOut of bounds read in uu_od7.3 High
- truetype project truetypeUse of Uninitialized Resource in truetype7.5 High
- changate property management systemChanGate EnterPrise Co., Ltd property management system - Broken Authentication8.8 High
- changate property management systemChanGate EnterPrise Co., Ltd property management system - Directory Traversal7.5 High
- changate property management systemChanGate EnterPrise Co., Ltd property management system - SQL Injection9.8 Critical
- mcafee web gateway, mcafee,llc mcafee web gateway (mwg) +1 morePrivilege escalation vulnerability in McAfee Web Gateway (MWG) UI9.0 Critical
- lightbend akka-httpHTTP Request Smuggling5.0 Medium
- qnap photo stationCross-site Scripting Vulnerability in Photo Station6.1 Medium
- qnap surveillance stationStack Buffer Overflow in Surveillance Station9.8 Critical
- soliton filezenFileZen (V3.0.0 to V4.2.7 and V5.0.0 to V5.0.2) allows a remote attacker with administrator...7.2 High
- nec platforms, ltd. calsos csdj, nec csdj-a firmware, csdj-b firmware +2 more +4 moreCalsos CSDJ (CSDJ-B 01.08.00 and earlier, CSDJ-H 01.08.00 and earlier, CSDJ-D 01.08.00 and...5.3 Medium
- linux kernel, fedoraproject fedora +1 moreAn issue was discovered in the Linux kernel 4.18 through 5.10.16, as used by Xen. The backend...7.8 High
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen 4.9 through 4.14.x. On Arm, a guest is allowed to control whether...5.5 Medium
openthreadOSS-FuzzUNKNOWN READ in ot::Cli::Interpreter::OutputFormatVNo scorec-blosc2OSS-FuzzSegv on unknown address in blosc_read_headerNo score- debian linux, linux kernel, fedoraproject fedora +5 more +7 moreAn issue was discovered in the Linux kernel 3.2 through 5.10.16, as used by Xen. Grant mapping...5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +2 moreAn issue was discovered in the Linux kernel 2.6.39 through 5.10.16, as used in Xen. Block, net,...5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +2 moreAn issue was discovered in the Linux kernel 3.11 through 5.10.16, as used by Xen. To service...7.8 High
- gnome gdk-pixbuf, fedoraproject fedora +1 moreA flaw was found in gdk-pixbuf in versions before 2.42.0. An integer wraparound leading to an out...8.8 High
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in the Linux kernel in versions before 5.4.92 in the BPF protocol. This flaw...3.3 Low
- isc bind, debian linux, fedoraproject fedora +5 more +7 moreA vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack8.1 High
- intel graphics driversNull pointer reference in some Intel(R) Graphics Drivers for Windows* before version 26.20.100...5.5 Medium
- intel graphics driversImproper input validation in some Intel(R) Graphics Drivers for Windows* before version 26.20.100...5.5 Medium
- intel graphics driversInteger overflow in the firmware for some Intel(R) Graphics Drivers for Windows * before version...7.8 High
- accellion ftaAccellion FTA 9_12_370 and earlier is affected by OS command execution via a crafted POST request...9.8 Critical
- accellion ftaAccellion FTA 9_12_411 and earlier is affected by SSRF via a crafted POST request to...9.8 Critical
- accellion ftaAccellion FTA 9_12_411 and earlier is affected by OS command execution via a local web service...7.8 High
- accellion ftaAccellion FTA 9_12_370 and earlier is affected by SQL injection via a crafted Host header in a...9.8 Critical
- deepnetsecurity dualshieldDualShield 5.9.8.0821 allows username enumeration on its login form. A valid username results in...5.3 Medium
- dekart private diskIn Dekart Private Disk 2.15, invalid use of the Type3 user buffer for IOCTL codes using...5.5 Medium
- jsdom project jsdomWithdrawn Advisory: Insufficient Granularity of Access Control in JSDom5.6 Medium
- racom m\!dge firmwareRacom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to arbitrarily access...7.2 High
- racom m\!dge firmwareRacom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site...4.8 Medium
- racom m\!dge firmwareRacom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site...4.8 Medium
- racom m\!dge firmwareRacom's MIDGE Firmware 4.4.40.105 contains an issue that allows for privilege escalation via...7.8 High
- racom m\!dge firmwareRacom's MIDGE Firmware 4.4.40.105 contains an issue that allows users to escape the provided...8.8 High
- racom m\!dge firmwareRacom's MIDGE Firmware 4.4.40.105 contains an issue that allows for cross-site request forgeries.8.8 High
- racom m\!dge firmwareRacom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site...4.8 Medium
- racom m\!dge firmwareRacom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site...4.8 Medium
- racom m\!dge firmwareRacom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to view sensitive...5.3 Medium
- zscaler client connectorThe Zscaler Client Connector prior to 3.1.0 did not sufficiently validate RPC clients, which...7.8 High
- Show moreLoading…