CVEs published in February 2021
1,593 vulnerabilities, 240 critical, 19 exploited.
- ge ifix, general electric (ge) hmi/scada ifix +1 moreHMI/SCADA iFIX (Versions 6.1 and prior) allows a local authenticated user to modify system-wide...5.5 Medium
- ge ifix, general electric (ge) hmi/scada ifix +1 moreHMI/SCADA iFIX (Versions 6.1 and prior) allows a local authenticated user to modify system-wide...5.5 Medium
- pimcore, pimcore pimcore/pimcore +1 moreLocal File Inclusion7.1 High
- three project threeRegular Expression Denial of Service (ReDoS)7.5 High
- async-git project async-gitCommand Injection9.1 Critical
- endalia selection portalIn Endalia Selection Portal before 4.205.0, an Insecure Direct Object Reference (IDOR) allows any...6.5 Medium
- dji mavic 2 firmwareA command injection issue in dji_sys in DJI Mavic 2 Remote Controller before firmware version 01...7.8 High
- through project throughDouble free in through9.8 Critical
- scratchpad project scratchpadmove_elements can double-free objects on panic9.8 Critical
- doctor appointment system project appointment systemSQL injection in the expertise parameter in search_result.php in Doctor Appointment System v1.0...6.5 Medium
- containous traefikTraefik before 2.4.5 allows the loading of IFRAME elements from other domains.5.3 Medium
uwebsocketsOSS-FuzzHeap-use-after-free in us_socket_closeNo scoresudoersOSS-FuzzUNKNOWN WRITE in sudo_user_freeNo score- tesla solarcity solar monitoring gatewayTesla SolarCity Solar Monitoring Gateway through 5.46.43 has a "Use of Hard-coded Credentials"...8.8 High
- digi connectport x2e firmwareDigi ConnectPort X2e before 3.2.30.6 allows an attacker to escalate privileges from the python...7.8 High
- denx u-bootThe boot loader in Das U-Boot before 2021.04-rc2 mishandles use of unit addresses in a FIT.7.8 High
- denx u-bootThe boot loader in Das U-Boot before 2021.04-rc2 mishandles a modified FIT.7.8 High
- vertigis webofficeVertiGIS WebOffice 10.7 SP1 before patch20210202 and 10.8 SP1 before patch20210207 allows...7.5 High
- gramaddictGramAddict bot uses dependency with reverse tcp backdoor8.8 High
- avahi, debian linux +1 moreavahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed as root via /etc...7.8 High
- canarymail canary mail, libmailcore mailcore2 +1 morecore/imap/MCIMAPSession.cpp in Canary Mail before 3.22 has Missing SSL Certificate Validation for...7.4 High
- boltcms boltPath traversal in bolt/core7.5 High
- agora video software development kitCleartext transmission of sensitive information in Agora Video SDK prior to 3.1 allows a remote...5.9 Medium
- opennms horizon, meridian, newts +2 moreOpenNMS Horizon RCE via JEXL2 expression8.8 High
- advantech webaccess\/scadaAn exploitable local privilege elevation vulnerability exists in the file system permissions of...8.8 High
- advantech webaccess\/scadaAn exploitable local privilege elevation vulnerability exists in the file system permissions of...8.8 High
- advantech webaccess\/scadaAn exploitable local privilege elevation vulnerability exists in the file system permissions of...8.8 High
- advantech webaccess\/scadaAn exploitable local privilege elevation vulnerability exists in the file system permissions of...8.8 High
- advantech webaccess\/scadaA local file inclusion vulnerability exists in the installation functionality of Advantech...7.7 High
- cisco webex meetingsCisco Webex Meetings Cross-Site Scripting Vulnerability6.1 Medium
- cisco anyconnect secure mobility clientCisco AnyConnect Secure Mobility Client for Windows with VPN Posture (HostScan) Module DLL Hijacking Vulnerability7.8 High
- cisco webex productivity tools, webex meetings, webex meetings server +2 moreCisco Webex Meetings Desktop App and Webex Productivity Tools for Windows Shared Memory Information Disclosure Vulnerability5.5 Medium
- cisco staros, asr 5000 series software +1 moreCisco StarOS Denial of Service Vulnerability5.3 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Sensitive Information Disclosure Vulnerabilities6.5 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Sensitive Information Disclosure Vulnerabilities6.5 Medium
- irfanview wpgThe WPG plugin before 3.1.0.0 for IrfanView 4.57 has a user-mode write access violation starting...7.5 High
- irfanview wpgThe WPG plugin before 3.1.0.0 for IrfanView 4.57 has a Read Access Violation on Control Flow...9.8 Critical
- phpgurukul car rental portalPHPGurukul Car Rental Project version 2.0 suffers from a remote shell upload vulnerability in...9.8 Critical
- janobe baby care systemAn arbitrary file upload vulnerability has been identified in posts.php in Baby Care System 1.0....7.2 High
- janobe baby care systemBaby Care System v1.0 is vulnerable to SQL injection via the 'id' parameter on the...9.8 Critical
- online book store project book storeThe id parameter in detail.php of Online Book Store v1.0 is vulnerable to union-based blind SQL...7.5 High
- seat-reservation-system project seat-reservation-systemSeat-Reservation-System 1.0 has a SQL injection vulnerability in index.php in the id and file...7.5 High
- 74cmsIn 74cms version 5.0.1, there is a remote code execution vulnerability in /Application/Admin...9.8 Critical
- the wireshark foundation wireshark, fedoraproject fedora, oracle zfs storage appliance +2 moreMemory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet...3.7 Low
- the wireshark foundation wireshark, fedoraproject fedora, oracle zfs storage appliance +2 moreCrash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet...3.7 Low
- apache airflowApache Airflow: Lineage API endpoint for Experimental API missed authentication check5.3 Medium
- apache airflowCWE-284 Improper Access Control on Configurations Endpoint for the Stable API6.5 Medium
- intel graphics driversUntrusted pointer dereference in some Intel(R) Graphics Drivers before versions 15.33.51.5146, 15...5.5 Medium
- intel ethernet controller i210 firmwareImproper access control in firmware for the Intel(R) Ethernet I210 Controller series of network...4.4 Medium
- intel ethernet controller i210 firmwareImproper default permissions in the firmware for the Intel(R) Ethernet I210 Controller series of...5.5 Medium
- Show moreLoading…