CVEs published in February 2021
1,593 vulnerabilities, 240 critical, 19 exploited.
- owncloudownCloud Server before 10.3.0 allows an attacker, who has received non-administrative access to a...3.5 Low
- owncloud serverownCloud Server 10.x before 10.3.1 allows an attacker, who has one outgoing share from a victim,...6.8 Medium
- owncloudAn issue was discovered in ownCloud before 10.4. Because of an SSRF issue (via the apps...8.3 High
- owncloudAn issue was discovered in ownCloud before 10.4. An attacker can bypass authentication on a...5.9 Medium
- osc open ondemandOpen OnDemand before 1.5.7 and 1.6.x before 1.6.22 allows CSRF.8.8 High
- checkmkCheckmk before 1.6.0p17 allows local users to obtain SYSTEM privileges via a Trojan horse shell...7.8 High
- amaze file manager project file managerAmaze File Manager before 3.5.1 allows attackers to obtain root privileges via shell...7.8 High
- chamiloChamilo 1.11.14 allows XSS via a main/calendar/agenda_list.php?type= URI.6.1 Medium
- scrapbox-parser project scrapbox-parserRegular expression Denial of Service in @progfay/scrapbox-parser7.5 High
- asus askey rtf8115vw firmwareAskey RTF8115VW BR_SV_g11.11_RTF_TEF001_V6.54_V014 devices allow cgi-bin/te_acceso_router.cgi...6.1 Medium
- asus askey rtf8115vw firmwareAskey RTF8115VW BR_SV_g11.11_RTF_TEF001_V6.54_V014 devices allow injection of a Host HTTP header.6.1 Medium
- alleghenycreative openrepeaterOpenRepeater (ORP) before 2.2 allows unauthenticated command injection via shell metacharacters...9.8 Critical
tmuxOSS-FuzzHeap-buffer-overflow in input_osc_parse_colourNo scoresystemdOSS-FuzzHeap-double-free in mfreeNo scoreselinuxOSS-FuzzHeap-use-after-free in __cil_verify_classpermsNo score- google chrome, fedoraproject fedora, microsoft edge +1 more +3 moreUse after free in Web Sockets in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote...8.8 High
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in V8 in Google Chrome prior to 88.0.4324.182 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in Tab Strip in Google Chrome on Windows prior to 88.0.4324.182 allowed a...9.6 Critical
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in Tab Strip in Google Chrome prior to 88.0.4324.182 allowed a remote...9.6 Critical
- google chrome, fedoraproject fedora +1 moreStack buffer overflow in GPU Process in Google Chrome on Linux prior to 88.0.4324.182 allowed a...8.8 High
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in Media in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Payments in Google Chrome prior to 88.0.4324.182 allowed a remote attacker to...9.6 Critical
- google chrome, fedoraproject fedora +1 moreUse after free in Downloads in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote...9.6 Critical
- google chrome, fedoraproject fedora +1 moreStack buffer overflow in Data Transfer in Google Chrome on Linux prior to 88.0.4324.182 allowed a...8.8 High
- aida64Buffer overflow in FinalWire Ltd AIDA64 Engineer 6.00.5100 allows attackers to execute arbitrary...7.8 High
- netis-systems wf2411 firmware, wf2780 firmware +1 moreNetis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter Injection into the...9.8 Critical
- digium asterisk, certified asterisk +1 moreIncorrect access controls in res_srtp.c in Sangoma Asterisk 13.38.1, 16.16.0, 17.9.1, and 18.2.0...7.5 High
- digium asteriskA buffer overflow in res_pjsip_diversion.c in Sangoma Asterisk versions 13.38.1, 16.15.1, 17.9.1,...6.5 Medium
- digium asterisk, certified asterisk +1 moreAn issue was discovered in res_pjsip_session.c in Digium Asterisk through 13.38.1; 14.x, 15.x,...5.9 Medium
- digium asterisk, certified asterisk +1 moreAn issue was discovered in Sangoma Asterisk 16.x before 16.16.1, 17.x before 17.9.2, and 18.x...7.5 High
- pi-holePi-hole 5.0, 5.1, and 5.1.1 allows XSS via the Options header to the admin/ URI. A remote user is...5.4 Medium
- pi-holePi-hole 5.0, 5.1, and 5.1.1 allows Session Fixation. The application does not generate a new...5.4 Medium
- kollectapp kollectKollectApps before 4.8.16c is affected by insecure Java deserialization, leading to Remote Code...9.8 Critical
- frendi frendicaFriendica 2021.01 allows SSRF via parse_url?binurl= for DNS lookups or HTTP requests to arbitrary...10.0 Critical
- apereo opencastRemoving access may not effect published series5.4 Medium
- brikcss mergePrototype Pollution7.3 High
- prismjs prismRegular Expression Denial of Service (ReDoS)7.5 High
- reportlab, fedoraproject fedora +1 moreServer-side Request Forgery (SSRF)6.5 Medium
- fasterxml jackson-dataformats-binary, oracle weblogic server, quarkus +2 moreDenial of Service (DoS)7.5 High
- atlassian jira server for slackAn endpoint in Atlassian Jira Server for Slack plugin from version 0.0.3 before version 2.0.15...8.8 High
- atlassian bitbucket, bitbucket server, bitbucket data center +2 moreThe Microsoft Windows Installer for Atlassian Bitbucket Server and Data Center before version 6...7.8 High
- ibm maximo for civil infrastructureIBM Maximo for Civil Infrastructure 7.6.2 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm maximo for civil infrastructureIBM Maximo for Civil Infrastructure 7.6.2 could allow a user to obtain sensitive information due...6.5 Medium
- ibm maximo for civil infrastructureIBM Maximo for Civil Infrastructure 7.6.2 is vulnerable to cross-site scripting. This...6.1 Medium
- ibm maximo for civil infrastructureIBM Maximo for Civil Infrastructure 7.6.2 includes executable functionality (such as a library)...6.3 Medium
- ibm websphere application serverIBM WebSphere Application Server 8.0, 8.5, and 9.0 could allow a remote attacker to traverse...5.9 Medium
- ibm jazz reporting serviceIBM Jazz Reporting Service 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting....5.4 Medium
- atlassian data center, jira data center, jira server +2 moreThe CachingResourceDownloadRewriteRule class in Jira Server and Jira Data Center before version 8...5.3 Medium
- atlassian confluence data center, confluence server +1 moreThe ConfluenceResourceDownloadRewriteRule class in Confluence Server and Confluence Data Center...5.3 Medium
- xen, debian linux +1 moreAn issue was discovered in Xen through 4.11.x, allowing x86 Intel HVM guest OS users to achieve...7.8 High
- Show moreLoading…