CVEs published in February 2021
1,593 vulnerabilities, 240 critical, 19 exploited.
- uri.js project uri.jsURIjs Hostname spoofing via backslashes in URL7.5 High
- eyesofnetworkThe module admin_ITSM in EyesOfNetwork 5.3-10 allows remote authenticated users to upload...8.8 High
- eyesofnetworkEyesOfNetwork 5.3-10 uses an integer of between 8 and 10 digits for the session ID, which might...9.8 Critical
- comrak project comrakCross site scripting in comrak6.1 Medium
- openenergymonitor emoncmsModules/input/Views/schedule.php in Emoncms through 10.2.7 allows XSS via the node parameter.6.1 Medium
- No product listedftplib should not use the host from the PASV responseNo score
- url-parse project url-parsePath traversal in url-parse5.3 Medium
toropenSUSESecurity update for torNo score- apache livy, apache software foundation livy (incubating) +1 moreApache Livy (Incubating) is vulnerable to cross site scripting5.4 Medium
wiresharkOSS-FuzzHeap-buffer-overflow in dissect_vjc_uncompNo scorec-blosc2OSS-FuzzHeap-use-after-free in frame_get_lazychunkNo scoreselinuxOSS-FuzzHeap-use-after-free in __cil_verify_classpermsNo score- facebook zstandardBeginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the...4.7 Medium
- png-img project png-imgInteger Overflow in png-img8.8 High
- smartstore smartstorenetAn issue was discovered in SmartStoreNET before 4.1.0. Lack of Cross Site Request Forgery (CSRF) protection may lead to elevation of privileges (e.g., /admin/customer/create to create an admin account…8.8 High
- mailtrainMailtrain through 1.24.1 allows SQL Injection in statsClickedSubscribersByColumn in lib/models...8.8 High
- tweetstream project tweetstreamImproper Certificate Validation in TweetStream5.9 Medium
- twitter-stream project twitter-streamImproper Certificate Validation in twitter-stream5.9 Medium
- atlassian alfresco enterprise content managementAn issue was discovered in Alfresco Enterprise Content Management (ECM) before 6.2.1. A user with...8.8 High
- hubspot jinjavaUnauthorized access to Class instance in Jinjava6.5 Medium
- visualware myconnection serverIn Visualware MyConnection Server before 11.0b build 5382, each published report is not...7.5 High
- mitsubishi electric corporation cpu module logging configuration tool, cw configurator, data transfer +47 more +49 moreImproper handling of length parameter inconsistency vulnerability in Mitsubishi Electric FA...7.5 High
- mitsubishi electric corporation cpu module logging configuration tool, cw configurator, data transfer +47 more +49 moreHeap-based buffer overflow vulnerability in Mitsubishi Electric FA Engineering Software (C...7.5 High
- linux kernelA NULL pointer dereference flaw in kernel versions prior to 5.11 may be seen if...6.7 Medium
- digium asterisk, certified asterisk +1 moreA stack-based buffer overflow in res_rtp_asterisk.c in Sangoma Asterisk before 16.16.1, 17.x...6.5 Medium
- telegramThe Terminate Session feature in the Telegram application through 7.2.1 for Android, and through...5.3 Medium
- zohocorp manageengine adselfservice plusA Server-side request forgery (SSRF) vulnerability in the ProductConfig servlet in Zoho...6.1 Medium
- yeastar neogate tg400 firmwareYeastar NeoGate TG400 91.3.0.3 devices are affected by Directory Traversal. An authenticated user...6.5 Medium
- johnsoncontrols metasys reporting engine, johnson controls metasys reporting engine (mre) web services versions 2.0 and 2.1 +1 moreMetasys Reporting Engine (MRE) Web Services - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')7.5 High
- fuji electric v-server lite, fujielectric v-server +1 moreFuji Electric V-Server Lite7.8 High
mumbleSUSESecurity update for mumbleNo score- sytech xlreporterAn exploitable local privilege elevation vulnerability exists in the file system permissions of...8.8 High
- docsifyjs docsifyCross-site Scripting (XSS)8.6 High
- dell cyber recovery, emc powerprotect cyber recovery +1 moreDell EMC PowerProtect Cyber Recovery, version 19.7.0.1, contains an Information Disclosure...7.9 High
- intel bmc firmwareBuffer overflow in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute...6.7 Medium
- schneider-electric powerlogic ion7400 firmware, powerlogic ion7650 firmware, powerlogic ion8300 firmware +7 more +9 moreA CWE-352: Cross-Site Request Forgery vulnerability exists in PowerLogic ION7400, ION7650,...4.5 Medium
- schneider-electric powerlogic ion7400 firmware, powerlogic ion7650 firmware, powerlogic ion8300 firmware +7 more +9 moreA CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic...7.5 High
- schneider-electric powerlogic ion7300 firmware, powerlogic ion7400 firmware, powerlogic ion7650 firmware +9 more +11 moreA CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic...7.5 High
- webware webdesktopSSRF in the document conversion component of Webware Webdesktop 5.1.15 allows an attacker to read...6.5 Medium
- bloodhound project bloodhoundcomponents/Modals/HelpTexts/GenericAll/GenericAll.jsx in Bloodhound <= 4.0.1 allows remote...9.6 Critical
- stackvector project stackvectorOut of bounds write in stackvector7.3 High
- slice-deque project slice-dequeDouble free in slice-deque7.5 High
- toodee project toodeeUninitialized memory access in toodee7.5 High
- toodee project toodeeDouble free in toodee9.8 Critical
- qemu, debian linux, fedoraproject fedora +2 moreAn integer overflow issue was found in the vmxnet3 NIC emulator of the QEMU for versions up to v5...3.2 Low
- apache myfaces, apache software foundation myfaces core, netapp oncommand insight +2 moreCross-Site Request Forgery (CSRF) vulnerability in Apache MyFaces7.5 High
- microsoft modernflowModernFlow before 1.3.00.208 does not constrain web-page access to members of a security group,...4.3 Medium
- owncloud clientThe ownCloud application before 2.15 for Android allows attackers to use adb to include a PIN...3.9 Low
- owncloud file firewallThe File Firewall before 2.8.0 for ownCloud Server does not properly enforce file-type...7.5 High
- owncloud clientIn the ownCloud application before 2.15 for Android, the lock protection mechanism can be...6.1 Medium
- Show moreLoading…