CVEs published in February 2021
1,593 vulnerabilities, 240 critical, 19 exploited.
- luxion keyshot, keyshot network rendering, keyshot viewer +3 more +5 moreWhen loading a specially crafted file, Luxion KeyShot versions prior to 10.1, Luxion KeyShot...7.8 High
- redhat openshift installer, red hat openshift/installer +1 moreA flaw was found in the OpenShift Installer before version v0.9.0-master.0.20210125200451-95101da940b0. During installation of OpenShift Container Platform 4 clusters, bootstrap nodes are provisioned…8.1 High
- jasper project jasper, fedoraproject fedora +1 moreA flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2_decode...7.1 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy...7.2 High
- red hat undertow, netapp active iq unified manager, oncommand workflow automation +2 moreHTTP request smuggling in Undertow4.8 Medium
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote reflected cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass...6.1 Medium
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote authenticated command Injection vulnerability was discovered in Aruba ClearPass Policy...7.2 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy...7.2 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote authenticated SQL Injection vulnerabilitiy was discovered in Aruba ClearPass Policy...6.5 Medium
torSUSESecurity update for torNo score- snowsoftware snow inventory agentSnow Inventory Agent through 6.7.0 on Windows uses CPUID to report on processor types and...7.8 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote authenticated SQL Injection vulnerabilitiy was discovered in Aruba ClearPass Policy...6.5 Medium
- fastadminfastadmin V1.0.0.20200506_beta contains a cross-site scripting (XSS) vulnerability which may...5.4 Medium
- linux kernel, netapp cloud backup +1 moreA use-after-free flaw was found in the io_uring in Linux kernel, where a local attacker with a...7.8 High
- we-con levistudiouMultiple buffer overflow vulnerabilities exist when LeviStudioU (Version 2019-09-21 and prior)...7.8 High
- advantech webaccess\/scadaThe WADashboard component of WebAccess/SCADA Versions 9.0 and prior may allow an attacker to...8.8 High
- vmware spring cloud netflix zuulIncorrect Authorization in Spring Cloud Netflix Zuul5.3 Medium
- efm networks iptime nas, iptime nas-i firmware, nas-ii firmware +7 more +9 moreThe ipTIME NAS product allows an arbitrary file upload vulnerability in the Manage Bulletins...7.4 High
- collabora productivity online, the document foundation libreoffice online +1 more"loolforkit" is a privileged program that is supposed to be run by a special, non-privileged "lool" user. Before doing anything else "loolforkit" checks, if it was invoked by the "lool" user, and refu…7.8 High
- ibm planning analyticsIBM Planning Analytics 2.0 could allow a remote authenticated attacker to obtain information...4.3 Medium
- geojson2kml project geojson2kmlCommand Injection7.3 High
- polarisoffice polaris officePolaris Office v9.102.66 is affected by a divide-by-zero error in PolarisOffice.exe and EngineDLL...5.5 Medium
- kaco-newenergy xp100u firmwareKACO New Energy XP100U Up to XP-JAVA 2.0 is affected by incorrect access control. Credentials...7.5 High
- keycloak, redhat louketo proxy +1 moreKeycloak Gatekeeper vulnerable to bypass on using lower case HTTP headers7.3 High
pcpSUSESecurity update for pcpNo score- google rendertronSSRF in Rendertron3.5 Low
- nanohttpdNanoHTTPD Cross-site Scripting vulnerability6.1 Medium
- libxlsAn issue was discovered in libxls before and including 1.6.1 when reading Microsoft Excel files....5.5 Medium
- adobe acrobat, acrobat reader dc, acrobat reader +1 more +3 morePDF Injection BlackHat Talk7.1 High
- autodesk luxion keyshot, luxion keyshot, keyshot network rendering +4 more +6 moreLuxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion...7.8 High
- autodesk luxion keyshot, luxion keyshot, keyshot network rendering +4 more +6 moreLuxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion...7.8 High
- autodesk luxion keyshot, luxion keyshot, keyshot network rendering +4 more +6 moreLuxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion...7.8 High
- autodesk luxion keyshot, luxion keyshot, keyshot network rendering +4 more +6 moreLuxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion...7.8 High
- json-smart project json-smart-v1, json-smart-v2, oracle communications cloud native core policy +4 more +6 moreImproper Check for Unusual or Exceptional Conditions in json-smart5.9 Medium
- getgist chatboxChatbox is affected by cross-site scripting (XSS). An attacker has to upload any XSS payload with...6.1 Medium
c-blosc2OSS-FuzzUNKNOWN READ in blosc_dNo scoreuwebsocketsOSS-FuzzHeap-use-after-free in ofats::any_detail::handler_traits<void>::handler_base<ofats::any_detail::handlerNo scoreopenthreadOSS-FuzzStack-buffer-overflow in ot::Cli::Interpreter::OutputFormatVNo score- qemu, debian linux, fedoraproject fedora +5 more +7 moreAn infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while...6.5 Medium
- cira canadian shieldThe CIRA Canadian Shield app before 4.0.13 for iOS lacks SSL Certificate Validation.5.9 Medium
- keybaseKeybase Desktop Client before 5.6.0 on Windows and macOS, and before 5.6.1 on Linux, allows an attacker to obtain potentially sensitive media (such as private pictures) in the Cache and uploadtemps di…5.5 Medium
- atlassian gadgets, atlassian-gadgets +1 moreThe MessageBundleWhiteList class of atlassian-gadgets before version 4.2.37, from version 4.3.0...5.0 Medium
- hashgraph guardian, nozomi networks cmc, nozominetworks central management control +2 moreAuthenticated command injection when changing date settings or hostname in Guardian/CMC before 20.0.7.48.6 High
- hashgraph guardian, nozomi networks cmc, nozominetworks central management control +2 moreAuthenticated command path traversal on timezone settings in Guardian/CMC before 20.0.7.48.6 High
- mybbMyBB before 1.8.25 allows stored XSS via nested [email] tags with MyCode (aka BBCode).5.4 Medium
- genymobile genymotion desktop** DISPUTED ** Genymotion Desktop through 3.2.0 leaks the host's clipboard data to the Android...5.3 Medium
- shinobi proAn issue was discovered in Shinobi through ocean version 1. lib/auth.js has Incorrect Access...9.8 Critical
- tasks"Tasks" application version before 9.7.3 is affected by insecure permissions. The...6.8 Medium
- weberpIn webERP 4.15, the ManualContents.php file allows users to specify the "Language" parameter,...6.5 Medium
qemuUbuntuqemu regressionNo score- Show moreLoading…