CVEs published in February 2021
1,593 vulnerabilities, 240 critical, 19 exploited.
- lightcms project lightcmsA stored-self XSS exists in LightCMS v1.3.4, allowing an attacker to execute HTML or JavaScript...5.4 Medium
- coolkit ewelinkWeak encryption in the Quick Pairing mode in the eWeLink mobile application (Android application...4.6 Medium
dnsmasqUbuntudnsmasq regressionNo score- reorder project reorderOut of bounds write in reorder7.3 High
- reorder project reorderOut of bounds write in reorder7.3 High
MozillaFirefoxopenSUSESecurity update for MozillaFirefoxNo score- contec co., ltd. solarview compact, contec sv-cpt-mc310 firmware +1 moreMissing authentication for critical function in SolarView Compact SV-CPT-MC310 prior to Ver.6.5...7.5 High
- contec co., ltd. solarview compact, contec sv-cpt-mc310 firmware +1 moreDirectory traversal vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows...8.1 High
- contec co., ltd. solarview compact, contec sv-cpt-mc310 firmware +1 moreCross-site scripting vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an...6.1 Medium
- contec co., ltd. solarview compact, contec sv-cpt-mc310 firmware +1 moreSolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to upload...8.8 High
- contec co., ltd. solarview compact, contec sv-cpt-mc310 firmware +1 moreSolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to execute arbitrary OS...9.8 Critical
- contec co., ltd. solarview compact, contec sv-cpt-mc310 firmware +1 moreImproper access control vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows...5.4 Medium
- contec co., ltd. solarview compact, contec sv-cpt-mc310 firmware +1 moreExposure of information through directory listing in SolarView Compact SV-CPT-MC310 prior to Ver...4.3 Medium
openexrOSS-FuzzSegv on unknown address in Imf_2_5::copyIntoFrameBufferNo scorelibassOSS-FuzzHeap-buffer-overflow in fnv_32a_bufNo scoresudoersOSS-FuzzUNKNOWN WRITE in sudoers_lookup_checkNo scorematioOSS-FuzzHeap-buffer-overflow in H5MM_memcpyNo score- gnu glibc, debian linux, fedoraproject fedora +3 more +5 moreThe nameserver caching daemon (nscd) in the GNU C Library (aka glibc or libc6) 2.29 through 2.33,...2.5 Low
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7. Some...8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen trying to load a cross-origin resource in an audio/video context a decoding error may have...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreAs specified in the W3C Content Security Policy draft, when creating a violation report, "User...4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIf Content Security Policy blocked frame navigation, the full destination of a redirect served in...4.3 Medium
- nodejs node, node.js, fedoraproject fedora +11 more +13 moreNode.js bad7.5 High
- nodejs node, node.js, fedoraproject fedora +7 more +9 moreNode.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack...7.5 High
- apache batik, debian linux, fedoraproject fedora +19 more +21 moreServer-side request forgery (SSRF) in Apache Batik8.2 High
- brave, brave brave-browser +1 moreRegression in DNS leakage from Tor windows4.3 Medium
- linux kernel, redhat enterprise linux, openshift container platform +2 moreThere is a vulnerability in the linux kernel versions higher than 5.2 (if kernel compiled with...7.8 High
- red hat satelliteA flaw was found in Red Hat Satellite. The BMC interface exposes the password through the API to...5.3 Medium
- redhat 3scale api managementA flaw was found in Red Hat 3scale API Management Platform 2. The 3scale backend does not perform...6.5 Medium
- cacalabs libcaca, debian linux, fedoraproject fedora +2 moreA flaw was found in libcaca v0.99.beta19. A buffer overflow issue in caca_resize function in...7.8 High
- artifex mupdf, debian linux, fedoraproject fedora +2 moreA flaw was found in mupdf 1.18.0. Double free of object during linearization may lead to memory...5.5 Medium
- redhat openshift container platformA privilege escalation flaw was found in openshift4/ose-docker-builder. The build container runs with high privileges using a chrooted environment instead of runc. If an attacker can gain access to th…8.8 High
- matroska libebml, debian linux, fedoraproject fedora +2 moreA flaw was found in libebml before 1.4.2. A heap overflow bug exists in the implementation of...6.5 Medium
- jasper project jasper, fedoraproject fedora +1 moreA flaw was found in jasper before 2.0.25. A null pointer dereference in jp2_decode in jp2_dec.c...5.5 Medium
- rangerstudio directus** UNSUPPORTED WHEN ASSIGNED ** In Directus 8.x through 8.8.1, an attacker can learn sensitive...5.3 Medium
- rangerstudio directus** UNSUPPORTED WHEN ASSIGNED ** In Directus 8.x through 8.8.1, an attacker can switch to the...8.8 High
- rangerstudio directus** UNSUPPORTED WHEN ASSIGNED ** In Directus 8.x through 8.8.1, an attacker can see all users in...7.5 High
- rangerstudio directus** UNSUPPORTED WHEN ASSIGNED ** In Directus 8.x through 8.8.1, an attacker can discover whether a...5.3 Medium
- pivotal software spring security, spring security, oracle communications element manager +5 more +7 morePrivilege escalation in spring security8.8 High
- mbsync project mbsync, debian linux, fedoraproject extra packages for enterprise linux +1 more +3 moreA flaw was found in mbsync before v1.3.5 and v1.4.1. Validations of the mailbox names returned by...7.4 High
- red hat undertow, redhat jboss fuse, openshift application runtimes +2 moreDenial of service in Undertow7.5 High
- nextcloud deckNextcloud Deck before 1.0.2 suffers from an insecure direct object reference (IDOR) vulnerability...4.3 Medium
- ui unifi protect controllerUniFi Protect before v1.17.1 allows an attacker to use spoofed cameras to perform a denial-of...7.5 High
- softmaker planmaker 2021A specially crafted document can cause the document parser to copy data from a particular record...8.8 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA local authenticated buffer overflow vulnerability was discovered in Aruba ClearPass Policy...5.3 Medium
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA local authenticated escalation of privilege vulnerability was discovered in Aruba ClearPass...7.8 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy...7.2 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy...7.2 High
- mitreid connectAutobinding vulnerability in MITREid Connect9.1 Critical
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote unauthenticated stored cross-site scripting (XSS) vulnerability was discovered in Aruba...6.1 Medium
- Show moreLoading…