CVEs published in February 2021
1,593 vulnerabilities, 240 critical, 19 exploited.
- masterlabA server-side request forgery (SSRF) vulnerability in Upgrade.php of gopeak masterlab 2.1.5, via...9.8 Critical
- triconsole datepicker calendarTriconsole Datepicker Calendar <3.77 is affected by cross-site scripting (XSS) in calendar_form...6.1 Medium
- newtarget custom global variablesStored cross-site scripting (XSS) in form field in robust.systems product Custom Global Variables...5.4 Medium
- nagios xiNagios XI below 5.7 is affected by code injection in the /nagiosxi/admin/graphtemplates.php...7.2 High
- adobe bridgeAdobe Bridge Font Parsing Out-Of-Bounds Write Arbitrary Code Execution Vulnerability7.8 High
- adobe bridgeAdobe Bridge Font Parsing Out-Of-Bounds Write Arbitrary Code Execution Vulnerability7.8 High
- magento upward connector, adobe magento commerce, magento upward php +2 moreMagento UPWARD-php Path traversal vulnerability via UPWARD Connector4.9 Medium
- imagemagick, debian linux +1 moreA flaw was found in ImageMagick in coders/jp2.c. An attacker who submits a crafted file that is...5.5 Medium
- imagemagick, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in ImageMagick in MagickCore/resample.c. An attacker who submits a crafted file...5.5 Medium
- imagemagick, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in ImageMagick in MagickCore/visual-effects.c. An attacker who submits a crafted...5.5 Medium
- imagemagick, debian linux +1 moreA flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file...5.5 Medium
rpmlint-miniSUSESecurity update for rpmlintNo score- opensuse cyrus-sasl, factory +1 moreLocal privilege escalation to root due to insecure tmp file usage6.7 Medium
- dropbear ssh project sshscp.c in Dropbear before 2020.79 mishandles the filename of . or an empty filename, a related...8.1 High
luaOSS-FuzzHeap-buffer-overflow in luaG_runerrorNo scorefluent-bitOSS-FuzzUNKNOWN WRITE in flb_utils_proxy_url_splitNo score- appspaceAppspace 6.2.4 allows SSRF via the api/v1/core/proxy/jsonprequest url parameter.9.8 Critical
serenityOSS-FuzzGlobal-buffer-overflow in AK::StringView::operator==No scoreserenityOSS-FuzzGlobal-buffer-overflow in AK::StringView::operator==No score- redisInteger overflow on 32-bit systems5.4 Medium
- cisco anyconnect secure mobility clientCisco AnyConnect Secure Mobility Client Denial of Service Vulnerability5.5 Medium
- cisco application services engine, application policy infrastructure controller, application services engine software +2 moreCisco Application Services Engine Unauthorized Access Vulnerabilities9.8 Critical
- cisco application services engine, application policy infrastructure controller, application services engine software +2 moreCisco Application Services Engine Unauthorized Access Vulnerabilities9.8 Critical
- cisco aci multi-site orchestrator, application policy infrastructure controller, aci multi-site orchestrator software +2 moreCisco ACI Multi-Site Orchestrator Application Services Engine Deployment Authentication Bypass Vulnerability10.0 Critical
- cisco nx-os software, nx-os, unified computing system +2 moreCisco NX-OS Software IPv6 Netstack Denial of Service Vulnerability8.6 High
- cisco nx-os software, nx-os, firepower extensible operating system +1 more +3 moreCisco FXOS and NX-OS Software Unidirectional Link Detection Denial of Service and Arbitrary Code Execution Vulnerability8.8 High
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software Protocol Independent Multicast Denial of Service Vulnerability4.3 Medium
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software Unauthenticated Arbitrary File Actions Vulnerability9.8 Critical
- cisco nx-os system software in aci mode, nx-os +1 moreCisco Nexus 9000 Series Fabric Switches ACI Mode Link Layer Discovery Protocol Port Denial of Service Vulnerability4.7 Medium
- cisco nx-os system software in aci mode, nx-os +1 moreCisco Nexus 9000 Series Fabric Switches ACI Mode BGP Route Installation Denial of Service Vulnerability8.6 High
- cisco nx-os system software in aci mode 11.0(1b), nx-os +1 moreCisco Nexus 9000 Series Fabric Switches ACI Mode Fabric Infrastructure VLAN Unauthorized Access Vulnerability7.4 High
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software ICMP Version 6 Memory Leak Denial of Service Vulnerability5.8 Medium
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software NX-API Cross-Site Request Forgery Vulnerability8.1 High
- ibm mq, mq appliance +1 moreIBM MQ 9.1 LTS, 9.2 LTS, and 9.1 CD AMQP Channels could allow an authenticated user to cause a...6.5 Medium
- apache xmlgraphics commons, fedoraproject fedora +1 moreServer-side request forgery (SSRF) in Apache XmlGraphics Commons8.2 High
- vmware esxi, cloud foundation +1 moreOpenSLP as used in ESXi (7.0 before ESXi70U1c-17325551, 6.7 before ESXi670-202102401-SG, 6.5...8.8 High
- vmware cloud foundation, vcenter server +1 moreThe vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server...9.8 Critical
- vmware cloud foundation, vcenter server, vcenter server and cloud foundation +2 moreThe vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to...5.3 Medium
- eclipse theia, the eclipse foundation eclipse theia +1 moreCross-site Scripting (XSS) in Eclipse Theia9.6 Critical
- voiceye wsactivebridgees, voiceye wsactivebridgees project wsactivebridges +1 moreVOICEYE WSActiveBridgeES versions prior to 2.1.0.3 contains a stack-based buffer overflow...7.8 High
- advantech bb-eswgp506-2sfp-t firmwareBB-ESWGP506-2SFP-T versions 1.01.09 and prior is vulnerable due to the use of hard-coded...9.8 Critical
- openscad, fedoraproject fedora +1 moreA stack-based buffer overflow vulnerability exists in the import_stl.cc:import_stl()...8.8 High
- cnesty helpcomHelpcom before v10.0 contains a file download and execution vulnerability caused by storing...8.0 High
- jenkins artifact repository parameter, jenkins project artifact repository parameter plugin +1 moreStored XSS vulnerability in Jenkins Artifact Repository Parameter Plugin5.4 Medium
- jenkins support core, jenkins project support core plugin +1 moreSupport bundles can include user session IDs in Jenkins Support Core Plugin5.3 Medium
- jenkins claim, jenkins project claim plugin +1 moreCross-Site Request Forgery in the Jenkins Claim plugin4.3 Medium
- jenkins claim, jenkins project claim plugin +1 moreXSS vulnerability in Jenkins Claim Plugin5.4 Medium
- jenkins repository connector, jenkins project repository connector plugin +1 moreStored XSS vulnerability in Jenkins Repository Connector Plugin5.4 Medium
- jenkins configuration slicing, jenkins project configuration slicing plugin +1 moreCSRF vulnerability in Jenkins Configuration Slicing Plugin8.8 High
- jenkins active choices, jenkins project active choices plugin +1 moreStored XSS vulnerability in Jenkins Active Choices Plugin4.6 Medium
- Show moreLoading…