CVEs published in February 2021
1,593 vulnerabilities, 240 critical, 19 exploited.
- isida retrieverLMA ISIDA Retriever 5.2 is vulnerable to XSS via query['text'].6.1 Medium
- isida retrieverLMA ISIDA Retriever 5.2 allows SQL Injection.9.8 Critical
- opentext content serverThere are multiple persistent cross-site scripting (XSS) vulnerabilities in the web interface of...5.4 Medium
- kaspersky endpoint security, rescue disk +1 moreA component of Kaspersky custom boot loader allowed loading of untrusted UEFI modules due to...6.8 Medium
- id-map project id-mapDouble-free in id-map9.8 Critical
- id-map project id-mapDouble-free in id-map9.8 Critical
- id-map project id-mapDouble-free in id-map9.8 Critical
- saltstack salt, debian linux, fedoraproject fedora +2 moreSaltStack Salt is vulnerable to shell injection via ProxyCommand argument9.8 Critical
- saltstack salt, debian linux, fedoraproject fedora +2 moreSaltStack Salt command injection in the Salt-API when using the Salt-SSH client9.8 Critical
- saltstack salt, debian linux, fedoraproject fedora +2 moreSaltStack Salt eauth tokens can be used once after expiration9.1 Critical
- saltstack salt, debian linux, fedoraproject fedora +2 moreSaltStack Salt Cleartext Storage of Sensitive Information via cmdmod4.4 Medium
- saltstack salt, debian linux, fedoraproject fedora +2 moreSaltStack Salt Server Side Template Injection9.8 Critical
- saltstack salt, debian linux, fedoraproject fedora +2 moreSaltStack Salt Directory Traversal vulnerability9.1 Critical
- saltstack salt, debian linux, fedoraproject fedora +2 moreSaltStack Salt Improper Authentication vulnerability9.8 Critical
- saltstack salt, debian linux, fedoraproject fedora +2 moreSaltStack Salt Improper SSL Certificate Validation7.4 High
- saltstack salt, debian linux, fedoraproject fedora +2 moreSaltStack Salt Improper Certificate Validation5.9 Medium
- saltstack salt, debian linux, fedoraproject fedora +2 moreSaltStack Salt command injection via a crafted process name7.8 High
- micro focus solutions business managerXML External Entity processing6.1 Medium
- micro focus solutions business managerStored cross site scripting5.5 Medium
- micro focus solutions business managerMicro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are...4.9 Medium
- micro focus solutions business managerprivilege escalation7.3 High
- micro focus solutions business managerinformation disclosure3.5 Low
- micro focus solutions business managerSession fixation4.8 Medium
- zte zxr10 8900e firmwareA ZTE product has a memory leak vulnerability. Due to the product's improper handling of memory...4.4 Medium
- mozilla firefoxFirefox for Android suffered from a time-of-check-time-of-use vulnerability that allowed a...5.3 Medium
- aio-libs aiohttp, debian linux, fedoraproject fedora +2 moreOpen redirect vulnerability in aiohttp3.1 Low
- mozilla firefoxNavigations through the Android-specific `intent` URL scheme could have been misused to escape...7.4 High
- mozilla firefoxAn XSS bug in internal error pages could have led to various spoofing attacks, including other...6.1 Medium
- mozilla firefoxContext-specific code was included in a shared jump table; resulting in assertions being...6.5 Medium
- mozilla firefoxWhen processing a redirect with a conflicting Referrer-Policy, Firefox would have adopted the...6.5 Medium
- mozilla firefoxOne phishing tactic on the web is to provide a link with HTTP Auth. For example 'https://www...8.8 High
- mozilla firefoxThe DOMParser API did not properly process '<noscript>' elements for escaping. This could be used...6.1 Medium
- mozilla firefoxThe developer page about:memory has a Measure function for exploring what object types the...6.5 Medium
- mozilla firefoxWhen accepting a malicious intent from other installed apps, Firefox for Android accepted...8.1 High
- vaporDenial of Service5.3 Medium
grokOSS-FuzzUse-of-uninitialized-value in std::__1::__packaged_task_func<std::__1::__bind<grk::mct::decompress_irrevNo score- gnu glibc, debian linux, netapp 500f firmware +14 more +16 moreThe iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing...5.5 Medium
- microsoft .net, .net core, fedoraproject fedora +13 more +15 more.NET Core Remote Code Execution Vulnerability8.1 High
- microsoft npm, visual studio code - npm-script extension +1 moreVisual Studio Code npm-script Extension Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +23 more +25 moreWindows PKU2U Elevation of Privilege Vulnerability7.8 High
- microsoft teams, teams for ios +1 moreMicrosoft Teams iOS Information Disclosure Vulnerability5.7 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Security Feature Bypass Vulnerability5.4 Medium
- microsoft .net, .net core, .net 5.0 +6 more +8 more.NET Core Remote Code Execution Vulnerability8.1 High
- microsoft .net framework, .net framework 4.6, .net framework 4.6.2/4.7/4.7.1/4.7.2 +3 more +5 more.NET Framework Denial of Service Vulnerability7.5 High
- microsoft azure kubernetes serviceMicrosoft Azure Kubernetes Service Elevation of Privilege Vulnerability6.8 Medium
- microsoft windows 10 version 1803, windows 10 version 1809, windows 10 version 1909 +9 more +11 moreWindows DirectX Information Disclosure Vulnerability5.5 Medium
- microsoft package manager configurationsPackage Managers Configurations Remote Code Execution Vulnerability8.4 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +26 more +28 moreWindows Event Tracing Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +26 more +28 moreWindows Event Tracing Elevation of Privilege Vulnerability7.8 High
- microsoft dynamics 365, dynamics 365 (on-premises) version 8.2, dynamics 365 (on-premises) version 9.0 +2 moreMicrosoft Dataverse Information Disclosure Vulnerability6.5 Medium
- Show moreLoading…