Archive

3 February 2021

Vulnerabilities first published on this day (UTC), newest first.

← January 2021 2021 / February /3 March 2021 →

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Critical 9.8

CVE-2021-20016 Exploited · Ransomware EPSS 40%

A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perfor…

SonicWall SonicWall SMA100 Network devices

Feb 3, 2021
KEV Nov 3, 2021
Critical 9.8

CVE-2020-17523 Public exploit EPSS 86%

Authentication bypass in Apache Shiro

Apache Shiro before 1.7.1, when using Apache Shiro with Spring, a specially crafted HTTP request may cause an authentication bypass.

org.apache.shiro:shiro-web org.apache.shiro:shiro-spring org.apache.shiro:shiro-spring-boot-starter Maven

Feb 3, 2021
Critical 9.8

CVE-2020-2507

command injection vulnerability in Helpdesk

The vulnerability have been reported to affect earlier versions of QTS. If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. This issue affects: QNAP Systems Inc. Helpdesk versions prior to 3.0.3.

QNAP Systems Helpdesk

Feb 3, 2021