Skip to content
OpenAdvisories

Archive

9 February 2021

Vulnerabilities first published on this day (UTC), newest first.

← January 2021 2021 / February /9 March 2021 →
  1. 149
  2. 254
  3. 363
  4. 4117
  5. 538
  6. 616
  7. 76
  8. 878
  9. 9145
  10. 10114
  11. 1196
  12. 1249
  13. 132
  14. 147
  15. 1540
  16. 1655
  17. 17112
  18. 1838
  19. 1944
  20. 201
  21. 215
  22. 2266
  23. 2362
  24. 2441
  25. 2574
  26. 2674
  27. 2717
  28. 281
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.8
    CVE-2021-26951

    Out of bounds write in calamine

    An issue was discovered in the calamine crate before 0.17.0 for Rust. It allows attackers to overwrite heap-memory locations because Vec::set_len is used without proper memory claiming, and this uninitialized memory is used for a user-provided Read operation,…

    calamine crates.io
  • Critical 9.8
    CVE-2021-26955

    Out of bounds read in xcb

    An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because xcb::xproto::GetAtomNameReply::name() calls std::str::from_utf8_unchecked() on unvalidated bytes from an X server.

    rust-xcb rust-xcb xcb Debian Ubuntu crates.io
  • Critical 9.6
    CVE-2020-35125

    Mautic is vulnerable to XSS vulnerability

    A cross-site scripting (XSS) vulnerability in the forms component of Mautic before 3.2.4 allows remote attackers to inject executable JavaScript via mautic[return] (a different attack method than CVE-2020-35124, but also related to the Referer concept).

    mautic/core Packagist
  • Critical 9.8
    CVE-2021-21502

    Dell PowerScale OneFS versions 8.1.0 – 9.1.0 contain a "use of SSH key past account expiration" vulnerability. A user o…

    Dell PowerScale OneFS
  • Critical 9.9
    CVE-2021-21477 EPSS 30%

    SAP Commerce Cloud, versions - 1808,1811,1905,2005,2011, enables certain users with required privileges to edit drools …

    SAP SAP Commerce
  • Critical 9.8
    CVE-2020-15798

    A vulnerability has been identified in SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions < V16 Update 3a…

    Siemens SIMATIC HMI Comfort Panels (incl. SIPLUS variants) SINAMICS SL150 SINAMICS SM150 ICS / OT
  • Critical 9.8
    CVE-2021-26918

    The ProBot bot through 2021-02-08 for Discord might allow attackers to interfere with the intended purpose of the "Send…

  • Critical 9.8
    CVE-2020-14343 Public exploit

    Improper Input Validation in PyYAML

    A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the libra…

    pyyaml pyyaml pyyaml py3-yaml Debian Ubuntu Azure Linux Alpine PyPI