Archive
10 February 2021
Vulnerabilities first published on this day (UTC), newest first.
114 results · Feed
-
High 8.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat 7.0.18…
-
High 7.2CVE-2020-27871 EPSS 91%
This vulnerability allows remote attackers to create arbitrary files on affected installations of SolarWinds Orion Plat…
-
High 7.5
This vulnerability allows remote attackers to disclose sensitive information on affected installations of SolarWinds Or…
-
Unscored —
The Trend Micro Security 2020 and 2021 families of consumer products are vulnerable to a code injection vulnerability w…
-
Unscored —
PNPSCADA 2.200816204020 allows cross-site scripting (XSS), which can execute arbitrary JavaScript in the victim's brows…
-
High 8.8
An out-of-bounds write vulnerability exists in the Obj.cpp load_obj() functionality of Prusa Research PrusaSlicer 2.2.0…
-
High 8.8
A stack-based buffer overflow vulnerability exists in the Objparser::objparse() functionality of Prusa Research PrusaSl…
-
Critical 9.8
A heap overflow vulnerability exists in the way the GIF parser decodes LZW compressed streams in Accusoft ImageGear 19.…
-
Critical 9.8
An out-of-bounds write vulnerability exists in the TIFF parser of Accusoft ImageGear 19.8. A specially crafted malforme…
-
Critical 9.8
An out-of-bounds write vulnerability exists in the SGI RLE decompression functionality of Accusoft ImageGear 19.8. A sp…
-
Critical 9.8
An out-of-bounds write vulnerability exists in the PSD Header processing functionality of Accusoft ImageGear 19.8. A sp…
-
High 8.8
In SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 (Revision 1014), a specially crafted document can cause the …
-
High 8.6
A denial-of-service vulnerability exists in the HTTP Server functionality of Micrium uC-HTTP 3.01.00. A specially craft…
-
High 8.8
In SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 (Revision 1014), a specially crafted document can cause the …
-
Unscored —
Fluent Bit 1.6.10 has a NULL pointer dereference when an flb_malloc return value is not validated by flb_avro.c or http…
-
Medium 4.9
An internal product security audit of Lenovo XClarity Administrator (LXCA) prior to version 3.1.0 discovered the Window…
-
Critical 9.8
Command injection in samba-client
The samba-client package before 4.0.0 for Node.js allows command injection because of the use of process.exec.
-
High 7.5
A denial-of-service vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A speciall…
-
Low 2.7
Denial-of-service in Fleet
Fleet is an open source osquery manager. In Fleet before version 3.7.0 a malicious actor with a valid node key can send a badly formatted request that causes the Fleet server to exit, resulting in denial of service. This is possible only while a live query is…
-
Medium 6.1
An open redirect vulnerability exists in the return_page redirection functionality of phpGACL 3.3.7, OpenEMR 5.0.2 and …
-
Medium 5.1
Unprivileged overlay + shiftfs read access
Overlayfs did not properly perform permission checking when copying up files in an overlayfs and could be exploited from within a user namespace, if, for example, unprivileged user namespaces were allowed. It was possible to have a file not readable by an unp…
-
High 8.0CVE-2020-13548 EPSS 66%
In Foxit Reader 10.1.0.37527, a specially crafted PDF document can trigger reuse of previously free memory which can le…
-
Medium 4.9
Insertion of Sensitive Information into Log File in Elasticsearch
Elasticsearch versions before 7.10.0 and 6.8.14 have an information disclosure issue when audit logging and the emit_request_body option is enabled. The Elasticsearch audit log could contain sensitive information such as password hashes or authentication toke…
-
Low 2.4
Information Disclosure in go.elastic.co/apm
The Elastic APM agent for Go versions before 1.11.0 can leak sensitive HTTP header information when logging the details during an application panic. Normally, the APM agent will sanitize sensitive HTTP header details before sending the information to the APM …
-
Unscored —CVE-2021-27139 EPSS 16%
An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to extract information from the dev…
-
Unscored —CVE-2021-27140 EPSS 19%
An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to find passwords and authenticatio…
-
Unscored —CVE-2021-27141 EPSS 16%
An issue was discovered on FiberHome HG6245D devices through RP2613. Credentials in /fhconf/umconfig.txt are obfuscated…
-
Unscored —CVE-2021-27142 EPSS 16%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web management is done over HTTPS, using a har…
-
Unscored —CVE-2021-27143 EPSS 16%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded user / user1…
-
Unscored —CVE-2021-27144 EPSS 22%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded f~i!b@e#r$h%…
-
Unscored —CVE-2021-27145 EPSS 24%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / lnad…
-
Unscored —CVE-2021-27146 EPSS 21%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / CUad…
-
Unscored —CVE-2021-27147 EPSS 17%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / admi…
-
Unscored —CVE-2021-27148 EPSS 24%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded telecomadmin…
-
Unscored —CVE-2021-27149 EPSS 24%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded adminpldt / …
-
Unscored —CVE-2021-27150 EPSS 20%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded gestionteleb…
-
Unscored —CVE-2021-27151 EPSS 23%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded rootmet / m3…
-
Unscored —CVE-2021-27152 EPSS 23%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded awnfibre / f…
-
Unscored —CVE-2021-27153 EPSS 21%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded trueadmin / …
-
Unscored —CVE-2021-27154 EPSS 21%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / G0R2…