Skip to content
OpenAdvisories

Archive

10 February 2021

Vulnerabilities first published on this day (UTC), newest first.

← January 2021 2021 / February /10 March 2021 →
  1. 149
  2. 254
  3. 363
  4. 4117
  5. 538
  6. 616
  7. 76
  8. 878
  9. 9145
  10. 10114
  11. 1196
  12. 1249
  13. 132
  14. 147
  15. 1540
  16. 1655
  17. 17112
  18. 1838
  19. 1944
  20. 201
  21. 215
  22. 2266
  23. 2362
  24. 2441
  25. 2574
  26. 2674
  27. 2717
  28. 281
All Critical High Medium Low Exploited only Public exploit

22 results · Clear filters · Feed

  • High 8.8
    CVE-2020-27874

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat 7.0.18…

    Tencent WeChat
  • High 7.2
    CVE-2020-27871 EPSS 91%

    This vulnerability allows remote attackers to create arbitrary files on affected installations of SolarWinds Orion Plat…

    SolarWinds Orion Platform
  • High 7.5
    CVE-2020-27870

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of SolarWinds Or…

    SolarWinds Orion Platform
  • High 8.8
    CVE-2020-28595

    An out-of-bounds write vulnerability exists in the Obj.cpp load_obj() functionality of Prusa Research PrusaSlicer 2.2.0…

    slic3r-prusa slic3r-prusa Debian Ubuntu
  • High 8.8
    CVE-2020-28596

    A stack-based buffer overflow vulnerability exists in the Objparser::objparse() functionality of Prusa Research PrusaSl…

    slic3r-prusa slic3r-prusa Debian Ubuntu
  • High 8.8
    CVE-2020-27250

    In SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 (Revision 1014), a specially crafted document can cause the …

  • High 8.6
    CVE-2020-13583

    A denial-of-service vulnerability exists in the HTTP Server functionality of Micrium uC-HTTP 3.01.00. A specially craft…

  • High 8.8
    CVE-2020-13581

    In SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 (Revision 1014), a specially crafted document can cause the …

  • High 7.5
    CVE-2020-13575

    A denial-of-service vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A speciall…

    Genivia gSOAP gsoap gsoap Debian Ubuntu
  • High 8.0
    CVE-2020-13548 EPSS 66%

    In Foxit Reader 10.1.0.37527, a specially crafted PDF document can trigger reuse of previously free memory which can le…

  • High 8.2
    CVE-2021-20353

    IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack …

    IBM WebSphere Application Server
  • High 7.5
    CVE-2020-5023

    IBM Spectrum Protect Plus 10.1.0 through 10.1.7 could allow a remote user to inject arbitrary data iwhich could cause t…

    IBM Spectrum Protect Plus
  • High 8.8
    CVE-2020-13546

    In SoftMaker Software GmbH SoftMaker Office TextMaker 2021 (revision 1014), a specially crafted document can cause the …

  • High 7.5
    CVE-2021-0341

    Square OkHttp can accept the wrong certificate

    In verifyHostName of OkHostnameVerifier.java, there is a possible way to accept a certificate for the wrong domain due to improperly used crypto. This could lead to remote information disclosure with no additional execution privileges needed. User interaction…

    com.squareup.okhttp3:okhttp Android Maven
  • High 8.2
    CVE-2021-23874 Exploited

    McAfee Total Protection (MTP) privilege escalation vulnerability

    Arbitrary Process Execution vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and execute arbitrary code bypassing MTP self-defense.

    McAfee,LLC McAfee Total Protection (MTP)
    KEV Nov 3, 2021
  • High 7.8
    CVE-2021-23876

    McAfee Total Protection (MTP) Bypass Remote Procedure call vulnerability

    Bypass Remote Procedure call in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and perform arbitrary file modification as the SYSTEM user potentially causing Denial of Service via executing carefully constructed…

    McAfee,LLC McAfee Total Protection (MTP)
  • High 7.8
    CVE-2021-23873

    McAfee Total Protection (MTP) privilege escalation vulnerability

    Privilege Escalation vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and perform arbitrary file deletion as the SYSTEM user potentially causing Denial of Service via manipulating Junction link, a…

    McAfee,LLC McAfee Total Protection (MTP)
  • High 8.2
    CVE-2021-23882

    Improper Access Control in the ENS installer

    Improper Access Control vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows local administrators to prevent the installation of some ENS files by placing carefully crafted files where ENS will be installed. …

    McAfee Endpoint Security (ENS) for Windows Windows
  • High 7.3
    CVE-2021-23878

    Clear text storage of sensitive Information in ENS

    Clear text storage of sensitive Information in memory vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows a local user to view ENS settings and credentials via accessing process memory after the ENS administ…

    McAfee Endpoint Security (ENS) for Windows Windows
  • High 7.5
    CVE-2020-13578

    A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially …

    gsoap gsoap Debian Ubuntu
  • High 7.5
    CVE-2020-13574

    A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially …

    gsoap gsoap Debian Ubuntu
  • High 7.5
    CVE-2020-13577

    A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially …

    gsoap gsoap Debian Ubuntu