Skip to content
OpenAdvisories

Archive

10 February 2021

Vulnerabilities first published on this day (UTC), newest first.

← January 2021 2021 / February /10 March 2021 →
  1. 149
  2. 254
  3. 363
  4. 4117
  5. 538
  6. 616
  7. 76
  8. 878
  9. 9145
  10. 10114
  11. 1196
  12. 1249
  13. 132
  14. 147
  15. 1540
  16. 1655
  17. 17112
  18. 1838
  19. 1944
  20. 201
  21. 215
  22. 2266
  23. 2362
  24. 2441
  25. 2574
  26. 2674
  27. 2717
  28. 281
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 4.9
    CVE-2020-8355

    An internal product security audit of Lenovo XClarity Administrator (LXCA) prior to version 3.1.0 discovered the Window…

    Lenovo XClarity Administrator
  • Medium 6.1
    CVE-2020-13565

    An open redirect vulnerability exists in the return_page redirection functionality of phpGACL 3.3.7, OpenEMR 5.0.2 and …

    phpgacl Ubuntu
  • Medium 5.1
    CVE-2020-16120

    Unprivileged overlay + shiftfs read access

    Overlayfs did not properly perform permission checking when copying up files in an overlayfs and could be exploited from within a user namespace, if, for example, unprivileged user namespaces were allowed. It was possible to have a file not readable by an unp…

    Linux kernel Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 4.9
    CVE-2020-7021

    Insertion of Sensitive Information into Log File in Elasticsearch

    Elasticsearch versions before 7.10.0 and 6.8.14 have an information disclosure issue when audit logging and the emit_request_body option is enabled. The Elasticsearch audit log could contain sensitive information such as password hashes or authentication toke…

    Elastic Elasticsearch elasticsearch org.elasticsearch:elasticsearch Ubuntu Maven
  • Medium 6.3
    CVE-2020-26299

    File System Bounds Escape

    ftp-srv is an open-source FTP server designed to be simple yet configurable. In ftp-srv before version 4.4.0 there is a path-traversal vulnerability. Clients of FTP servers utilizing ftp-srv hosted on Windows machines can escape the FTP user's defined root fo…

    autovance ftp-srv ftp-srv npm
  • Medium 4.8
    CVE-2021-23881

    Stored Cross Site Scripting in ENS

    A stored cross site scripting vulnerability in ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 February 2021 Update allows an ENS ePO administrator to add a script to a policy event which will trigger the script to be run through a browser blo…

    McAfee Endpoint Security (ENS) for Windows Windows
  • Medium 4.0
    CVE-2021-23883

    Null Pointer Dereference vulnerability in McAfee Endpoint Security (ENS)

    A Null Pointer Dereference vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows a local administrator to cause Windows to crash via a specific system call which is not handled correctly. This varies by machin…

    McAfee Endpoint Security (ENS) for Windows Windows
  • Medium 6.7
    CVE-2021-23880

    Improper Access Control in the ENS installer

    Improper Access Control in attribute in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows authenticated local administrator user to perform an uninstallation of the anti-malware engine via the running of a specific command…

    McAfee Endpoint Security (ENS) for Windows Windows