Skip to content
OpenAdvisories

Archive

11 February 2021

Vulnerabilities first published on this day (UTC), newest first.

← January 2021 2021 / February /11 March 2021 →
  1. 149
  2. 254
  3. 363
  4. 4117
  5. 538
  6. 616
  7. 76
  8. 878
  9. 9145
  10. 10114
  11. 1196
  12. 1249
  13. 132
  14. 147
  15. 1540
  16. 1655
  17. 17112
  18. 1838
  19. 1944
  20. 201
  21. 215
  22. 2266
  23. 2362
  24. 2441
  25. 2574
  26. 2674
  27. 2717
  28. 281
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.2
    CVE-2021-21311 Exploited Public exploit EPSS 98%

    SSRF in adminer

    Adminer is an open-source database management in a single PHP file. In adminer from version 4.0.0 and before 4.7.9 there is a server-side request forgery vulnerability. Users of Adminer versions bundling all drivers (e.g. `adminer.php`) are affected. This is …

    vrana adminer adminer adminer Debian Ubuntu Packagist
    KEV Sep 29, 2025
  • Critical 9.1
    CVE-2021-21014 Public exploit

    Magento Commerce Arbitrary Folder Empty Could Lead To Arbitrary Code Execution

    Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to a file upload restriction bypass. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Access to the admin console i…

    Adobe Magento Commerce magento/community-edition magento/project-community-edition Web / CMS Packagist
  • Medium 6.5
    CVE-2021-21042 Public exploit EPSS 15%

    Acrobat Reader DC Out-Of-Bounds Read Information Disclosure Vulnerability

    Acrobat Reader DC versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an Out-of-bounds Read vulnerability that could lead to arbitrary disclosure of information in the memory stack. An attacker …

    Adobe Acrobat Reader
  • High 8.8
    CVE-2021-21017 Exploited Public exploit EPSS 86%

    Acrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution

    Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a heap-based buffer overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achiev…

    Adobe Acrobat Reader
    KEV Nov 3, 2021
  • High 8.6
    CVE-2021-21307 Public exploit EPSS 89%

    Remote Code Exploit in Lucee Admin

    Lucee Server is a dynamic, Java based (JSR-223), tag and scripting language used for rapid web application development. In Lucee Admin before versions 5.3.7.47, 5.3.6.68 or 5.3.5.96 there is an unauthenticated remote code exploit. This is fixed in versions 5.…

    lucee Lucee
  • High 7.5
    CVE-2021-22880 Public exploit

    Active Record subject to Regular Expression Denial-of-Service (ReDoS)

    The PostgreSQL adapter in Active Record before 6.1.2.1, 6.0.3.5, 5.2.4.5 suffers from a regular expression denial of service (REDoS) vulnerability. Carefully crafted input can cause the input validation in the `money` type of the PostgreSQL adapter in Active …

    rails rails activerecord Debian Ubuntu RubyGems
  • Unscored —
    CVE-2021-22652 Public exploit EPSS 37%

    Access to the Advantech iView versions prior to v5.7.03.6112 configuration are missing authentication, which may allow …

  • High 7.5
    CVE-2020-35498 Public exploit

    A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a ma…

    openvswitch openvswitch openvswitch Debian Ubuntu Alpine