Skip to content
OpenAdvisories

Archive

16 February 2021

Vulnerabilities first published on this day (UTC), newest first.

← January 2021 2021 / February /16 March 2021 →
  1. 149
  2. 254
  3. 363
  4. 4117
  5. 538
  6. 616
  7. 76
  8. 878
  9. 9145
  10. 10114
  11. 1196
  12. 1249
  13. 132
  14. 147
  15. 1540
  16. 1655
  17. 17112
  18. 1838
  19. 1944
  20. 201
  21. 215
  22. 2266
  23. 2362
  24. 2441
  25. 2574
  26. 2674
  27. 2717
  28. 281
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.8
    CVE-2021-27102 Exploited · Ransomware

    Accellion FTA 9_12_411 and earlier is affected by OS command execution via a local web service call. The fixed version …

    KEV Nov 3, 2021
  • High 7.1
    CVE-2021-21315 Exploited Public exploit EPSS 91%

    Command Injection Vulnerability

    The System Information Library for Node.JS (npm package "systeminformation") is an open source collection of functions to retrieve detailed hardware, system and OS information. In systeminformation before version 5.3.1 there is a command injection vulnerabili…

    sebhildebrandt systeminformation systeminformation npm
    KEV Jan 18, 2022
  • High 7.5
    CVE-2021-23840 Public exploit EPSS 51%

    Integer overflow in CipherUpdate

    Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the …

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine crates.io
  • High 8.6
    CVE-2021-20987

    Hilscher: EtherNet/IP stack crash for specific CIP service

    A denial of service and memory corruption vulnerability was found in Hilscher EtherNet/IP Core V2 prior to V2.13.0.21that may lead to code injection through network or make devices crash without recovery.

    Pepper+Fuchs Hilscher PCV/PXV/PGV WCS
  • High 7.5
    CVE-2021-20986

    Hilscher: Denial of Service vulnerability in PROFINET IO Device

    A Denial of Service vulnerability was found in Hilscher PROFINET IO Device V3 in versions prior to V3.14.0.7. This may lead to unexpected loss of cyclic communication or interruption of acyclic communication.

    Pepper+Fuchs Hilscher WCS PCV/PXV/PGV
  • High 7.5
    CVE-2020-35558

    SSRF in products of MB connect line and Helmholz

    An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual through 2.11.2. There is an SSRF in the in the MySQL access check, allowing an attacker to scan for open ports and gain some information about possi…