Skip to content
OpenAdvisories

Archive

17 February 2021

Vulnerabilities first published on this day (UTC), newest first.

← January 2021 2021 / February /17 March 2021 →
  1. 149
  2. 254
  3. 363
  4. 4117
  5. 538
  6. 616
  7. 76
  8. 878
  9. 9145
  10. 10114
  11. 1196
  12. 1249
  13. 132
  14. 147
  15. 1540
  16. 1655
  17. 17112
  18. 1838
  19. 1944
  20. 201
  21. 215
  22. 2266
  23. 2362
  24. 2441
  25. 2574
  26. 2674
  27. 2717
  28. 281
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2021-22855

    Soar Cloud System Co., Ltd. HR Portal - Arbitrary Code Execution

    The specific function of HR Portal of Soar Cloud System accepts any type of object to be deserialized. Attackers can send malicious serialized objects to execute arbitrary commands.

    Soar Cloud System HR Portal
  • Critical 9.8
    CVE-2021-22856

    ChanGate EnterPrise Co., Ltd property management system - SQL Injection

    The CGE property management system contains SQL Injection vulnerabilities. Remote attackers can inject SQL commands into the parameters in Cookie and obtain data in the database without privilege.

    ChanGate EnterPrise property management system
  • Critical 9.0
    CVE-2021-23885

    Privilege escalation vulnerability in McAfee Web Gateway (MWG) UI

    Privilege escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.8 allows an authenticated user to gain elevated privileges through the User Interface and execute commands on the appliance via incorrect improper neutralization of user input in the …

    McAfee McAfee Web Gateway (MWG)