Skip to content
OpenAdvisories

Archive

24 February 2021

Vulnerabilities first published on this day (UTC), newest first.

← January 2021 2021 / February /24 March 2021 →
  1. 149
  2. 254
  3. 363
  4. 4117
  5. 538
  6. 616
  7. 76
  8. 878
  9. 9145
  10. 10114
  11. 1196
  12. 1249
  13. 132
  14. 147
  15. 1540
  16. 1655
  17. 17112
  18. 1838
  19. 1944
  20. 201
  21. 215
  22. 2266
  23. 2362
  24. 2441
  25. 2574
  26. 2674
  27. 2717
  28. 281
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.8
    CVE-2021-1396

    Cisco Application Services Engine Unauthorized Access Vulnerabilities

    Multiple vulnerabilities in Cisco Application Services Engine could allow an unauthenticated, remote attacker to gain privileged access to host-level operations or to learn device-specific information, create diagnostic files, and make limited configuration c…

    Cisco Cisco Application Services Engine Software Network devices
  • Critical 9.8
    CVE-2021-1393

    Cisco Application Services Engine Unauthorized Access Vulnerabilities

    Multiple vulnerabilities in Cisco Application Services Engine could allow an unauthenticated, remote attacker to gain privileged access to host-level operations or to learn device-specific information, create diagnostic files, and make limited configuration c…

    Cisco Cisco Application Services Engine Software Network devices
  • Critical 10.0
    CVE-2021-1388 EPSS 15%

    Cisco ACI Multi-Site Orchestrator Application Services Engine Deployment Authentication Bypass Vulnerability

    A vulnerability in an API endpoint of Cisco ACI Multi-Site Orchestrator (MSO) installed on the Application Services Engine could allow an unauthenticated, remote attacker to bypass authentication on an affected device. The vulnerability is due to improper tok…

    Cisco Cisco ACI Multi-Site Orchestrator Software Network devices
  • Critical 9.8
    CVE-2021-1361

    Cisco NX-OS Software Unauthenticated Arbitrary File Actions Vulnerability

    A vulnerability in the implementation of an internal file management service for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode that are running Cisco NX-OS Software could allow an unauthenticated, remote attack…

    Cisco Cisco NX-OS Software Network devices
  • Critical 9.8
    CVE-2021-21972 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor…

    Virtualization
    KEV Nov 3, 2021
  • Critical 9.6
    CVE-2020-27224

    Cross-site Scripting (XSS) in Eclipse Theia

    In Eclipse Theia versions up to and including 1.2.0, the Markdown Preview (@theia/preview), can be exploited to execute arbitrary code.

    The Eclipse Foundation Eclipse Theia @theia/preview npm