Skip to content
OpenAdvisories

Archive

24 February 2021

Vulnerabilities first published on this day (UTC), newest first.

← January 2021 2021 / February /24 March 2021 →
  1. 149
  2. 254
  3. 363
  4. 4117
  5. 538
  6. 616
  7. 76
  8. 878
  9. 9145
  10. 10114
  11. 1196
  12. 1249
  13. 132
  14. 147
  15. 1540
  16. 1655
  17. 17112
  18. 1838
  19. 1944
  20. 201
  21. 215
  22. 2266
  23. 2362
  24. 2441
  25. 2574
  26. 2674
  27. 2717
  28. 281
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • High 8.6
    CVE-2021-1387

    Cisco NX-OS Software IPv6 Netstack Denial of Service Vulnerability

    A vulnerability in the network stack of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability exists because the software improperly releases resources when …

    Cisco Cisco NX-OS Software Network devices
  • High 8.8
    CVE-2021-1368

    Cisco FXOS and NX-OS Software Unidirectional Link Detection Denial of Service and Arbitrary Code Execution Vulnerability

    A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code with administrative privileges or cause a denial of service (DoS) c…

    Cisco Cisco NX-OS Software Network devices
  • High 8.6
    CVE-2021-1230

    Cisco Nexus 9000 Series Fabric Switches ACI Mode BGP Route Installation Denial of Service Vulnerability

    A vulnerability with the Border Gateway Protocol (BGP) for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an unauthenticated, remote attacker to cause a routing process to crash, which could lead to a deni…

    Cisco Cisco NX-OS System Software in ACI Mode Network devices
  • High 7.4
    CVE-2021-1228

    Cisco Nexus 9000 Series Fabric Switches ACI Mode Fabric Infrastructure VLAN Unauthorized Access Vulnerability

    A vulnerability in the fabric infrastructure VLAN connection establishment of Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) Mode could allow an unauthenticated, adjacent attacker to bypass security validations and connect…

    Cisco Cisco NX-OS System Software in ACI Mode 11.0.1b Network devices
  • High 8.1
    CVE-2021-1227

    Cisco NX-OS Software NX-API Cross-Site Request Forgery Vulnerability

    A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. This vulnerability is due to insufficient CSRF protections for the NX-AP…

    Cisco Cisco NX-OS Software Network devices
  • High 8.2
    CVE-2020-11988

    Server-side request forgery (SSRF) in Apache XmlGraphics Commons

    Apache XmlGraphics Commons 2.4 and earlier is vulnerable to server-side request forgery, caused by improper input validation by the XMPParser. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server t…

    org.apache.xmlgraphics:xmlgraphics-commons xmlgraphics-commons xmlgraphics-commons Debian Ubuntu Maven
  • High 8.8
    CVE-2021-21974 Public exploit EPSS 45%

    OpenSLP as used in ESXi (7.0 before ESXi70U1c-17325551, 6.7 before ESXi670-202102401-SG, 6.5 before ESXi650-202102101-S…

    Virtualization
  • High 7.8
    CVE-2020-7836

    VOICEYE WSActiveBridgeES versions prior to 2.1.0.3 contains a stack-based buffer overflow vulnerability caused by impro…

    VOICEYE WSActiveBridgeES
  • High 8.8
    CVE-2020-28599

    A stack-based buffer overflow vulnerability exists in the import_stl.cc:import_stl() functionality of Openscad openscad…

    openscad openscad Debian Ubuntu
  • High 8.0
    CVE-2020-7846

    Helpcom before v10.0 contains a file download and execution vulnerability caused by storing hardcoded cryptographic key…

    Cnesty Helpcom
  • High 8.8
    CVE-2021-21617

    CSRF vulnerability in Jenkins Configuration Slicing Plugin

    A cross-site request forgery (CSRF) vulnerability in Jenkins Configuration Slicing Plugin 1.51 and earlier allows attackers to apply different slice configurations.

    Jenkins Project Jenkins Configuration Slicing Plugin org.jenkins-ci.plugins:configurationslicing Web / CMS Maven
  • High 8.2
    CVE-2020-11987 EPSS 14%

    Server-side request forgery (SSRF) in Apache Batik

    Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GE…

    batik batik org.apache.xmlgraphics:batik-svgbrowser Debian Ubuntu Maven