Skip to content
OpenAdvisories

Archive

24 February 2021

Vulnerabilities first published on this day (UTC), newest first.

← January 2021 2021 / February /24 March 2021 →
  1. 149
  2. 254
  3. 363
  4. 4117
  5. 538
  6. 616
  7. 76
  8. 878
  9. 9145
  10. 10114
  11. 1196
  12. 1249
  13. 132
  14. 147
  15. 1540
  16. 1655
  17. 17112
  18. 1838
  19. 1944
  20. 201
  21. 215
  22. 2266
  23. 2362
  24. 2441
  25. 2574
  26. 2674
  27. 2717
  28. 281
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Medium 5.5
    CVE-2021-1450

    Cisco AnyConnect Secure Mobility Client Denial of Service Vulnerability

    A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected device. To exploit this vulnerability, the atta…

    Cisco Cisco AnyConnect Secure Mobility Client Network devices
  • Medium 4.3
    CVE-2021-1367

    Cisco NX-OS Software Protocol Independent Multicast Denial of Service Vulnerability

    A vulnerability in the Protocol Independent Multicast (PIM) feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input v…

    Cisco Cisco NX-OS Software Network devices
  • Medium 4.7
    CVE-2021-1231

    Cisco Nexus 9000 Series Fabric Switches ACI Mode Link Layer Discovery Protocol Port Denial of Service Vulnerability

    A vulnerability in the Link Layer Discovery Protocol (LLDP) for Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an unauthenticated, adjacent attacker to disable switching on a small form-factor pluggable (SFP) in…

    Cisco Cisco NX-OS System Software in ACI Mode Network devices
  • Medium 5.8
    CVE-2021-1229

    Cisco NX-OS Software ICMP Version 6 Memory Leak Denial of Service Vulnerability

    A vulnerability in ICMP Version 6 (ICMPv6) processing in Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a slow system memory leak, which over time could lead to a denial of service (DoS) condition. This vulnerability is due to i…

    Cisco Cisco NX-OS Software Network devices
  • Medium 6.5
    CVE-2020-4931

    IBM MQ 9.1 LTS, 9.2 LTS, and 9.1 CD AMQP Channels could allow an authenticated user to cause a denial of service due to…

    IBM MQ Appliance
  • Medium 5.3
    CVE-2021-21973 Exploited Public exploit EPSS 88%

    The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of U…

    Virtualization
    KEV Mar 7, 2022
  • Medium 5.4
    CVE-2021-21622

    Stored XSS vulnerability in Jenkins Artifact Repository Parameter Plugin

    Jenkins Artifact Repository Parameter Plugin 1.0.0 and earlier does not escape parameter names and descriptions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.

    Jenkins Project Jenkins Artifact Repository Parameter Plugin io.jenkins.plugins:artifact-repository-parameter Web / CMS Maven
  • Medium 4.3
    CVE-2021-21620

    Cross-Site Request Forgery in the Jenkins Claim plugin

    A cross-site request forgery (CSRF) vulnerability in Jenkins Claim Plugin 2.18.1 and earlier allows attackers to change claims.

    Jenkins Project Jenkins Claim Plugin org.jenkins-ci.plugins:claim Web / CMS Maven
  • Medium 5.4
    CVE-2021-21619

    XSS vulnerability in Jenkins Claim Plugin

    Jenkins Claim Plugin 2.18.1 and earlier does not escape the user display name, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers who are able to control the display names of Jenkins users, either via the security realm, o…

    Jenkins Project Jenkins Claim Plugin org.jenkins-ci.plugins:claim Web / CMS Maven
  • Medium 5.4
    CVE-2021-21618 EPSS 79%

    Stored XSS vulnerability in Jenkins Repository Connector Plugin

    Jenkins Repository Connector Plugin 2.0.2 and earlier does not escape parameter names and descriptions for past builds, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

    Jenkins Project Jenkins Repository Connector Plugin org.jenkins-ci.plugins:repository-connector Web / CMS Maven
  • Medium 4.6
    CVE-2021-21616 EPSS 76%

    Stored XSS vulnerability in Jenkins Active Choices Plugin

    Jenkins Active Choices Plugin 2.5.2 and earlier does not escape reference parameter values, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.

    Jenkins Project Jenkins Active Choices Plugin org.biouno:uno-choice Web / CMS Maven