Skip to content
OpenAdvisories

Archive

February 2021

Vulnerabilities first published in this month (UTC), newest first.

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2021-21972 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor…

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2021-27104 Exploited · Ransomware EPSS 57%

    Accellion FTA 9_12_370 and earlier is affected by OS command execution via a crafted POST request to various admin endp…

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2021-27103 Exploited · Ransomware EPSS 11%

    Accellion FTA 9_12_411 and earlier is affected by SSRF via a crafted POST request to wmProgressstat.html. The fixed ver…

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2021-27101 Exploited · Ransomware Public exploit

    Accellion FTA 9_12_370 and earlier is affected by SQL injection via a crafted Host header in a request to document_root…

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2021-22502 Exploited Public exploit Scanner template EPSS 97%

    Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40. Th…

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2021-20016 Exploited · Ransomware EPSS 40%

    A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perfor…

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2020-25506 Exploited Scanner template EPSS 100%

    D-Link DNS-320 FW v2.06B01 Revision Ax is affected by command injection in the system_mgr.cgi component, which can lead…

    KEV Nov 3, 2021