Skip to content
OpenAdvisories

Archive

February 2021

Vulnerabilities first published in this month (UTC), newest first.

← January 2021 2021 / February March 2021 →
  1. 149
  2. 254
  3. 363
  4. 4117
  5. 538
  6. 616
  7. 76
  8. 878
  9. 9145
  10. 10114
  11. 1196
  12. 1249
  13. 132
  14. 147
  15. 1540
  16. 1655
  17. 17112
  18. 1838
  19. 1944
  20. 201
  21. 215
  22. 2266
  23. 2362
  24. 2441
  25. 2574
  26. 2674
  27. 2717
  28. 281
All Critical High Medium Low Exploited only Public exploit

92 results · Clear filters · Feed

  • Unscored —
    CVE-2021-26708 Public exploit

    A local privilege escalation was discovered in the Linux kernel before 5.10.13. Multiple race conditions in the AF_VSOC…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2020-18724 Public exploit

    Authenticated stored cross-site scripting (XSS) in the contact name field in the distribution list of MDaemon webmail 1…

  • Unscored —
    CVE-2020-18723 Public exploit

    Stored cross-site scripting (XSS) in file attachment field in MDaemon webmail 19.5.5 allows an attacker to execute code…

  • Critical 9.8
    CVE-2020-17523 Public exploit EPSS 86%

    Authentication bypass in Apache Shiro

    Apache Shiro before 1.7.1, when using Apache Shiro with Spring, a specially crafted HTTP request may cause an authentication bypass.

    org.apache.shiro:shiro-web org.apache.shiro:shiro-spring org.apache.shiro:shiro-spring-boot-starter Maven
  • Unscored —
    CVE-2020-28653 Public exploit EPSS 78%

    Zoho ManageEngine OpManager Stable build before 125203 (and Released build before 125233) allows Remote Code Execution …

  • Unscored —
    CVE-2020-35667 Public exploit

    JetBrains TeamCity Plugin before 2020.2.85695 SSRF. Vulnerability that could potentially expose user credentials.

  • Unscored —
    CVE-2020-24490 Public exploit

    Improper buffer restrictions in BlueZ may allow an unauthenticated user to potentially enable denial of service via adj…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2021-3395 Public exploit

    A cross-site scripting (XSS) vulnerability in Pryaniki 6.44.3 allows remote authenticated users to upload an arbitrary …

  • Medium 5.3
    CVE-2021-3281 Public exploit

    Django Directory Traversal via archive.extract

    In Django 2.2 before 2.2.18, 3.0 before 3.0.12, and 3.1 before 3.1.6, the django.utils.archive.extract method (used by "startapp --template" and "startproject --template") allows directory traversal via an archive with absolute paths or relative paths with do…

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI
  • Unscored —
    CVE-2021-3378 Public exploit EPSS 98%

    FortiLogger 4.4.2.2 is affected by Arbitrary File Upload by sending a "Content-Type: image/png" header to Config/SaveUp…

  • Unscored —
    CVE-2020-36109 Public exploit

    ASUS RT-AX86U router firmware below version under 9.0.0.4_386 has a buffer overflow in the blocking_request.cgi functio…

  • Critical 9.3
    CVE-2021-21276 Public exploit

    Privilege escalation in Polr

    Polr is an open source URL shortener. in Polr before version 2.3.0, a vulnerability in the setup process allows attackers to gain admin access to site instances, even if they do not possess an existing account. This vulnerability exists regardless of users' s…

    cydrobolt polr