Skip to content
OpenAdvisories

Archive

February 2021

Vulnerabilities first published in this month (UTC), newest first.

11 results · Clear filters · Feed

  • High 7.8
    CVE-2021-1732 Exploited · Ransomware Public exploit EPSS 78%

    Windows Win32k Elevation of Privilege Vulnerability

    Windows Win32k Elevation of Privilege Vulnerability

    KEV Nov 3, 2021
  • High 7.8
    CVE-2021-27102 Exploited · Ransomware

    Accellion FTA 9_12_411 and earlier is affected by OS command execution via a local web service call. The fixed version …

    KEV Nov 3, 2021
  • High 7.1
    CVE-2021-21315 Exploited Public exploit EPSS 91%

    Command Injection Vulnerability

    The System Information Library for Node.JS (npm package "systeminformation") is an open source collection of functions to retrieve detailed hardware, system and OS information. In systeminformation before version 5.3.1 there is a command injection vulnerabili…

    KEV Jan 18, 2022
  • High 8.8
    CVE-2021-25298 Exploited Public exploit EPSS 74%

    Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosx…

    KEV Jan 18, 2022
  • High 8.8
    CVE-2021-25296 Exploited Public exploit EPSS 72%

    Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosx…

    KEV Jan 18, 2022
  • High 8.8
    CVE-2021-25297 Exploited Public exploit EPSS 57%

    Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosx…

    KEV Jan 18, 2022
  • High 7.2
    CVE-2021-21311 Exploited Public exploit EPSS 98%

    SSRF in adminer

    Adminer is an open-source database management in a single PHP file. In adminer from version 4.0.0 and before 4.7.9 there is a server-side request forgery vulnerability. Users of Adminer versions bundling all drivers (e.g. `adminer.php`) are affected. This is …

    KEV Sep 29, 2025
  • High 8.8
    CVE-2021-21017 Exploited Public exploit EPSS 86%

    Acrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution

    Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a heap-based buffer overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achiev…

    KEV Nov 3, 2021
  • High 8.2
    CVE-2021-23874 Exploited

    McAfee Total Protection (MTP) privilege escalation vulnerability

    Arbitrary Process Execution vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and execute arbitrary code bypassing MTP self-defense.

    KEV Nov 3, 2021
  • High 8.8
    CVE-2021-21148 Exploited Public exploit EPSS 20%

    Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit hea…

    KEV Nov 3, 2021
  • High 7.3
    CVE-2020-2506 Exploited

    improper access control vulnerability in Helpdesk

    The vulnerability have been reported to affect earlier versions of QTS. If exploited, this improper access control vulnerability could allow attackers to compromise the security of the software by gaining privileges, or reading sensitive information. This iss…

    KEV Mar 25, 2022