February 2021

9 results · Clear filters · Feed

• Medium 5.2
  CVE-2020-27223 Public exploit EPSS 78%

  DOS vulnerability for Quoted Quality CSV headers

  In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of “quality” (i.e. q) parameters, the server may enter a denial of service (DoS) state due…

  The Eclipse Foundation Eclipse Jetty jetty9 jetty9 Debian Ubuntu Maven
  Feb 26, 2021
• Medium 5.5
  CVE-2021-24098 Public exploit

  Windows Console Driver Denial of Service Vulnerability

  Windows Console Driver Denial of Service Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Feb 25, 2021
• Medium 6.5
  CVE-2021-24085 Public exploit

  Microsoft Exchange Server Spoofing Vulnerability

  Microsoft Exchange Server Spoofing Vulnerability

  Microsoft Microsoft Exchange Server 2016 Cumulative Update 19 Microsoft Exchange Server 2019 Cumulative Update 8 Microsoft Exchange Server 2016 Cumulative Update 18
  Feb 25, 2021
• Medium 5.5
  CVE-2021-24084 Public exploit

  Windows Mobile Device Management Information Disclosure Vulnerability

  Windows Mobile Device Management Information Disclosure Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Feb 25, 2021
• Medium 5.3
  CVE-2021-21973 Exploited Public exploit EPSS 88%

  The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of U…

  Virtualization
  Feb 24, 2021

  KEV Mar 7, 2022
• Medium 5.9
  CVE-2021-27568 Public exploit

  Improper Check for Unusual or Exceptional Conditions in json-smart

  An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4. An exception is thrown from a function, but it is not caught, as demonstrated by NumberFormatException. When it is not caught, it may cause programs using the l…

  net.minidev:json-smart net.minidev:json-smart-mini Maven
  Feb 23, 2021
• Medium 5.9
  CVE-2021-23841 Public exploit

  Null pointer deref in X509_issuer_and_serial_hash()

  The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing …

  OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine crates.io
  Feb 16, 2021
• Medium 6.5
  CVE-2021-21042 Public exploit EPSS 15%

  Acrobat Reader DC Out-Of-Bounds Read Information Disclosure Vulnerability

  Acrobat Reader DC versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an Out-of-bounds Read vulnerability that could lead to arbitrary disclosure of information in the memory stack. An attacker …

  Adobe Acrobat Reader
  Feb 11, 2021
• Medium 5.3
  CVE-2021-3281 Public exploit

  Django Directory Traversal via archive.extract

  In Django 2.2 before 2.2.18, 3.0 before 3.0.12, and 3.1 before 3.1.6, the django.utils.archive.extract method (used by "startapp --template" and "startproject --template") allows directory traversal via an archive with absolute paths or relative paths with do…

  python-django django python-django py3-django Debian Ubuntu Alpine PyPI
  Feb 2, 2021