Archive
February 2021
Vulnerabilities first published in this month (UTC), newest first.
1,464 results · Feed
-
Medium 6.1
Cisco Webex Meetings Cross-Site Scripting Vulnerability
A vulnerability in the web-based interface of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface of the affected service. The vulnerability is due to in…
-
High 7.8CVE-2021-1366 Public exploit
Cisco AnyConnect Secure Mobility Client for Windows with VPN Posture (HostScan) Module DLL Hijacking Vulnerability
A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected device if the VPN Posture (HostScan) Module is…
-
Medium 5.5
Cisco Webex Meetings Desktop App and Webex Productivity Tools for Windows Shared Memory Information Disclosure Vulnerability
A vulnerability in Cisco Webex Meetings Desktop App and Webex Productivity Tools for Windows could allow an authenticated, local attacker to gain access to sensitive information on an affected system. This vulnerability is due to the unsafe usage of shared me…
-
Medium 5.3
Cisco StarOS Denial of Service Vulnerability
A vulnerability in the SSH service of the Cisco StarOS operating system could allow an unauthenticated, remote attacker to cause an affected device to stop processing traffic, resulting in a denial of service (DoS) condition. The vulnerability is due to a log…
-
Medium 6.5
Cisco Identity Services Engine Sensitive Information Disclosure Vulnerabilities
Multiple vulnerabilities in the Admin portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to obtain sensitive information. These vulnerabilities are due to improper enforcement of administrator privilege levels for sen…
-
Medium 6.5
Cisco Identity Services Engine Sensitive Information Disclosure Vulnerabilities
Multiple vulnerabilities in the Admin portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to obtain sensitive information. These vulnerabilities are due to improper enforcement of administrator privilege levels for sen…
-
Unscored —CVE-2021-27224 EPSS 38%
The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a user-mode write access violation starting at WPG+0x0000000000012…
-
Unscored —
The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a Read Access Violation on Control Flow starting at WPG!ReadWPG_W+…
-
Unscored —
PHPGurukul Car Rental Project version 2.0 suffers from a remote shell upload vulnerability in changeimage1.php.
-
Unscored —
An arbitrary file upload vulnerability has been identified in posts.php in Baby Care System 1.0. The vulnerability coul…
-
Unscored —
Baby Care System v1.0 is vulnerable to SQL injection via the 'id' parameter on the contentsectionpage.php page.
-
Unscored —
The id parameter in detail.php of Online Book Store v1.0 is vulnerable to union-based blind SQL injection, which leads …
-
Unscored —
Seat-Reservation-System 1.0 has a SQL injection vulnerability in index.php in the id parameter where attackers can obta…
-
Unscored —
In 74cms version 5.0.1, there is a remote code execution vulnerability in /Application/Admin/Controller/ConfigControlle…
-
Low 3.7
Memory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted c…
-
Low 3.7
Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture…
-
Medium 5.3
Apache Airflow: Lineage API endpoint for Experimental API missed authentication check
The lineage endpoint of the deprecated Experimental API was not protected by authentication in Airflow 2.0.0. This allowed unauthenticated users to hit that endpoint. This is low-severity issue as the attacker needs to be aware of certain parameters to pass t…
-
Medium 6.5
CWE-284 Improper Access Control on Configurations Endpoint for the Stable API
Improper Access Control on Configurations Endpoint for the Stable API of Apache Airflow allows users with Viewer or User role to get Airflow Configurations including sensitive information even when `[webserver] expose_config` is set to `False` in `airflow.cfg…
-
Unscored —
Untrusted pointer dereference in some Intel(R) Graphics Drivers before versions 15.33.51.5146, 15.45.32.5145, 15.36.39.…
-
Unscored —
Improper access control in firmware for the Intel(R) Ethernet I210 Controller series of network adapters before version…
-
Unscored —
Improper default permissions in the firmware for the Intel(R) Ethernet I210 Controller series of network adapters befor…
-
Unscored —
Improper access control in the firmware for the Intel(R) Ethernet I210 Controller series of network adapters before ver…
-
Unscored —
Improper initialization in the firmware for the Intel(R) Ethernet I210 Controller series of network adapters before ver…
-
Unscored —
Incorrect default permissions in the installer for the Intel(R) RealSense(TM) DCM may allow a privileged user to potent…
-
Unscored —
Insufficient control flow management in the API for the Intel(R) Collaboration Suite for WebRTC before version 4.3.1 ma…
-
Unscored —
Use of hard-coded key in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before ve…
-
Unscored —
Heap overflow in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.…
-
Unscored —
Out of bounds read in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before versi…
-
Unscored —
Insufficient input validation in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules b…
-
Unscored —
Uncontrolled search path in the Intel(R) Optane(TM) DC Persistent Memory installer for Windows* before version 1.00.00.…
-
Unscored —
Expired pointer dereference in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user…
-
Unscored —
Unchecked return value in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to p…
-
Unscored —
Divide by zero in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potential…
-
Unscored —
Untrusted pointer dereference in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged us…
-
Unscored —
Improper access control in some Intel(R) Graphics Drivers before version 26.20.100.8476 may allow an authenticated user…
-
Unscored —
Out-of-bounds write in some Intel(R) Graphics Drivers before version 15.36.39.5143 may allow an authenticated user to p…
-
Unscored —
Uncaught exception in some Intel(R) Graphics Drivers before version 15.33.51.5146 may allow an authenticated user to po…
-
Unscored —
Insufficient input validation in some Intel(R) Graphics Drivers before version 27.20.100.8587 may allow a privileged us…
-
Unscored —
Improper input validation in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user t…
-
Unscored —
Out of bound write in some Intel(R) Graphics Drivers before version 26.20.100.8336 may allow a privileged user to poten…