Archive
February 2021
Vulnerabilities first published in this month (UTC), newest first.
1,464 results · Feed
-
Critical 9.8
Command injection in samba-client
The samba-client package before 4.0.0 for Node.js allows command injection because of the use of process.exec.
-
High 7.5
A denial-of-service vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A speciall…
-
Low 2.7
Denial-of-service in Fleet
Fleet is an open source osquery manager. In Fleet before version 3.7.0 a malicious actor with a valid node key can send a badly formatted request that causes the Fleet server to exit, resulting in denial of service. This is possible only while a live query is…
-
Medium 6.1
An open redirect vulnerability exists in the return_page redirection functionality of phpGACL 3.3.7, OpenEMR 5.0.2 and …
-
Medium 5.1
Unprivileged overlay + shiftfs read access
Overlayfs did not properly perform permission checking when copying up files in an overlayfs and could be exploited from within a user namespace, if, for example, unprivileged user namespaces were allowed. It was possible to have a file not readable by an unp…
-
High 8.0CVE-2020-13548 EPSS 66%
In Foxit Reader 10.1.0.37527, a specially crafted PDF document can trigger reuse of previously free memory which can le…
-
Medium 4.9
Insertion of Sensitive Information into Log File in Elasticsearch
Elasticsearch versions before 7.10.0 and 6.8.14 have an information disclosure issue when audit logging and the emit_request_body option is enabled. The Elasticsearch audit log could contain sensitive information such as password hashes or authentication toke…
-
Low 2.4
Information Disclosure in go.elastic.co/apm
The Elastic APM agent for Go versions before 1.11.0 can leak sensitive HTTP header information when logging the details during an application panic. Normally, the APM agent will sanitize sensitive HTTP header details before sending the information to the APM …
-
Unscored —CVE-2021-27139 EPSS 16%
An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to extract information from the dev…
-
Unscored —CVE-2021-27140 EPSS 19%
An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to find passwords and authenticatio…
-
Unscored —CVE-2021-27141 EPSS 16%
An issue was discovered on FiberHome HG6245D devices through RP2613. Credentials in /fhconf/umconfig.txt are obfuscated…
-
Unscored —CVE-2021-27142 EPSS 16%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web management is done over HTTPS, using a har…
-
Unscored —CVE-2021-27143 EPSS 16%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded user / user1…
-
Unscored —CVE-2021-27144 EPSS 22%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded f~i!b@e#r$h%…
-
Unscored —CVE-2021-27145 EPSS 24%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / lnad…
-
Unscored —CVE-2021-27146 EPSS 21%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / CUad…
-
Unscored —CVE-2021-27147 EPSS 17%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / admi…
-
Unscored —CVE-2021-27148 EPSS 24%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded telecomadmin…
-
Unscored —CVE-2021-27149 EPSS 24%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded adminpldt / …
-
Unscored —CVE-2021-27150 EPSS 20%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded gestionteleb…
-
Unscored —CVE-2021-27151 EPSS 23%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded rootmet / m3…
-
Unscored —CVE-2021-27152 EPSS 23%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded awnfibre / f…
-
Unscored —CVE-2021-27153 EPSS 21%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded trueadmin / …
-
Unscored —CVE-2021-27154 EPSS 21%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / G0R2…
-
Unscored —CVE-2021-27155 EPSS 21%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / 3UJU…
-
Unscored —CVE-2021-27156 EPSS 15%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains credentials for an ISP tha…
-
Unscored —CVE-2021-27157 EPSS 15%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / 8888…
-
Unscored —CVE-2021-27158 EPSS 24%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded L1vt1m4eng /…
-
Unscored —CVE-2021-27159 EPSS 23%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded useradmin / …
-
Unscored —CVE-2021-27160 EPSS 17%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded user / 88888…
-
Unscored —CVE-2021-27161 EPSS 17%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / 1234…
-
Unscored —CVE-2021-27162 EPSS 28%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded user / tatto…
-
Unscored —CVE-2021-27163 EPSS 23%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / tele…
-
Unscored —CVE-2021-27164 EPSS 24%
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / aisa…
-
Unscored —CVE-2021-27165 EPSS 20%
An issue was discovered on FiberHome HG6245D devices through RP2613. The telnet daemon on port 23/tcp can be abused wit…
-
Unscored —CVE-2021-27166 EPSS 20%
An issue was discovered on FiberHome HG6245D devices through RP2613. The password for the enable command is gpon.
-
Unscored —CVE-2021-27167 EPSS 15%
An issue was discovered on FiberHome HG6245D devices through RP2613. There is a password of four hexadecimal characters…
-
Unscored —CVE-2021-27168 EPSS 20%
An issue was discovered on FiberHome HG6245D devices through RP2613. There is a 6GFJdY4aAuUKJjdtSn7d password for the r…
-
Unscored —CVE-2021-27169 EPSS 20%
An issue was discovered on FiberHome AN5506-04-FA devices with firmware RP2631. There is a gepon password for the gepon…
-
Unscored —CVE-2021-27170 EPSS 16%
An issue was discovered on FiberHome HG6245D devices through RP2613. By default, there are no firewall rules for IPv6 c…