Archive
1 March 2021
Vulnerabilities first published on this day (UTC), newest first.
6 results · Clear filters · Feed
-
High 8.2
An issue was discovered in Veritas Backup Exec before 21.2. It supports multiple authentication schemes: SHA authentica…
KEV Apr 7, 2023 -
High 8.8
An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires su…
KEV Apr 7, 2023 -
High 8.1
An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires su…
KEV Apr 7, 2023 -
High 7.2
SRS Policy Manager 6.X is affected by an XML External Entity Injection (XXE) vulnerability due to a misconfigured XML p…
-
High 7.0
Incomplete fix for CVE-2020-9484
The fix for CVE-2020-9484 was incomplete. When using Apache Tomcat 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41, 8.5.0 to 8.5.61 or 7.0.0. to 7.0.107 with a configuration edge case that was highly unlikely to be used, the Tomcat instance was still vulnerable to CV…
-
High 7.5CVE-2021-25122 EPSS 18%
Apache Tomcat h2c request mix-up
When responding to new h2c connection requests, Apache Tomcat versions 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41 and 8.5.0 to 8.5.61 could duplicate request headers and a limited amount of request body from one request to another meaning user A and user B could…