Skip to content
OpenAdvisories

Archive

1 March 2021

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • High 8.2
    CVE-2021-27877 Exploited · Ransomware Public exploit EPSS 65%

    An issue was discovered in Veritas Backup Exec before 21.2. It supports multiple authentication schemes: SHA authentica…

    KEV Apr 7, 2023
  • High 8.8
    CVE-2021-27878 Exploited · Ransomware Public exploit EPSS 24%

    An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires su…

    KEV Apr 7, 2023
  • High 8.1
    CVE-2021-27876 Exploited · Ransomware Public exploit EPSS 14%

    An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires su…

    KEV Apr 7, 2023
  • High 7.2

    SRS Policy Manager 6.X is affected by an XML External Entity Injection (XXE) vulnerability due to a misconfigured XML p…

  • High 7.0

    Incomplete fix for CVE-2020-9484

    The fix for CVE-2020-9484 was incomplete. When using Apache Tomcat 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41, 8.5.0 to 8.5.61 or 7.0.0. to 7.0.107 with a configuration edge case that was highly unlikely to be used, the Tomcat instance was still vulnerable to CV…

  • High 7.5
    CVE-2021-25122 EPSS 18%

    Apache Tomcat h2c request mix-up

    When responding to new h2c connection requests, Apache Tomcat versions 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41 and 8.5.0 to 8.5.61 could duplicate request headers and a limited amount of request body from one request to another meaning user A and user B could…