CVEs published February 17, 2021
112 CVEs were published on February 17, 2021: 3 critical, 15 high. Browse them by severity, product and exploitation status.
- Published
- 112
- Critical
- 3
- High
- 15
- Medium
- 8
- Low
- 2
- Unrated
- 84
- Now in CISA KEV
- 0
- Fix available
- 12
Most affected products
- Intel(R) Graphics Drivers
- 18
- Advantech
- 5
- Intel(R) E810 Ethernet Controllers
- 4
- Intel(R) Ethernet I210 Controller series of network adapters
- 4
- Intel(R) Server Boards, Server Systems and Compute Modules
- 4
- ChanGate EnterPrise Co. property management system
- 3
- Intel(R) 700-series of Ethernet Controllers
- 3
- Intel(R) 722 Ethernet Controllers
- 3
- Soar Cloud System Co. HR Portal
- 3
- Apache Software Foundation Apache Airflow · apache-airflow
- 2
Critical 3
- CVE-2021-22855Soar Cloud System Co., Ltd. HR Portal - Arbitrary Code ExecutionSoar Cloud System Co. HR Portal
- CVE-2021-22856ChanGate EnterPrise Co., Ltd property management system - SQL InjectionChanGate EnterPrise Co. property management system
- CVE-2021-23885Privilege escalation vulnerability in McAfee Web Gateway (MWG) UIMcAfee Web Gateway
High 15
- CVE-2020-9306Tesla SolarCity Solar Monitoring Gateway through 5.46.43 has a "Use of Hard-coded Credentials" issue because Digi ConnectPort X2e uses a…
- CVE-2020-8625A vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attackISC BIND9
- CVE-2021-27138The boot loader in Das U-Boot before 2021.04-rc2 mishandles use of unit addresses in a FIT.
- CVE-2021-27097The boot loader in Das U-Boot before 2021.04-rc2 mishandles a modified FIT.
- CVE-2020-13555An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1…Advantech
- CVE-2020-13553An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1…Advantech
- CVE-2020-13551An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1…Advantech
- CVE-2020-13552An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1…Advantech
- CVE-2020-13550A local file inclusion vulnerability exists in the installation functionality of Advantech WebAccess/SCADA 9.0.1.Advantech
- CVE-2021-1366Cisco AnyConnect Secure Mobility Client for Windows with VPN Posture (HostScan) Module DLL Hijacking VulnerabilityCisco AnyConnect Secure Mobility Client
- CVE-2021-22854Soar Cloud System Co., Ltd. HR Portal - SQL InjectionSoar Cloud System Co. HR Portal
- CVE-2020-7848The EFM ipTIME C200 IP Camera is affected by a Command Injection vulnerability in /login.cgi?logout=1 script.EFM networks & multimedia ipTIME C200 IP Camera
- CVE-2020-7849UPRISM CURIX arbitrary code execution vulnerabilityuPrism.io CURIX 7.0 Agent
- CVE-2021-22858ChanGate EnterPrise Co., Ltd property management system - Broken AuthenticationChanGate EnterPrise Co. property management system
- CVE-2021-22857ChanGate EnterPrise Co., Ltd property management system - Directory TraversalChanGate EnterPrise Co. property management system
Medium, low and unrated 94
- CVE-2020-12878Digi ConnectPort X2e before 3.2.30.6 allows an attacker to escalate privileges from the python user to root via a symlink attack that uses…
- CVE-2021-27374VertiGIS WebOffice 10.7 SP1 before patch20210202 and 10.8 SP1 before patch20210207 allows attackers to achieve "Zugriff auf Inhalte der…
- CVE-2020-36245GramAddict through 1.2.3 allows remote attackers to execute arbitrary code because of use of UIAutomator2 and ATX-Agent.gramaddict
- CVE-2021-26720avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed as root via /etc/network/if-up.d/avahi-daemon, and allows…
- CVE-2021-26911core/imap/MCIMAPSession.cpp in Canary Mail before 3.22 has Missing SSL Certificate Validation for IMAP in STARTTLS mode.
- CVE-2021-27367Controller/Backend/FileEditController.php and Controller/Backend/FilemanagerController.php in Bolt before 4.1.13 allow Directory Traversal.bolt/core
- CVE-2020-25605Cleartext transmission of sensitive information in Agora Video SDK prior to 3.1 allows a remote attacker to obtain access to audio and…
- CVE-2021-3396OpenNMS Meridian 2016, 2017, 2018 before 2018.1.25, 2019 before 2019.1.16, and 2020 before 2020.1.5, Horizon 1.2 through 27.0.4, and Newts…org.opennms:opennms · org.opennms.features:org.opennms.f… +2
- CVE-2021-1351Cisco Webex Meetings Cross-Site Scripting VulnerabilityCisco Webex Meetings
- CVE-2021-1372Cisco Webex Meetings Desktop App and Webex Productivity Tools for Windows Shared Memory Information Disclosure VulnerabilityCisco Webex Productivity Tools
- CVE-2021-1378Cisco StarOS Denial of Service VulnerabilityCisco ASR 5000 Series Software
- CVE-2021-1412Cisco Identity Services Engine Sensitive Information Disclosure VulnerabilitiesCisco Identity Services Engine Software
- CVE-2021-1416Cisco Identity Services Engine Sensitive Information Disclosure VulnerabilitiesCisco Identity Services Engine Software
- CVE-2021-27224The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a user-mode write access violation starting at WPG+0x0000000000012ec6, which might…
- CVE-2021-27362The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a Read Access Violation on Control Flow starting at WPG!ReadWPG_W+0x0000000000000133…
- CVE-2021-26809PHPGurukul Car Rental Project version 2.0 suffers from a remote shell upload vulnerability in changeimage1.php.
- CVE-2021-25780An arbitrary file upload vulnerability has been identified in posts.php in Baby Care System 1.0.
- CVE-2021-25779Baby Care System v1.0 is vulnerable to SQL injection via the 'id' parameter on the contentsectionpage.php page.
- CVE-2020-36003The id parameter in detail.php of Online Book Store v1.0 is vulnerable to union-based blind SQL injection, which leads to the ability to…
- CVE-2020-36002Seat-Reservation-System 1.0 has a SQL injection vulnerability in index.php in the id parameter where attackers can obtain sensitive…
- CVE-2020-35339In 74cms version 5.0.1, there is a remote code execution vulnerability in /Application/Admin/Controller/ConfigController.class.php and…
- CVE-2021-22173Memory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture fileThe Wireshark Foundation Wireshark
- CVE-2021-22174Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture fileThe Wireshark Foundation Wireshark
- CVE-2021-26697Apache Airflow: Lineage API endpoint for Experimental API missed authentication checkApache Software Foundation Apache Airflow · apache-airflow
- CVE-2021-26559CWE-284 Improper Access Control on Configurations Endpoint for the Stable APIApache Software Foundation Apache Airflow · apache-airflow
Show all 94 entriesShow fewer entries
- CVE-2020-12365Untrusted pointer dereference in some Intel(R) Graphics Drivers before versions 15.33.51.5146, 15.45.32.5145, 15.36.39.5144 and…Intel(R) Graphics Drivers
- CVE-2020-0525Improper access control in firmware for the Intel(R) Ethernet I210 Controller series of network adapters before version 3.30 may allow a…Intel(R) Ethernet I210 Controller series of network adapters
- CVE-2020-0524Improper default permissions in the firmware for the Intel(R) Ethernet I210 Controller series of network adapters before version 3.30 may…Intel(R) Ethernet I210 Controller series of network adapters
- CVE-2020-0523Improper access control in the firmware for the Intel(R) Ethernet I210 Controller series of network adapters before version 3.30 may…Intel(R) Ethernet I210 Controller series of network adapters
- CVE-2020-0522Improper initialization in the firmware for the Intel(R) Ethernet I210 Controller series of network adapters before version 3.30 may allow…Intel(R) Ethernet I210 Controller series of network adapters
- CVE-2020-8765Incorrect default permissions in the installer for the Intel(R) RealSense(TM) DCM may allow a privileged user to potentially enable…Intel(R) RealSense(TM) DCM
- CVE-2020-12339Insufficient control flow management in the API for the Intel(R) Collaboration Suite for WebRTC before version 4.3.1 may allow an…Intel(R) Collaboration Suite for WebRTC
- CVE-2020-12376Use of hard-coded key in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may…Intel(R) Server Boards, Server Systems and Compute Modules
- CVE-2020-12375Heap overflow in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may allow an…Intel(R) Server Boards, Server Systems and Compute Modules
- CVE-2020-12380Out of bounds read in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may allow…Intel(R) Server Boards, Server Systems and Compute Modules
- CVE-2020-12377Insufficient input validation in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47…Intel(R) Server Boards, Server Systems and Compute Modules
- CVE-2020-24451Uncontrolled search path in the Intel(R) Optane(TM) DC Persistent Memory installer for Windows before version 1.00.00.3506 may allow an…Intel(R) Optane(TM) DC Persistent Memory installer for Wind…
- CVE-2020-12373Expired pointer dereference in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially…Intel(R) Graphics Drivers
- CVE-2020-12372Unchecked return value in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable a…Intel(R) Graphics Drivers
- CVE-2020-12371Divide by zero in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable a denial…Intel(R) Graphics Drivers
- CVE-2020-12370Untrusted pointer dereference in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially…Intel(R) Graphics Drivers
- CVE-2020-12384Improper access control in some Intel(R) Graphics Drivers before version 26.20.100.8476 may allow an authenticated user to potentially…Intel(R) Graphics Drivers
- CVE-2020-12386Out-of-bounds write in some Intel(R) Graphics Drivers before version 15.36.39.5143 may allow an authenticated user to potentially enable…Intel(R) Graphics Drivers
- CVE-2020-24448Uncaught exception in some Intel(R) Graphics Drivers before version 15.33.51.5146 may allow an authenticated user to potentially enable…Intel(R) Graphics Drivers
- CVE-2020-12366Insufficient input validation in some Intel(R) Graphics Drivers before version 27.20.100.8587 may allow a privileged user to potentially…Intel(R) Graphics Drivers
- CVE-2020-12385Improper input validation in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially…Intel(R) Graphics Drivers
- CVE-2020-12369Out of bound write in some Intel(R) Graphics Drivers before version 26.20.100.8336 may allow a privileged user to potentially enable…Intel(R) Graphics Drivers
- CVE-2020-12368Integer overflow in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable an…Intel(R) Graphics Drivers
- CVE-2020-12367Integer overflow in some Intel(R) Graphics Drivers before version 26.20.100.8476 may allow a privileged user to potentially enable an…Intel(R) Graphics Drivers
- CVE-2020-0518Improper access control in the Intel(R) HD Graphics Control Panel before version 15.40.46.5144 and 15.36.39.5143 may allow an…Intel(R) HD Graphics Control Panel
- CVE-2020-8678Improper access control for Intel(R) Graphics Drivers before version 15.45.33.5164 and 27.20.100.8280 may allow an authenticated user to…Intel(R) Graphics Drivers
- CVE-2020-24462Out of bounds write in the Intel(R) Graphics Driver before version 15.33.53.5161, 15.36.40.5162, 15.40.47.5166, 15.45.33.5164 and…Intel(R) Graphics Driver
- CVE-2020-12361Use after free in some Intel(R) Graphics Drivers before version 15.33.51.5146 may allow an authenticated user to potentially enable denial…Intel(R) Graphics Drivers
- CVE-2020-0521Insufficient control flow management in some Intel(R) Graphics Drivers before version 15.45.32.5145 may allow an authenticated user to…Intel(R) Graphics Drivers
- CVE-2020-0544Insufficient control flow management in the kernel mode driver for some Intel(R) Graphics Drivers before version 15.36.39.5145 may allow…Intel(R) Graphics Drivers
- CVE-2020-24450Improper conditions check in some Intel(R) Graphics Drivers before versions 26.20.100.8141, 15.45.32.5145 and 15.40.46.5144 may allow an…Intel(R) Graphics Drivers
- CVE-2020-24452Improper input validation in the Intel(R) SGX Platform Software for Windows may allow an authenticated user to potentially enable a denial…Intel(R) SGX Platform Software for Windows*
- CVE-2020-24453Improper input validation in the Intel(R) EPID SDK before version 8, may allow an authenticated user to potentially enable an escalation…Intel(R) EPID SDK
- CVE-2020-24458Incomplete cleanup in some Intel(R) PROSet/Wireless WiFi and Killer (TM) drivers before version 22.0 may allow a privileged user to…Intel(R) PROSet/Wireless WiFi and Killer (TM) drivers
- CVE-2020-24480Out-of-bounds write in the Intel(R) XTU before version 6.5.3.25 may allow a privileged user to potentially enable denial of service via…Intel(R) XTU
- CVE-2020-24481Insecure inherited permissions for the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to…Intel(R) Quartus Prime Pro and Standard edition software
- CVE-2020-24482Improper buffer restrictions in firmware for Intel(R) 7360 Cell Modem before UDE version 9.4.370 may allow unauthenticated user to…Intel(R) 7360 Cell Modem
- CVE-2020-24491Debug message containing addresses of memory transactions in some Intel(R) 10th Generation Core Processors supporting SGX may allow a…Intel(R) 10th Generation Core Processors supporting SGX
- CVE-2020-24500Buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow a privileged user to potentially…Intel(R) E810 Ethernet Controllers
- CVE-2020-24505Insufficient input validation in the firmware for the Intel(R) 700-series of Ethernet Controllers before version 7.3 may allow a…Intel(R) 700-series of Ethernet Controllers
- CVE-2020-24496Insufficient input validation in the firmware for Intel(R) 722 Ethernet Controllers before version 1.4.3 may allow a privileged user to…Intel(R) 722 Ethernet Controllers
- CVE-2020-24501Buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow an unauthenticated user to…Intel(R) E810 Ethernet Controllers
- CVE-2020-24497Insufficient Access Control in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow a privileged user to…Intel(R) E810 Ethernet Controllers
- CVE-2020-24494Insufficient access control in the firmware for the Intel(R) 722 Ethernet Controllers before version 1.4.3 may allow a privileged user to…Intel(R) 722 Ethernet Controllers
- CVE-2020-24498Buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow a privileged user to potentially…Intel(R) E810 Ethernet Controllers
- CVE-2020-24495Insufficient access control in the firmware for the Intel(R) 700-series of Ethernet Controllers before version 7.3 may allow a privileged…Intel(R) 700-series of Ethernet Controllers
- CVE-2020-24493Insufficient access control in the firmware for the Intel(R) 700-series of Ethernet Controllers before version 8.0 may allow a privileged…Intel(R) 700-series of Ethernet Controllers
- CVE-2020-24492Insufficient access control in the firmware for the Intel(R) 722 Ethernet Controllers before version 1.5 may allow a privileged user to…Intel(R) 722 Ethernet Controllers
- CVE-2020-8701Incorrect default permissions in installer for the Intel(R) SSD Toolbox versions before 2/9/2021 may allow a privileged user to…Intel(R) SSD Toolbox versions
- CVE-2020-24503Insufficient access control in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user…Intel(R) Ethernet E810 Adapter drivers for Linux
- CVE-2020-24502Improper input validation in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 and before version 1.4.29.0 for…Intel(R) Ethernet E810 Adapter drivers for Linux before
- CVE-2020-24504Uncontrolled resource consumption in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated…Intel(R) Ethernet E810 Adapter drivers for Linux
- CVE-2021-0109Insecure inherited permissions for the Intel(R) SOC driver package for STK1A32SC before version 604 may allow an authenticated user to…Intel(R) SOC driver package for STK1A32SC
- CVE-2020-24485Improper conditions check in the Intel(R) FPGA OPAE Driver for Linux before kernel version 4.17 may allow an authenticated user to…Intel(R) FPGA OPAE Driver for Linux
- CVE-2021-22853Soar Cloud System Co., Ltd. HR Portal - Broken Access ControlSoar Cloud System Co. HR Portal
- CVE-2021-22553Heap Memory exhaustion in GerritGoogle Gerrit
- CVE-2021-23339HTTP Request Smugglingcom.typesafe.akka:akka-http-core
- CVE-2020-2502Cross-site Scripting Vulnerability in Photo StationQNAP Systems Photo Station
- CVE-2020-2501Stack Buffer Overflow in Surveillance StationQNAP Systems Surveillance Station
- CVE-2021-20655FileZen (V3.0.0 to V4.2.7 and V5.0.0 to V5.0.2) allows a remote attacker with administrator rights to execute arbitrary OS commands via…Soliton Systems K.K. FileZen
- CVE-2021-20653Calsos CSDJ (CSDJ-B 01.08.00 and earlier, CSDJ-H 01.08.00 and earlier, CSDJ-D 01.08.00 and earlier, and CSDJ-A 03.08.00 and earlier)…NEC Platforms Calsos CSDJ
- CVE-2021-26934An issue was discovered in the Linux kernel 4.18 through 5.10.16, as used by Xen.
- CVE-2021-26933An issue was discovered in Xen 4.9 through 4.14.x.
- CVE-2020-12362Integer overflow in the firmware for some Intel(R) Graphics Drivers for Windows * before version 26.20.100.7212 and before Linux kernel…Intel(R) Graphics Drivers for Windows * before
- CVE-2020-12363Improper input validation in some Intel(R) Graphics Drivers for Windows before version 26.20.100.7212 and before Linux kernel version 5.5…Intel(R) Graphics Drivers for Windows* before
- CVE-2020-12364Null pointer reference in some Intel(R) Graphics Drivers for Windows before version 26.20.100.7212 and before version Linux kernel version…Intel(R) Graphics Drivers for Windows* before
- CVE-2021-26930An issue was discovered in the Linux kernel 3.11 through 5.10.16, as used by Xen.
- CVE-2021-26931An issue was discovered in the Linux kernel 2.6.39 through 5.10.16, as used in Xen.
- CVE-2021-26932An issue was discovered in the Linux kernel 3.2 through 5.10.16, as used by Xen.