CVEs published February 4, 2021
116 CVEs were published on February 4, 2021: 7 critical, 51 high.
- Published
- 116
- Critical
- 7
- High
- 51
- Medium
- 13
- Low
- 2
- Unrated
- 43
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Cisco Small Business RV Series Router Firmware
- 44
- Trend Micro Apex One · Trend Micro OfficeScan +1
- 11
- Android
- 9
- Cisco IOS XR Software
- 9
- IBM API Connect
- 5
- Softmaker
- 4
- Trend Micro Apex One · Trend Micro OfficeScan
- 4
- decal
- 2
- HCL OneTest Performance
- 2
- NETGEAR R7450
- 2
Critical 7
- CVE-2021-1290Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1291Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1292Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1293Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1294Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1295Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1289Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution VulnerabilitiesCisco Small Business RV Series Router Firmware
High 51
- CVE-2021-1296Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Arbitrary File Write VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1297Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Arbitrary File Write VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1313Cisco IOS XR Software Enf Broker Denial of Service VulnerabilityCisco IOS XR Software
- CVE-2021-1314Cisco Small Business RV Series Routers Management Interface Command Injection VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1315Cisco Small Business RV Series Routers Management Interface Command Injection VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1316Cisco Small Business RV Series Routers Management Interface Command Injection VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1317Cisco Small Business RV Series Routers Management Interface Command Injection VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1318Cisco Small Business RV Series Routers Management Interface Command Injection VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1319Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1320Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1321Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2020-27872This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7450 1.2.0.62_1.0.1 routNETGEAR R7450
- CVE-2021-1322Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1323Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1324Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1325Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1326Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1327Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1328Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1329Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1330Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1331Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1332Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1333Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1334Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1335Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1336Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1337Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1338Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1339Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1340Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1341Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1342Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1343Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1344Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1345Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1346Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1347Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1348Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1370Cisco IOS XR Software for Cisco 8000 Series Routers and Network Convergence System 540 Series Routers Privilege Escalation VulnerabilityCisco IOS XR Software
- CVE-2021-1268Cisco IOS XR Software IPv6 Flood Denial of Service VulnerabilityCisco IOS XR Software
- CVE-2021-1288Cisco IOS XR Software Enf Broker Denial of Service VulnerabilityCisco IOS XR Software
- CVE-2020-28449Prototype Pollutiondecal
- CVE-2020-28450Prototype Pollutiondecal
- CVE-2020-13586A memory corruption vulnerability exists in the Excel Document SST Record 0x00fc functionality of SoftMaker Software GmbH SoftMaker Office PSoftmaker
- CVE-2020-6088An exploitable denial of service vulnerability exists in the ENIP Request Path Network Segment functionality of Allen-Bradley Flex IO 1794-AAllen-Bradley
- CVE-2020-27249A specially crafted document can cause the document parser to copy data from a particular record type into a static-sized buffer within an oSoftmaker
- CVE-2020-27248A specially crafted document can cause the document parser to copy data from a particular record type into a static-sized buffer within an oSoftmaker
- CVE-2020-27247A specially crafted document can cause the document parser to copy data from a particular record type into a static-sized buffer within an oSoftmaker
- CVE-2020-13579An exploitable integer overflow vulnerability exists in the PlanMaker document parsing functionality of SoftMaker Office 2021’s PlanMaker apSoftmaker Software
- CVE-2020-13580An exploitable heap-based buffer overflow vulnerability exists in the PlanMaker document parsing functionality of SoftMaker Office 2021’s PlSoftmaker Software
Medium, low and unrated 58
- CVE-2020-18717SQL Injection in ZZZCMS zzzphp 1.7.1 allows remote attackers to execute arbitrary code due to a lack of parameter filtering in inc/zzz_templ
- CVE-2020-18716SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in wordAction.php.
- CVE-2020-18714SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in wordModel.php's getdata fu
- CVE-2020-18713SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in customerAction.php
- CVE-2021-25249An out-of-bounds write information disclosure vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free BuTrend Micro Apex One · Trend Micro OfficeScan +1
- CVE-2021-25248An out-of-bounds read information disclosure vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free BusTrend Micro Apex One · Trend Micro OfficeScan +1
- CVE-2021-25246An improper access control information disclosure vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG SP1, and WorryTrend Micro Apex One · Trend Micro OfficeScan +1
- CVE-2021-25244An improper access control vulnerability in Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain various piecTrend Micro Worry-Free Business Security
- CVE-2021-25245An improper access control vulnerability in Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain various piecTrend Micro Worry-Free Business Security
- CVE-2021-25243An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.Trend Micro Apex One · Trend Micro OfficeScan +1
- CVE-2021-25241A server-side request forgery (SSRF) information disclosure vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 Trend Micro Apex One · Trend Micro Worry-Free Business Secu…
- CVE-2021-25242An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.Trend Micro Apex One · Trend Micro OfficeScan +1
- CVE-2021-25240An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.Trend Micro Apex One · Trend Micro OfficeScan +1
- CVE-2021-25238An improper access control information disclosure vulnerability in Trend Micro OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1 cTrend Micro OfficeScan · Trend Micro Worry-Free Business Se…
- CVE-2021-25239An improper access control vulnerability in Trend Micro Apex One (on-prem), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 couTrend Micro Apex One · Trend Micro OfficeScan +1
- CVE-2021-25237An improper access control vulnerability in Trend Micro Apex One (on-prem) could allow an unauthenticated user to obtain information about tTrend Micro Apex One
- CVE-2021-25235An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated useTrend Micro Apex One · Trend Micro OfficeScan
- CVE-2021-25236A server-side request forgery (SSRF) information disclosure vulnerability in Trend Micro OfficeScan XG SP1 and Worry-Free Business Security Trend Micro OfficeScan · Trend Micro Worry-Free Business Se…
- CVE-2021-25234An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.Trend Micro Apex One · Trend Micro OfficeScan +1
- CVE-2021-25232An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated useTrend Micro Apex One · Trend Micro OfficeScan
- CVE-2021-25233An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.Trend Micro Apex One · Trend Micro OfficeScan +1
- CVE-2021-25231An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.Trend Micro Apex One · Trend Micro OfficeScan +1
- CVE-2021-25230An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated useTrend Micro Apex One · Trend Micro OfficeScan
- CVE-2021-25228An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.Trend Micro Apex One · Trend Micro OfficeScan +1
- CVE-2021-25229An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated useTrend Micro Apex One · Trend Micro OfficeScan
- CVE-2021-25227Trend Micro Antivirus for Mac 2021 (Consumer) is vulnerable to a memory exhaustion vulnerability that could lead to disabling all the scanniTrend Micro Antivirus for Mac
- CVE-2021-0351In wlan driver, there is a possible system crash due to a missing bounds check.Android
- CVE-2021-0350In ged, there is a possible system crash due to an improper input validation.Android
- CVE-2021-0349In display driver, there is a possible memory corruption due to a use after free.Android
- CVE-2021-0348In vpu, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2021-0347In ccu, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2021-0346In vpu, there is a possible out of bounds write due to an incorrect bounds check.Android
- CVE-2021-0345In mobile_log_d, there is a possible escalation of privilege due to improper input validation.Android
- CVE-2021-0344In mtkpower, there is a possible memory corruption due to a missing bounds check.Android
- CVE-2021-0343In kisd, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2020-5032IBM QRadar SIEM 7.3 and 7.4 in some configurations may be vulnerable to a temporary denial of service attack when sent particular payloads.IBM QRadar SIEM
- CVE-2020-4828IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to web cache poisoning, caused by improper input IBM API Connect
- CVE-2020-4827IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to cross-site request forgery which could allow aIBM API Connect
- CVE-2020-4826IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to cross-site request forgery which could allow aIBM API Connect
- CVE-2020-4825IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to cross-site scripting.IBM API Connect
- CVE-2020-4640Certain IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 configurations can result in sensitive information in tIBM API Connect
- CVE-2020-27873This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R7450 1.2.0.62_1NETGEAR R7450
- CVE-2021-1354Cisco Unified Computing System Central Software Improper Certificate Validation VulnerabilityCisco Unified Computing System Central Software
- CVE-2021-1389Cisco IOS XR and Cisco NX-OS Software IPv6 Access Control List Bypass VulnerabilityCisco IOS XR Software
- CVE-2021-1128Cisco IOS XR Software Unauthorized Information Disclosure VulnerabilityCisco IOS XR Software
- CVE-2021-1136Cisco IOS XR Software for Cisco 8000 Series Routers and Network Convergence System 540 Series Routers Image Verification VulnerabilitiesCisco IOS XR Software
- CVE-2021-1221Cisco Webex Meetings and Cisco Webex Meetings Server Software Hyperlink Injection VulnerabilityCisco WebEx Meetings Server
- CVE-2021-1243Cisco IOS XR Software SNMP Management Plane Protection ACL Bypass VulnerabilityCisco IOS XR Software
- CVE-2021-1244Cisco IOS XR Software for Cisco 8000 Series Routers and Network Convergence System 540 Series Routers Image Verification VulnerabilitiesCisco IOS XR Software
- CVE-2021-1266Cisco Managed Services Accelerator Denial of Service VulnerabilityCisco Managed Services Accelerator
- CVE-2020-16194An Insecure Direct Object Reference (IDOR) vulnerability was found in Prestashop Opart devis < 4.0.2.
- CVE-2020-14246HCL OneTest Performance V9.5, V10.0, V10.1 uses basic authentication which is relatively weak.HCL OneTest Performance
- CVE-2020-14247HCL OneTest Performance V9.5, V10.0, V10.1 contains an inadequate session timeout, which could allow an attacker time to guess and use a valHCL OneTest Performance
- CVE-2020-14245HCL OneTest UI V9.5, V10.0, and V10.1 does not perform authentication for functionality that either requires a provable user identity or conHCL OneTest UI
- CVE-2021-26687An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software.
- CVE-2021-26688An issue was discovered on LG Wing mobile devices with Android OS 10 software.
- CVE-2021-26689An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software.
- CVE-2021-3401Bitcoin Core before 0.19.0 might allow remote attackers to execute arbitrary code when another application unsafely passes the -platformplug