# CVEs published 2021-02-04

116 CVEs were published on February 4, 2021: 7 critical, 51 high. Days are UTC.

- [CVE-2020-18717](https://cve.now/CVE-2020-18717.md): SQL Injection in ZZZCMS zzzphp 1.7.1 allows remote attackers to execute arbitrary code due to a lack of parameter filtering in inc/zzz\_templ (no CVSS)
- [CVE-2020-18716](https://cve.now/CVE-2020-18716.md): SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in wordAction.php. (no CVSS)
- [CVE-2020-18714](https://cve.now/CVE-2020-18714.md): SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in wordModel.php's getdata fu (no CVSS)
- [CVE-2020-18713](https://cve.now/CVE-2020-18713.md): SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in customerAction.php (no CVSS)
- [CVE-2021-25249](https://cve.now/CVE-2021-25249.md): An out-of-bounds write information disclosure vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Bu (no CVSS, Trend Micro Apex One · Trend Micro OfficeScan +1)
- [CVE-2021-25248](https://cve.now/CVE-2021-25248.md): An out-of-bounds read information disclosure vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Bus (no CVSS, Trend Micro Apex One · Trend Micro OfficeScan +1)
- [CVE-2021-25246](https://cve.now/CVE-2021-25246.md): An improper access control information disclosure vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG SP1, and Worry (no CVSS, Trend Micro Apex One · Trend Micro OfficeScan +1)
- [CVE-2021-25244](https://cve.now/CVE-2021-25244.md): An improper access control vulnerability in Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain various piec (no CVSS, Trend Micro Worry-Free Business Security)
- [CVE-2021-25245](https://cve.now/CVE-2021-25245.md): An improper access control vulnerability in Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain various piec (no CVSS, Trend Micro Worry-Free Business Security)
- [CVE-2021-25243](https://cve.now/CVE-2021-25243.md): An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10. (no CVSS, Trend Micro Apex One · Trend Micro OfficeScan +1)
- [CVE-2021-25241](https://cve.now/CVE-2021-25241.md): A server-side request forgery (SSRF) information disclosure vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 (no CVSS, Trend Micro Apex One · Trend Micro Worry-Free Business Secu…)
- [CVE-2021-25242](https://cve.now/CVE-2021-25242.md): An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10. (no CVSS, Trend Micro Apex One · Trend Micro OfficeScan +1)
- [CVE-2021-25240](https://cve.now/CVE-2021-25240.md): An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10. (no CVSS, Trend Micro Apex One · Trend Micro OfficeScan +1)
- [CVE-2021-25238](https://cve.now/CVE-2021-25238.md): An improper access control information disclosure vulnerability in Trend Micro OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1 c (no CVSS, Trend Micro OfficeScan · Trend Micro Worry-Free Business Se…)
- [CVE-2021-25239](https://cve.now/CVE-2021-25239.md): An improper access control vulnerability in Trend Micro Apex One (on-prem), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 cou (no CVSS, Trend Micro Apex One · Trend Micro OfficeScan +1)
- [CVE-2021-25237](https://cve.now/CVE-2021-25237.md): An improper access control vulnerability in Trend Micro Apex One (on-prem) could allow an unauthenticated user to obtain information about t (no CVSS, Trend Micro Apex One)
- [CVE-2021-25235](https://cve.now/CVE-2021-25235.md): An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated use (no CVSS, Trend Micro Apex One · Trend Micro OfficeScan)
- [CVE-2021-25236](https://cve.now/CVE-2021-25236.md): A server-side request forgery (SSRF) information disclosure vulnerability in Trend Micro OfficeScan XG SP1 and Worry-Free Business Security (no CVSS, Trend Micro OfficeScan · Trend Micro Worry-Free Business Se…)
- [CVE-2021-25234](https://cve.now/CVE-2021-25234.md): An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10. (no CVSS, Trend Micro Apex One · Trend Micro OfficeScan +1)
- [CVE-2021-25232](https://cve.now/CVE-2021-25232.md): An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated use (no CVSS, Trend Micro Apex One · Trend Micro OfficeScan)
- [CVE-2021-25233](https://cve.now/CVE-2021-25233.md): An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10. (no CVSS, Trend Micro Apex One · Trend Micro OfficeScan +1)
- [CVE-2021-25231](https://cve.now/CVE-2021-25231.md): An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10. (no CVSS, Trend Micro Apex One · Trend Micro OfficeScan +1)
- [CVE-2021-25230](https://cve.now/CVE-2021-25230.md): An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated use (no CVSS, Trend Micro Apex One · Trend Micro OfficeScan)
- [CVE-2021-25228](https://cve.now/CVE-2021-25228.md): An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10. (no CVSS, Trend Micro Apex One · Trend Micro OfficeScan +1)
- [CVE-2021-25229](https://cve.now/CVE-2021-25229.md): An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated use (no CVSS, Trend Micro Apex One · Trend Micro OfficeScan)
- [CVE-2021-25227](https://cve.now/CVE-2021-25227.md): Trend Micro Antivirus for Mac 2021 (Consumer) is vulnerable to a memory exhaustion vulnerability that could lead to disabling all the scanni (no CVSS, Trend Micro Antivirus for Mac)
- [CVE-2021-0351](https://cve.now/CVE-2021-0351.md): In wlan driver, there is a possible system crash due to a missing bounds check. (no CVSS, Android)
- [CVE-2021-0350](https://cve.now/CVE-2021-0350.md): In ged, there is a possible system crash due to an improper input validation. (no CVSS, Android)
- [CVE-2021-0349](https://cve.now/CVE-2021-0349.md): In display driver, there is a possible memory corruption due to a use after free. (no CVSS, Android)
- [CVE-2021-0348](https://cve.now/CVE-2021-0348.md): In vpu, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2021-0347](https://cve.now/CVE-2021-0347.md): In ccu, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2021-0346](https://cve.now/CVE-2021-0346.md): In vpu, there is a possible out of bounds write due to an incorrect bounds check. (no CVSS, Android)
- [CVE-2021-0345](https://cve.now/CVE-2021-0345.md): In mobile\_log\_d, there is a possible escalation of privilege due to improper input validation. (no CVSS, Android)
- [CVE-2021-0344](https://cve.now/CVE-2021-0344.md): In mtkpower, there is a possible memory corruption due to a missing bounds check. (no CVSS, Android)
- [CVE-2021-0343](https://cve.now/CVE-2021-0343.md): In kisd, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2021-1290](https://cve.now/CVE-2021-1290.md): Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution Vulnerabilities (CVSS 9.8, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1291](https://cve.now/CVE-2021-1291.md): Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution Vulnerabilities (CVSS 9.8, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1292](https://cve.now/CVE-2021-1292.md): Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution Vulnerabilities (CVSS 9.8, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1293](https://cve.now/CVE-2021-1293.md): Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution Vulnerabilities (CVSS 9.8, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1294](https://cve.now/CVE-2021-1294.md): Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution Vulnerabilities (CVSS 9.8, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1295](https://cve.now/CVE-2021-1295.md): Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution Vulnerabilities (CVSS 9.8, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1296](https://cve.now/CVE-2021-1296.md): Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Arbitrary File Write Vulnerabilities (CVSS 7.5, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1297](https://cve.now/CVE-2021-1297.md): Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Arbitrary File Write Vulnerabilities (CVSS 7.5, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1313](https://cve.now/CVE-2021-1313.md): Cisco IOS XR Software Enf Broker Denial of Service Vulnerability (CVSS 8.6, Cisco IOS XR Software)
- [CVE-2021-1314](https://cve.now/CVE-2021-1314.md): Cisco Small Business RV Series Routers Management Interface Command Injection Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1315](https://cve.now/CVE-2021-1315.md): Cisco Small Business RV Series Routers Management Interface Command Injection Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1316](https://cve.now/CVE-2021-1316.md): Cisco Small Business RV Series Routers Management Interface Command Injection Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1317](https://cve.now/CVE-2021-1317.md): Cisco Small Business RV Series Routers Management Interface Command Injection Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1318](https://cve.now/CVE-2021-1318.md): Cisco Small Business RV Series Routers Management Interface Command Injection Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1319](https://cve.now/CVE-2021-1319.md): Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1320](https://cve.now/CVE-2021-1320.md): Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1321](https://cve.now/CVE-2021-1321.md): Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2020-5032](https://cve.now/CVE-2020-5032.md): IBM QRadar SIEM 7.3 and 7.4 in some configurations may be vulnerable to a temporary denial of service attack when sent particular payloads. (CVSS 3.1, IBM QRadar SIEM)
- [CVE-2020-4828](https://cve.now/CVE-2020-4828.md): IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to web cache poisoning, caused by improper input (CVSS 6.5, IBM API Connect)
- [CVE-2020-4827](https://cve.now/CVE-2020-4827.md): IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to cross-site request forgery which could allow a (CVSS 4.3, IBM API Connect)
- [CVE-2020-4826](https://cve.now/CVE-2020-4826.md): IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to cross-site request forgery which could allow a (CVSS 4.3, IBM API Connect)
- [CVE-2020-4825](https://cve.now/CVE-2020-4825.md): IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to cross-site scripting. (CVSS 5.4, IBM API Connect)
- [CVE-2020-4640](https://cve.now/CVE-2020-4640.md): Certain IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 configurations can result in sensitive information in t (CVSS 3.4, IBM API Connect)
- [CVE-2020-27873](https://cve.now/CVE-2020-27873.md): This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R7450 1.2.0.62\_1 (CVSS 6.5, NETGEAR R7450)
- [CVE-2020-27872](https://cve.now/CVE-2020-27872.md): This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7450 1.2.0.62\_1.0.1 rout (CVSS 8.8, NETGEAR R7450)
- [CVE-2021-1322](https://cve.now/CVE-2021-1322.md): Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1323](https://cve.now/CVE-2021-1323.md): Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1324](https://cve.now/CVE-2021-1324.md): Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1325](https://cve.now/CVE-2021-1325.md): Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1326](https://cve.now/CVE-2021-1326.md): Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1327](https://cve.now/CVE-2021-1327.md): Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1328](https://cve.now/CVE-2021-1328.md): Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1329](https://cve.now/CVE-2021-1329.md): Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1330](https://cve.now/CVE-2021-1330.md): Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1331](https://cve.now/CVE-2021-1331.md): Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1332](https://cve.now/CVE-2021-1332.md): Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1333](https://cve.now/CVE-2021-1333.md): Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1334](https://cve.now/CVE-2021-1334.md): Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1335](https://cve.now/CVE-2021-1335.md): Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1336](https://cve.now/CVE-2021-1336.md): Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1337](https://cve.now/CVE-2021-1337.md): Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1338](https://cve.now/CVE-2021-1338.md): Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1339](https://cve.now/CVE-2021-1339.md): Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1340](https://cve.now/CVE-2021-1340.md): Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1341](https://cve.now/CVE-2021-1341.md): Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1342](https://cve.now/CVE-2021-1342.md): Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1343](https://cve.now/CVE-2021-1343.md): Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1344](https://cve.now/CVE-2021-1344.md): Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1345](https://cve.now/CVE-2021-1345.md): Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1346](https://cve.now/CVE-2021-1346.md): Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1347](https://cve.now/CVE-2021-1347.md): Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1348](https://cve.now/CVE-2021-1348.md): Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities (CVSS 7.2, Cisco Small Business RV Series Router Firmware)
- [CVE-2021-1354](https://cve.now/CVE-2021-1354.md): Cisco Unified Computing System Central Software Improper Certificate Validation Vulnerability (CVSS 4.3, Cisco Unified Computing System Central Software)
- [CVE-2021-1370](https://cve.now/CVE-2021-1370.md): Cisco IOS XR Software for Cisco 8000 Series Routers and Network Convergence System 540 Series Routers Privilege Escalation Vulnerability (CVSS 7.8, Cisco IOS XR Software)
- [CVE-2021-1389](https://cve.now/CVE-2021-1389.md): Cisco IOS XR and Cisco NX-OS Software IPv6 Access Control List Bypass Vulnerability (CVSS 5.8, Cisco IOS XR Software)
- [CVE-2021-1128](https://cve.now/CVE-2021-1128.md): Cisco IOS XR Software Unauthorized Information Disclosure Vulnerability (CVSS 5.5, Cisco IOS XR Software)
- [CVE-2021-1136](https://cve.now/CVE-2021-1136.md): Cisco IOS XR Software for Cisco 8000 Series Routers and Network Convergence System 540 Series Routers Image Verification Vulnerabilities (CVSS 6.7, Cisco IOS XR Software)
- [CVE-2021-1221](https://cve.now/CVE-2021-1221.md): Cisco Webex Meetings and Cisco Webex Meetings Server Software Hyperlink Injection Vulnerability (CVSS 4.1, Cisco WebEx Meetings Server)
- [CVE-2021-1243](https://cve.now/CVE-2021-1243.md): Cisco IOS XR Software SNMP Management Plane Protection ACL Bypass Vulnerability (CVSS 5.3, Cisco IOS XR Software)
- [CVE-2021-1244](https://cve.now/CVE-2021-1244.md): Cisco IOS XR Software for Cisco 8000 Series Routers and Network Convergence System 540 Series Routers Image Verification Vulnerabilities (CVSS 6.7, Cisco IOS XR Software)
- [CVE-2021-1266](https://cve.now/CVE-2021-1266.md): Cisco Managed Services Accelerator Denial of Service Vulnerability (CVSS 4.3, Cisco Managed Services Accelerator)
- [CVE-2021-1268](https://cve.now/CVE-2021-1268.md): Cisco IOS XR Software IPv6 Flood Denial of Service Vulnerability (CVSS 7.4, Cisco IOS XR Software)
- [CVE-2021-1288](https://cve.now/CVE-2021-1288.md): Cisco IOS XR Software Enf Broker Denial of Service Vulnerability (CVSS 8.6, Cisco IOS XR Software)
- [CVE-2021-1289](https://cve.now/CVE-2021-1289.md): Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution Vulnerabilities (CVSS 9.8, Cisco Small Business RV Series Router Firmware)
- [CVE-2020-28449](https://cve.now/CVE-2020-28449.md): Prototype Pollution (CVSS 8.6, decal)
- [CVE-2020-28450](https://cve.now/CVE-2020-28450.md): Prototype Pollution (CVSS 8.6, decal)
- [CVE-2020-16194](https://cve.now/CVE-2020-16194.md): An Insecure Direct Object Reference (IDOR) vulnerability was found in Prestashop Opart devis \< 4.0.2. (no CVSS)
- [CVE-2020-14246](https://cve.now/CVE-2020-14246.md): HCL OneTest Performance V9.5, V10.0, V10.1 uses basic authentication which is relatively weak. (no CVSS, HCL OneTest Performance)
- [CVE-2020-14247](https://cve.now/CVE-2020-14247.md): HCL OneTest Performance V9.5, V10.0, V10.1 contains an inadequate session timeout, which could allow an attacker time to guess and use a val (no CVSS, HCL OneTest Performance)
- [CVE-2020-13586](https://cve.now/CVE-2020-13586.md): A memory corruption vulnerability exists in the Excel Document SST Record 0x00fc functionality of SoftMaker Software GmbH SoftMaker Office P (CVSS 8.8, Softmaker)
- [CVE-2020-14245](https://cve.now/CVE-2020-14245.md): HCL OneTest UI V9.5, V10.0, and V10.1 does not perform authentication for functionality that either requires a provable user identity or con (no CVSS, HCL OneTest UI)
- [CVE-2020-6088](https://cve.now/CVE-2020-6088.md): An exploitable denial of service vulnerability exists in the ENIP Request Path Network Segment functionality of Allen-Bradley Flex IO 1794-A (CVSS 7.5, Allen-Bradley)
- [CVE-2020-27249](https://cve.now/CVE-2020-27249.md): A specially crafted document can cause the document parser to copy data from a particular record type into a static-sized buffer within an o (CVSS 8.8, Softmaker)
- [CVE-2020-27248](https://cve.now/CVE-2020-27248.md): A specially crafted document can cause the document parser to copy data from a particular record type into a static-sized buffer within an o (CVSS 8.8, Softmaker)
- [CVE-2020-27247](https://cve.now/CVE-2020-27247.md): A specially crafted document can cause the document parser to copy data from a particular record type into a static-sized buffer within an o (CVSS 8.8, Softmaker)
- [CVE-2020-13579](https://cve.now/CVE-2020-13579.md): An exploitable integer overflow vulnerability exists in the PlanMaker document parsing functionality of SoftMaker Office 2021’s PlanMaker ap (CVSS 8.8, Softmaker Software)
- [CVE-2020-13580](https://cve.now/CVE-2020-13580.md): An exploitable heap-based buffer overflow vulnerability exists in the PlanMaker document parsing functionality of SoftMaker Office 2021’s Pl (CVSS 8.8, Softmaker Software)
- [CVE-2021-26687](https://cve.now/CVE-2021-26687.md): An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. (no CVSS)
- [CVE-2021-26688](https://cve.now/CVE-2021-26688.md): An issue was discovered on LG Wing mobile devices with Android OS 10 software. (no CVSS)
- [CVE-2021-26689](https://cve.now/CVE-2021-26689.md): An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. (no CVSS)
- [CVE-2021-3401](https://cve.now/CVE-2021-3401.md): Bitcoin Core before 0.19.0 might allow remote attackers to execute arbitrary code when another application unsafely passes the -platformplug (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-02-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.