CVEs published February 5, 2021
38 CVEs were published on February 5, 2021: 0 critical, 0 high.
- Published
- 38
- Critical
- 0
- High
- 0
- Medium
- 3
- Low
- 0
- Unrated
- 35
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- code.gitea.io/gitea · github.com/go-gitea/gitea
- 1
- dnsmasq
- 1
- helm · helm.sh/helm/v3
- 1
- HUAWEI Mate
- 1
- IBM PowerHA
- 1
- ImageMagick
- 1
- J. Peters Name Directory
- 1
- NVIDIA GeForce Experience Software
- 1
- october/rain
- 1
- oncall
- 1
Medium, low and unrated 38
- CVE-2021-22301Mate 30 10.0.0.203(C00E201R7P2) have a buffer overflow vulnerability.HUAWEI Mate
- CVE-2020-5812Nessus AMI versions 8.12.0 and earlier were found to either not validate, or incorrectly validate, a certificate which could allow an attackTenable Nessus AMI
- CVE-2020-11836OPPO Android Phone with MTK chipset and Android 8.1/9/10/11 versions have an information leak vulnerability.OPPO Android Phone with MTK chipset
- CVE-2020-14312A flaw was found in the default configuration of dnsmasq, as shipped with Fedora versions prior to 31 and in all versions Red Hat Enterprisednsmasq
- CVE-2021-21303Injection attack in Helmhelm · helm.sh/helm/v3
- CVE-2021-3229Denial of service in ASUSWRT ASUS RT-AX3000 firmware versions 3.0.0.4.384_10177 and earlier versions allows an attacker to disrupt the use o
- CVE-2021-1072NVIDIA GeForce Experience, all versions prior to 3.21, contains a vulnerability in GameStream (rxdiag.dll) where an arbitrary file deletion NVIDIA GeForce Experience Software
- CVE-2020-10375An issue was discovered in New Media Smarty before 9.10.
- CVE-2020-10552An issue was discovered in Psyprax before 3.2.2.
- CVE-2020-10553An issue was discovered in Psyprax before 3.2.2.
- CVE-2020-10554An issue was discovered in Psyprax beforee 3.2.2.
- CVE-2020-10857Zulip Desktop before 5.0.0 improperly uses shell.openExternal and shell.openItem with untrusted content, leading to remote code execution.
- CVE-2020-10858Zulip Desktop before 5.0.0 allows attackers to perform recording via the webcam and microphone due to a missing permission request handler.
- CVE-2020-9453In Epson iProjection v2.30, the driver file EMP_MPAU.sys allows local users to cause a denial of service (BSOD) or possibly have unspecified
- CVE-2020-12122In Max Secure Max Spyware Detector 1.0.0.044, the driver file (MaxProc64.sys) allows local users to cause a denial of service (BSOD) or poss
- CVE-2020-10234The AscRegistryFilter.sys kernel driver in IObit Advanced SystemCare 13.2 allows an unprivileged user to send an IOCTL to the device driver.
- CVE-2020-9014In Epson iProjection v2.30, the driver file (EMP_NSAU.sys) allows local users to cause a denial of service (BSOD) via crafted input to the v
- CVE-2020-18750Buffer overflow in pdf2json 0.69 allows local users to execute arbitrary code by converting a crafted PDF file.
- CVE-2021-26722LinkedIn Oncall through 1.4.0 allows reflected XSS via /query because of mishandling of the "No results found for" message in the search baroncall
- CVE-2021-3258Question2Answer Q2A Ultimate SEO Version 1.3 is affected by cross-site scripting (XSS), which may lead to arbitrary remote code execution.
- CVE-2020-18737An issue was discovered in Typora 0.9.67.
- CVE-2021-3382Stack buffer overflow vulnerability in gitea 1.9.0 through 1.13.1 allows remote attackers to cause a denial of service (crash) via vectors rcode.gitea.io/gitea · github.com/go-gitea/gitea
- CVE-2020-4832IBM PowerHA 7.2 could allow a local attacker to obtain sensitive information from temporary directories after a discovery failure occurs.IBM PowerHA
- CVE-2021-3333Opmantek Open-AudIT 4.0.1 is affected by cross-site scripting (XSS).
- CVE-2021-20623Video Insight VMS versions prior to 7.8 allows a remote attacker to execute arbitrary code with the system user privilege by sending a speciPanasonic Video Insight VMS
- CVE-2021-20652Cross-site request forgery (CSRF) vulnerability in Name Directory 1.17.4 and earlier allows remote attackers to hijack the authentication ofJ. Peters Name Directory
- CVE-2020-10539An issue was discovered in Epikur before 20.1.1.
- CVE-2020-10538An issue was discovered in Epikur before 20.1.1.
- CVE-2020-10537An issue was discovered in Epikur before 20.1.1.
- CVE-2020-8807In Electric Coin Company Zcashd before 2.1.1-1, the time offset between messages could be leveraged to obtain sensitive information about th
- CVE-2020-8806Electric Coin Company Zcashd before 2.1.1-1 allows attackers to trigger consensus failure and double spending.
- CVE-2020-35765doFilter in com.adventnet.appmanager.filter.UriCollector in Zoho ManageEngine Applications Manager through 14930 allows an authenticated SQL
- CVE-2021-26710A cross-site scripting (XSS) issue in the login panel in Redwood Report2Web 4.3.4.5 and 4.5.3 allows remote attackers to inject JavaScript v
- CVE-2021-26711A frame-injection issue in the online help in Redwood Report2Web 4.3.4.5 allows remote attackers to render an external resource inside a fra
- CVE-2021-26708A local privilege escalation was discovered in the Linux kernel before 5.10.13.
- CVE-2020-36241autoar-extractor.c in GNOME gnome-autoar through 0.2.4, as used by GNOME Shell, Nautilus, and other software, allows Directory Traversal dur
- CVE-2021-3311An issue was discovered in October through build 471.october/rain
- CVE-2021-20176A divide-by-zero flaw was found in ImageMagick 6.9.11-57 and 7.0.10-57 in gem.c.ImageMagick