# CVEs published 2021-02-05

38 CVEs were published on February 5, 2021: 0 critical, 0 high. Days are UTC.

- [CVE-2021-22301](https://cve.now/CVE-2021-22301.md): Mate 30 10.0.0.203(C00E201R7P2) have a buffer overflow vulnerability. (no CVSS, HUAWEI Mate)
- [CVE-2020-5812](https://cve.now/CVE-2020-5812.md): Nessus AMI versions 8.12.0 and earlier were found to either not validate, or incorrectly validate, a certificate which could allow an attack (no CVSS, Tenable Nessus AMI)
- [CVE-2020-11836](https://cve.now/CVE-2020-11836.md): OPPO Android Phone with MTK chipset and Android 8.1/9/10/11 versions have an information leak vulnerability. (no CVSS, OPPO Android Phone with MTK chipset)
- [CVE-2020-14312](https://cve.now/CVE-2020-14312.md): A flaw was found in the default configuration of dnsmasq, as shipped with Fedora versions prior to 31 and in all versions Red Hat Enterprise (no CVSS, dnsmasq)
- [CVE-2021-21303](https://cve.now/CVE-2021-21303.md): Injection attack in Helm (CVSS 5.9, helm · helm.sh/helm/v3)
- [CVE-2021-3229](https://cve.now/CVE-2021-3229.md): Denial of service in ASUSWRT ASUS RT-AX3000 firmware versions 3.0.0.4.384\_10177 and earlier versions allows an attacker to disrupt the use o (no CVSS)
- [CVE-2021-1072](https://cve.now/CVE-2021-1072.md): NVIDIA GeForce Experience, all versions prior to 3.21, contains a vulnerability in GameStream (rxdiag.dll) where an arbitrary file deletion (CVSS 6.0, NVIDIA GeForce Experience Software)
- [CVE-2020-10375](https://cve.now/CVE-2020-10375.md): An issue was discovered in New Media Smarty before 9.10. (no CVSS)
- [CVE-2020-10552](https://cve.now/CVE-2020-10552.md): An issue was discovered in Psyprax before 3.2.2. (no CVSS)
- [CVE-2020-10553](https://cve.now/CVE-2020-10553.md): An issue was discovered in Psyprax before 3.2.2. (no CVSS)
- [CVE-2020-10554](https://cve.now/CVE-2020-10554.md): An issue was discovered in Psyprax beforee 3.2.2. (no CVSS)
- [CVE-2020-10857](https://cve.now/CVE-2020-10857.md): Zulip Desktop before 5.0.0 improperly uses shell.openExternal and shell.openItem with untrusted content, leading to remote code execution. (no CVSS)
- [CVE-2020-10858](https://cve.now/CVE-2020-10858.md): Zulip Desktop before 5.0.0 allows attackers to perform recording via the webcam and microphone due to a missing permission request handler. (no CVSS)
- [CVE-2020-9453](https://cve.now/CVE-2020-9453.md): In Epson iProjection v2.30, the driver file EMP\_MPAU.sys allows local users to cause a denial of service (BSOD) or possibly have unspecified (no CVSS)
- [CVE-2020-12122](https://cve.now/CVE-2020-12122.md): In Max Secure Max Spyware Detector 1.0.0.044, the driver file (MaxProc64.sys) allows local users to cause a denial of service (BSOD) or poss (no CVSS)
- [CVE-2020-10234](https://cve.now/CVE-2020-10234.md): The AscRegistryFilter.sys kernel driver in IObit Advanced SystemCare 13.2 allows an unprivileged user to send an IOCTL to the device driver. (no CVSS)
- [CVE-2020-9014](https://cve.now/CVE-2020-9014.md): In Epson iProjection v2.30, the driver file (EMP\_NSAU.sys) allows local users to cause a denial of service (BSOD) via crafted input to the v (no CVSS)
- [CVE-2020-18750](https://cve.now/CVE-2020-18750.md): Buffer overflow in pdf2json 0.69 allows local users to execute arbitrary code by converting a crafted PDF file. (no CVSS)
- [CVE-2021-26722](https://cve.now/CVE-2021-26722.md): LinkedIn Oncall through 1.4.0 allows reflected XSS via /query because of mishandling of the "No results found for" message in the search bar (no CVSS, oncall)
- [CVE-2021-3258](https://cve.now/CVE-2021-3258.md): Question2Answer Q2A Ultimate SEO Version 1.3 is affected by cross-site scripting (XSS), which may lead to arbitrary remote code execution. (no CVSS)
- [CVE-2020-18737](https://cve.now/CVE-2020-18737.md): An issue was discovered in Typora 0.9.67. (no CVSS)
- [CVE-2021-3382](https://cve.now/CVE-2021-3382.md): Stack buffer overflow vulnerability in gitea 1.9.0 through 1.13.1 allows remote attackers to cause a denial of service (crash) via vectors r (no CVSS, code.gitea.io/gitea · github.com/go-gitea/gitea)
- [CVE-2020-4832](https://cve.now/CVE-2020-4832.md): IBM PowerHA 7.2 could allow a local attacker to obtain sensitive information from temporary directories after a discovery failure occurs. (CVSS 6.2, IBM PowerHA)
- [CVE-2021-3333](https://cve.now/CVE-2021-3333.md): Opmantek Open-AudIT 4.0.1 is affected by cross-site scripting (XSS). (no CVSS)
- [CVE-2021-20623](https://cve.now/CVE-2021-20623.md): Video Insight VMS versions prior to 7.8 allows a remote attacker to execute arbitrary code with the system user privilege by sending a speci (no CVSS, Panasonic Video Insight VMS)
- [CVE-2021-20652](https://cve.now/CVE-2021-20652.md): Cross-site request forgery (CSRF) vulnerability in Name Directory 1.17.4 and earlier allows remote attackers to hijack the authentication of (no CVSS, J. Peters Name Directory)
- [CVE-2020-10539](https://cve.now/CVE-2020-10539.md): An issue was discovered in Epikur before 20.1.1. (no CVSS)
- [CVE-2020-10538](https://cve.now/CVE-2020-10538.md): An issue was discovered in Epikur before 20.1.1. (no CVSS)
- [CVE-2020-10537](https://cve.now/CVE-2020-10537.md): An issue was discovered in Epikur before 20.1.1. (no CVSS)
- [CVE-2020-8807](https://cve.now/CVE-2020-8807.md): In Electric Coin Company Zcashd before 2.1.1-1, the time offset between messages could be leveraged to obtain sensitive information about th (no CVSS)
- [CVE-2020-8806](https://cve.now/CVE-2020-8806.md): Electric Coin Company Zcashd before 2.1.1-1 allows attackers to trigger consensus failure and double spending. (no CVSS)
- [CVE-2020-35765](https://cve.now/CVE-2020-35765.md): doFilter in com.adventnet.appmanager.filter.UriCollector in Zoho ManageEngine Applications Manager through 14930 allows an authenticated SQL (no CVSS)
- [CVE-2021-26710](https://cve.now/CVE-2021-26710.md): A cross-site scripting (XSS) issue in the login panel in Redwood Report2Web 4.3.4.5 and 4.5.3 allows remote attackers to inject JavaScript v (no CVSS)
- [CVE-2021-26711](https://cve.now/CVE-2021-26711.md): A frame-injection issue in the online help in Redwood Report2Web 4.3.4.5 allows remote attackers to render an external resource inside a fra (no CVSS)
- [CVE-2021-26708](https://cve.now/CVE-2021-26708.md): A local privilege escalation was discovered in the Linux kernel before 5.10.13. (no CVSS)
- [CVE-2020-36241](https://cve.now/CVE-2020-36241.md): autoar-extractor.c in GNOME gnome-autoar through 0.2.4, as used by GNOME Shell, Nautilus, and other software, allows Directory Traversal dur (no CVSS)
- [CVE-2021-3311](https://cve.now/CVE-2021-3311.md): An issue was discovered in October through build 471. (no CVSS, october/rain)
- [CVE-2021-20176](https://cve.now/CVE-2021-20176.md): A divide-by-zero flaw was found in ImageMagick 6.9.11-57 and 7.0.10-57 in gem.c. (no CVSS, ImageMagick)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-02-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.