# CVEs published 2021-02-07

6 CVEs were published on February 7, 2021: 0 critical, 0 high. Days are UTC.

- [CVE-2021-26754](https://cve.now/CVE-2021-26754.md): wpDataTables before 3.4.1 mishandles order direction for server-side tables, aka admin-ajax.php?action=get\_wdtable order\[0\]\[dir\] SQL injecti (no CVSS)
- [CVE-2021-22161](https://cve.now/CVE-2021-22161.md): In OpenWrt 19.07.x before 19.07.7, when IPv6 is used, a routing loop can occur that generates excessive network traffic between an affected (no CVSS)
- [CVE-2021-26843](https://cve.now/CVE-2021-26843.md): An issue was discovered in sthttpd through 2.27.1. (no CVSS)
- [CVE-2020-36243](https://cve.now/CVE-2020-36243.md): The Patient Portal of OpenEMR 5.0.2.1 is affected by a Command Injection vulnerability in /interface/main/backup.php. (no CVSS)
- [CVE-2020-36242](https://cve.now/CVE-2020-36242.md): In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result (no CVSS, cryptography)
- [CVE-2021-3122](https://cve.now/CVE-2021-3122.md): CMCAgent in NCR Command Center Agent 16.3 on Aloha POS/BOH servers permits the submission of a runCommand parameter (within an XML document (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-02-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.