CVEs published February 10, 2021
113 CVEs were published on February 10, 2021: 6 critical, 21 high. 1 is now in CISA KEV.
- Published
- 113
- Critical
- 6
- High
- 21
- Medium
- 7
- Low
- 1
- Unrated
- 78
- Now in CISA KEV
- 1
- Fix available
- 17
Most affected products
- Android
- 19
- McAfee Endpoint Security (ENS) for Windows
- 5
- Accusoft
- 4
- Genivia
- 4
- McAfee Total Protection
- 3
- SoftMaker
- 3
- Prusa Research
- 2
- SolarWinds Orion Platform
- 2
- Android · com.squareup.okhttp3:okhttp
- 1
- autovance ftp-srv · ftp-srv
- 1
Critical 6
- CVE-2020-13572A heap overflow vulnerability exists in the way the GIF parser decodes LZW compressed streams in Accusoft ImageGear 19.8.Accusoft
- CVE-2020-13561An out-of-bounds write vulnerability exists in the TIFF parser of Accusoft ImageGear 19.8.Accusoft
- CVE-2020-13571An out-of-bounds write vulnerability exists in the SGI RLE decompression functionality of Accusoft ImageGear 19.8.Accusoft
- CVE-2020-13585An out-of-bounds write vulnerability exists in the PSD Header processing functionality of Accusoft ImageGear 19.8.Accusoft
- CVE-2021-3033Prisma Cloud Compute: SAML Authentication Bypass Vulnerability in ConsolePalo Alto Networks Prisma Cloud Compute
- CVE-2020-13576A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107.Genivia
High 21
- CVE-2020-27874This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat 7.0.18.Tencent WeChat
- CVE-2020-27871This vulnerability allows remote attackers to create arbitrary files on affected installations of SolarWinds Orion Platform 2020.2.1.SolarWinds Orion Platform
- CVE-2020-27870This vulnerability allows remote attackers to disclose sensitive information on affected installations of SolarWinds Orion Platform 2020.2.1SolarWinds Orion Platform
- CVE-2020-28595An out-of-bounds write vulnerability exists in the Obj.cpp load_obj() functionality of Prusa Research PrusaSlicer 2.2.0 and Master (commit 4Prusa Research
- CVE-2020-28596A stack-based buffer overflow vulnerability exists in the Objparser::objparse() functionality of Prusa Research PrusaSlicer 2.2.0 and MasterPrusa Research
- CVE-2020-27250In SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 (Revision 1014), a specially crafted document can cause the document parser to coSoftMaker
- CVE-2020-13583A denial-of-service vulnerability exists in the HTTP Server functionality of Micrium uC-HTTP 3.01.00.Micrium
- CVE-2020-13581In SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 (Revision 1014), a specially crafted document can cause the document parser to coSoftMaker
- CVE-2020-13575A denial-of-service vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107.Genivia gSOAP
- CVE-2020-13548In Foxit Reader 10.1.0.37527, a specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code Foxit
- CVE-2021-20353IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML dIBM WebSphere Application Server
- CVE-2020-5023IBM Spectrum Protect Plus 10.1.0 through 10.1.7 could allow a remote user to inject arbitrary data iwhich could cause the serivce to crash dIBM Spectrum Protect Plus
- CVE-2020-13546In SoftMaker Software GmbH SoftMaker Office TextMaker 2021 (revision 1014), a specially crafted document can cause the document parser to miSoftMaker
- CVE-2021-23874McAfee Total Protection (MTP) privilege escalation vulnerabilityMcAfee Total Protection
- CVE-2021-23876McAfee Total Protection (MTP) Bypass Remote Procedure call vulnerabilityMcAfee Total Protection
- CVE-2021-23873McAfee Total Protection (MTP) privilege escalation vulnerabilityMcAfee Total Protection
- CVE-2021-23882Improper Access Control in the ENS installerMcAfee Endpoint Security (ENS) for Windows
- CVE-2021-23878Clear text storage of sensitive Information in ENSMcAfee Endpoint Security (ENS) for Windows
- CVE-2020-13574A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107.Genivia
- CVE-2020-13577A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107.Genivia
- CVE-2020-13578A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107.Genivia
Medium, low and unrated 86
- CVE-2021-25251The Trend Micro Security 2020 and 2021 families of consumer products are vulnerable to a code injection vulnerability which could allow an aTrend Micro Security
- CVE-2020-24842PNPSCADA 2.200816204020 allows cross-site scripting (XSS), which can execute arbitrary JavaScript in the victim's browser.
- CVE-2021-27186Fluent Bit 1.6.10 has a NULL pointer dereference when an flb_malloc return value is not validated by flb_avro.c or http_server/api/v1/metric
- CVE-2020-8355An internal product security audit of Lenovo XClarity Administrator (LXCA) prior to version 3.1.0 discovered the Windows OS credentials provLenovo XClarity Administrator
- CVE-2021-27185The samba-client package before 4.0.0 for Node.js allows command injection because of the use of process.exec.samba-client
- CVE-2021-21296Denial-of-service in Fleetfleetdm fleet
- CVE-2020-13565An open redirect vulnerability exists in the return_page redirection functionality of phpGACL 3.3.7, OpenEMR 5.0.2 and OpenEMR development vphpGACL
- CVE-2020-16120Unprivileged overlay + shiftfs read accessLinux kernel
- CVE-2020-7021Elasticsearch versions before 7.10.0 and 6.8.14 have an information disclosure issue when audit logging and the emit_request_body option is Elasticsearch · org.elasticsearch:elasticsearch
- CVE-2021-22133The Elastic APM agent for Go versions before 1.11.0 can leak sensitive HTTP header information when logging the details during an applicatioElastic APM Agent for Go · go.elastic.co/apm
- CVE-2021-27139An issue was discovered on FiberHome HG6245D devices through RP2613.
- CVE-2021-27140An issue was discovered on FiberHome HG6245D devices through RP2613.
- CVE-2021-27141An issue was discovered on FiberHome HG6245D devices through RP2613.
- CVE-2021-27142An issue was discovered on FiberHome HG6245D devices through RP2613.
- CVE-2021-27143An issue was discovered on FiberHome HG6245D devices through RP2613.
- CVE-2021-27144An issue was discovered on FiberHome HG6245D devices through RP2613.
- CVE-2021-27145An issue was discovered on FiberHome HG6245D devices through RP2613.
- CVE-2021-27146An issue was discovered on FiberHome HG6245D devices through RP2613.
- CVE-2021-27147An issue was discovered on FiberHome HG6245D devices through RP2613.
- CVE-2021-27148An issue was discovered on FiberHome HG6245D devices through RP2613.
- CVE-2021-27149An issue was discovered on FiberHome HG6245D devices through RP2613.
- CVE-2021-27150An issue was discovered on FiberHome HG6245D devices through RP2613.
- CVE-2021-27151An issue was discovered on FiberHome HG6245D devices through RP2613.
- CVE-2021-27152An issue was discovered on FiberHome HG6245D devices through RP2613.
- CVE-2021-27153An issue was discovered on FiberHome HG6245D devices through RP2613.
- CVE-2021-27154An issue was discovered on FiberHome HG6245D devices through RP2613.
- CVE-2021-27155An issue was discovered on FiberHome HG6245D devices through RP2613.
- CVE-2021-27156An issue was discovered on FiberHome HG6245D devices through RP2613.
- CVE-2021-27157An issue was discovered on FiberHome HG6245D devices through RP2613.
- CVE-2021-27158An issue was discovered on FiberHome HG6245D devices through RP2613.
- CVE-2021-27159An issue was discovered on FiberHome HG6245D devices through RP2613.
- CVE-2021-27160An issue was discovered on FiberHome HG6245D devices through RP2613.
- CVE-2021-27161An issue was discovered on FiberHome HG6245D devices through RP2613.
- CVE-2021-27162An issue was discovered on FiberHome HG6245D devices through RP2613.
- CVE-2021-27163An issue was discovered on FiberHome HG6245D devices through RP2613.
- CVE-2021-27164An issue was discovered on FiberHome HG6245D devices through RP2613.
- CVE-2021-27165An issue was discovered on FiberHome HG6245D devices through RP2613.
- CVE-2021-27166An issue was discovered on FiberHome HG6245D devices through RP2613.
- CVE-2021-27167An issue was discovered on FiberHome HG6245D devices through RP2613.
- CVE-2021-27168An issue was discovered on FiberHome HG6245D devices through RP2613.
- CVE-2021-27169An issue was discovered on FiberHome AN5506-04-FA devices with firmware RP2631.
- CVE-2021-27170An issue was discovered on FiberHome HG6245D devices through RP2613.
- CVE-2021-27171An issue was discovered on FiberHome HG6245D devices through RP2613.
- CVE-2021-27172An issue was discovered on FiberHome HG6245D devices through RP2613.
- CVE-2021-27173An issue was discovered on FiberHome HG6245D devices through RP2613.
- CVE-2021-27174An issue was discovered on FiberHome HG6245D devices through RP2613.
- CVE-2021-27175An issue was discovered on FiberHome HG6245D devices through RP2613.
- CVE-2021-27176An issue was discovered on FiberHome HG6245D devices through RP2613.
- CVE-2021-27177An issue was discovered on FiberHome HG6245D devices through RP2613.
- CVE-2021-27178An issue was discovered on FiberHome HG6245D devices through RP2613.
- CVE-2021-27179An issue was discovered on FiberHome HG6245D devices through RP2613.
- CVE-2020-26299File System Bounds Escapeautovance ftp-srv · ftp-srv
- CVE-2021-26939An information disclosure issue exists in henriquedornas 5.2.17 because an attacker can dump phpMyAdmin SQL content.
- CVE-2021-26938A stored XSS issue exists in henriquedornas 5.2.17 via online live chat.
- CVE-2021-26936The replay-sorcery program in ReplaySorcery 0.4.0 through 0.5.0, when using the default setuid-root configuration, allows a local attacker t
- CVE-2021-0325In ih264d_parse_pslice of ih264d_parse_pslice.c, there is a possible out of bounds write due to a heap buffer overflow.Android
- CVE-2021-0326In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2021-0327In getContentProviderImpl of ActivityManagerService.java, there is a possible permission bypass due to non-restored binder identities.Android
- CVE-2021-0328In onBatchScanReports and deliverBatchScan of GattService.java, there is a possible way to retrieve Bluetooth scan results without permissioAndroid
- CVE-2021-0341In verifyHostName of OkHostnameVerifier.java, there is a possible way to accept a certificate for the wrong domain due to improperly used crAndroid · com.squareup.okhttp3:okhttp
- CVE-2021-0329In several native functions called by AdvertiseManager.java, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2021-0314In onCreate of UninstallerActivity, there is a possible way to uninstall an all without informed user consent due to a tapjacking/overlay atAndroid
- CVE-2021-0330In add_user_ce and remove_user_ce of storaged.cpp, there is a possible use-after-free due to improper locking.Android
- CVE-2021-0331In onCreate of NotificationAccessConfirmationActivity.java, there is a possible overlay attack due to an insecure default value.Android
- CVE-2021-0332In bootFinished of SurfaceFlinger.cpp, there is a possible memory corruption due to a use after free.Android
- CVE-2021-0333In onCreate of BluetoothPermissionActivity.java, there is a possible permissions bypass due to a tapjacking overlay that obscures the phonebAndroid
- CVE-2021-0334In onTargetSelected of ResolverActivity.java, there is a possible settings bypass allowing an app to become the default handler for arbitrarAndroid
- CVE-2021-0335In process of C2SoftHevcDec.cpp, there is a possible out of bounds write due to a use after free.Android
- CVE-2021-0336In onReceive of BluetoothPermissionRequest.java, there is a possible permissions bypass due to a mutable PendingIntent.Android
- CVE-2021-0337In moveInMediaStore of FileSystemProvider.java, there is a possible file exposure due to stale metadata.Android
- CVE-2021-0338In SystemSettingsValidators, there is a possible permanent denial of service due to missing bounds checks on UI settings.Android
- CVE-2021-0302In PackageInstaller, there is a possible tapjacking attack due to an insecure default value.Android
- CVE-2021-0305In PackageInstaller, there is a possible tapjacking attack due to an insecure default value.Android
- CVE-2021-0339In loadAnimation of WindowContainer.java, there is a possible way to keep displaying a malicious app while a target app is brought to the foAndroid
- CVE-2021-0340In parseNextBox of IsoInterface.java, there is a possible leak of unredacted location information due to improper input validation.Android
- CVE-2021-27135xterm before Patch #366 allows remote attackers to execute arbitrary code or cause a denial of service (segmentation fault) via a crafted UT
- CVE-2020-24838An integer overflow has been found in the the latest version of Issuer.
- CVE-2020-24837An integer underflow has been found in the latest version of ZCFees.
- CVE-2020-29171Cross-site scripting (XSS) vulnerability in admin/wp-security-blacklist-menu.php in the Tips and Tricks HQ All In One WP Security & Firewall
- CVE-2021-23881Stored Cross Site Scripting in ENSMcAfee Endpoint Security (ENS) for Windows
- CVE-2021-23883Null Pointer Dereference vulnerability in McAfee Endpoint Security (ENS)McAfee Endpoint Security (ENS) for Windows
- CVE-2021-23880Improper Access Control in the ENS installerMcAfee Endpoint Security (ENS) for Windows
- CVE-2021-20654Wekan, open source kanban board system, between version 3.12 and 4.11, is vulnerable to multiple stored cross-site scripting.Wekan Team Wekan
- CVE-2020-28870In InoERP 0.7.2, an unauthorized attacker can execute arbitrary code on the server side due to lack of validations in /modules/sys/form_pers
- CVE-2020-28871Remote code execution in Monitorr v1.7.6m in upload.php allows an unauthorized person to execute arbitrary code on the server-side via an in
- CVE-2020-36244The daemon in GENIVI diagnostic log and trace (DLT), is vulnerable to a heap-based buffer overflow that could allow an attacker to remotely