CVEs published February 11, 2021
96 CVEs were published on February 11, 2021: 7 critical, 39 high. 2 are now in CISA KEV.
- Published
- 96
- Critical
- 7
- High
- 39
- Medium
- 20
- Low
- 9
- Unrated
- 21
- Now in CISA KEV
- 2
- Fix available
- 30
Most affected products
- Adobe Acrobat Reader
- 22
- Adobe Magento Commerce · magento/community-edition +1
- 10
- Adobe Magento Commerce · magento/community-edition
- 5
- Adobe Photoshop
- 5
- Advantech iView
- 4
- IBM Security Verify Information Queue
- 4
- - Cloud Access Connector - Cloud Access Connector Legacy
- 2
- - PCoIP Soft Client for Windows - PCoIP Soft Client for Lin…
- 2
- Adobe Illustrator
- 2
- D-Link DAP-1860
- 2
Critical 7
- CVE-2020-27868This vulnerability allows remote attackers to execute arbitrary code on affected installations of Qognify Ocularis 5.9.0.395.Qognify Ocularis
- CVE-2021-21014Magento Commerce Arbitrary Folder Empty Could Lead To Arbitrary Code ExecutionAdobe Magento Commerce · magento/community-edition +1
- CVE-2021-21016Magento Commerce Unauthorized Data Modification Could Lead to Arbitrary Code ExecutionAdobe Magento Commerce · magento/community-edition +1
- CVE-2021-21025Magento Commerce XML Injection Could Lead To Arbitrary Code ExecutionAdobe Magento Commerce · magento/community-edition +1
- CVE-2021-21018Magnto Commerce Unauthorized Data Modification Could Lead To Arbitrary Code ExecutionAdobe Magento Commerce · magento/community-edition
- CVE-2021-21019Magento Commerce XML Injection Could Lead To Remote Code ExecutionAdobe Magento Commerce · magento/community-edition
- CVE-2021-21024Magento Commerce Blind SQL Injection Could Lead To Unauthorized AccessAdobe Magento Commerce · magento/community-edition
High 39
- CVE-2020-27869This vulnerability allows remote attackers to escalate privileges on affected installations of SolarWinds Network Performance Monitor 2020 HSolarWinds Network Performance Monitor
- CVE-2020-27865This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1860 firmware versionD-Link DAP-1860
- CVE-2020-27866This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6020, R6080, R6120, R622NETGEAR Multiple Routers
- CVE-2020-27864This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1860 firmware versionD-Link DAP-1860
- CVE-2020-27861This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Orbi 2.5.1.16 routers.NETGEAR Orbi
- CVE-2020-27862This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DVA-2800 and DSL-2888A roD-Link Multiple Routers
- CVE-2020-27860This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.35811.Foxit Reader
- CVE-2021-21311SSRF in adminervrana adminer · vrana/adminer
- CVE-2021-21053Adobe Illustrator Out-Of-Bounds Write Vulnerability Could Lead To Remote Code ExecutionAdobe Illustrator
- CVE-2021-21054Adobe Illustrator Out-Of-Bounds Write Vulnerability Could Lead To Remote Code Execution VulnerabilityAdobe Illustrator
- CVE-2021-21052Adobe Animate Out-of-Bounds Write Vulnerability Could Lead To Arbitrary Code ExecutionAdobe Animate
- CVE-2021-21049Adobe Photoshop Out-Of-Bounds Read Vulnerability Could Lead To Remote Code Execution VulnerabilityAdobe Photoshop
- CVE-2021-21048Adobe Photoshop Buffer Overflow Vulnerability Could Lead To Remote Code Execution VulnerabilityAdobe Photoshop
- CVE-2021-21050Adobe Photoshop Out-Of-Bounds Read Vulnerability Could Lead To Remote Code Execution VulnerabilityAdobe Photoshop
- CVE-2021-21047Adobe Photoshop Out-Of-Bounds Write Vulnerability Could Lead To Remote Code ExecutionAdobe Photoshop
- CVE-2021-21051Adobe Photoshop Buffer Overflow Vulnerability Could Lead To Remote Code Execution VulnerabilityAdobe Photoshop
- CVE-2021-21063Acrobat Reader DC Buffer Overflow Vulnerability Could Lead to Arbitrary Code ExecutionAdobe Acrobat Reader
- CVE-2021-21062Acrobat Reader DC Buffer Overflow Vulnerability Could Lead To Arbitrary Code ExecutionAdobe Acrobat Reader
- CVE-2021-21059Acrobat Reader DC Buffer Overflow Vulnerability Could Lead to Arbitrary Code ExecutionAdobe Acrobat Reader
- CVE-2021-21058Acrobat Reader DC Memory Corruption Vulnerability Could Lead to Arbitrary Code ExecutionAdobe Acrobat Reader
- CVE-2021-21036Acrobat Reader DC Integer Overflow Vulnerability Could Lead To Arbitrary Code ExecutionAdobe Acrobat Reader
- CVE-2021-21039Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code ExecutionAdobe Acrobat Reader
- CVE-2021-21041Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code ExecutionAdobe Acrobat Reader
- CVE-2021-21033Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code ExecutionAdobe Acrobat Reader
- CVE-2021-21021Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code ExecutionAdobe Acrobat Reader
- CVE-2021-21035Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code ExecutionAdobe Acrobat Reader
- CVE-2021-21038Acrobat Reader DC Out-Of-Bounds Write Vulnerability Could Lead To Arbitrary Code ExecutionAdobe Acrobat Reader
- CVE-2021-21040Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code ExecutionAdobe Acrobat Reader
- CVE-2021-21028Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code ExecutionAdobe Acrobat Reader · com.adobe.acs:acs-aem-commons
- CVE-2021-21037Acrobat Reader DC Path Traversal Vulnerability Could Lead To Arbitrary Code ExecutionAdobe Acrobat Reader
- CVE-2021-21044Acrobat Reader DC Out-Of-Bounds Write Vulnerability Could Lead To Arbitrary Code ExecutionAdobe Acrobat Reader
- CVE-2021-21045Acrobat Reader DC Improper Installer Access Control Vulnerability Could Lead To Privilege EscalationAdobe Acrobat Reader
- CVE-2021-21017Acrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code ExecutionAdobe Acrobat Reader
- CVE-2021-21015Magento Commerce Unauthorized Data Modification Could Lead to Arbitrary Code ExecutionAdobe Magento Commerce · magento/community-edition
- CVE-2021-21030Magento Commerce Stored Cross-site Scripting Could Lead To Arbitrary Javascript ExecutionAdobe Magento Commerce · magento/community-edition +1
- CVE-2021-21307Remote Code Exploit in Lucee AdminLucee
- CVE-2020-8027openldap uses fixed paths in /tmpSUSE Linux Enterprise Server 15-LTSS · SUSE Linux Enterp… +1
- CVE-2021-23335LDAP Injectionis-user-valid
- CVE-2020-35498A vulnerability was found in openvswitch.openvswitch
Medium, low and unrated 50
- CVE-2020-27867This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6020, R6080, R6120, R62NETGEAR Multiple Routers
- CVE-2020-27863This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DVA-2800 and DSL-D-Link Multiple Routers
- CVE-2021-21310Token verification bug in next-authnextauthjs next-auth · next-auth
- CVE-2021-21976vSphere Replication 8.3.x prior to 8.3.1.2, 8.2.x prior to 8.2.1.1, 8.1.x prior to 8.1.2.3 and 6.5.x prior to 6.5.1.5 contain a post-authentvSphere Replication
- CVE-2020-9307Hirschmann OS2, RSP, and RSPE devices before HiOS 08.3.00 allow a denial of service.
- CVE-2021-21055Adobe Dreamweaver Untrusted Search Path Vulnerability Could Lead To Information DisclosureAdobe Dreamweaver
- CVE-2019-19005A bitmap double free in main.c in autotrace 0.31.1 allows attackers to cause an unspecified impact via a malformed bitmap image.
- CVE-2019-19004A biWidth*biBitCnt integer overflow in input-bmp.c in autotrace 0.31.1 allows attackers to provide an unexpected input value to malloc via a
- CVE-2021-21034Acrobat Reader DC Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2021-21057Acrobat Reader DC Invalid Memory Read Due To An Uninitialized PointerAdobe Acrobat Reader
- CVE-2021-21046Acrobat Reader DC Buffer Overflow Vulnerability Could Lead To Arbitrary Code ExecutionAdobe Acrobat Reader
- CVE-2021-21061Acrobat Pro DC Use-After-Free Vulnerability Could Lead to Information DisclosureAdobe Acrobat Reader
- CVE-2021-21042Acrobat Reader DC Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2021-21060Acrobat Pro DC Improper File Parsing Could Lead to Information DisclosureAdobe Acrobat Reader
- CVE-2021-21032Magento Commerce Failure To Invalidate User Session Could Lead To Unauthorized AccessAdobe Magento Commerce · magento/community-edition +1
- CVE-2021-21029Magento Commerce Reflected Cross-site Scripting Vulnerability Could Lead To Arbitrary JavaScript ExecutionAdobe Magento Commerce · magento/community-edition
- CVE-2021-21020Magento Commerce Improper Access Control VulnerabilityAdobe Magento Commerce · magento/community-edition +1
- CVE-2021-21026Magento Commerce Incorrect permissions Could Lead To Unauthorized AccessAdobe Magento Commerce · magento/community-edition +1
- CVE-2021-21023Magento Commerce Stored Cross Site Scripting Vulnerability Could Lead To Arbitrary Code ExecutionAdobe Magento Commerce · magento/community-edition +1
- CVE-2021-21022Magento Commerce Incorrect permissions Could Lead To Unauthorized AccessAdobe Magento Commerce · magento/community-edition +1
- CVE-2021-21027Magento Commerce Cross-Site Request Forgery (CSRF) Could Lead To Unauthorized Data ModificationAdobe Magento Commerce · magento/community-edition +1
- CVE-2021-21031Magento Commerce Failure To Invalidate User Session Could Lead To Unauthorized AccessAdobe Magento.com · magento/community-edition +1
- CVE-2021-21301Video feed was captured while user has disabled videowireapp wire-ios
- CVE-2021-21299Multiple Transfer-Encoding headers misinterprets request payloadhyperium hyper · hyper
- CVE-2020-25493Oclean Mobile Application 2.1.2 communicates with an external website using HTTP so it is possible to eavesdrop the network traffic.
- CVE-2021-20405IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a user to perform unauthorized activities due to improper encoding of outpIBM Security Verify Information Queue
- CVE-2021-20404IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a user on the network to cause a denial of service due to an invalid cookiIBM Security Verify Information Queue
- CVE-2021-20403IBM Security Verify Information Queue 1.0.6 and 1.0.7 is vulnerable to cross-site request forgery which could allow an attacker to execute mIBM Security Verify Information Queue
- CVE-2021-20402IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a remote attacker to obtain sensitive information when a detailed technicaIBM Security Verify Information Queue
- CVE-2020-4768IBM Case Manager 5.2 and 5.3 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to cross-site scripting.IBM Business Automation Workflow · IBM Case Manager
- CVE-2021-27191The get-ip-range package before 4.0.0 for Node.js is vulnerable to denial of service (DoS) if the range is untrusted input.get-ip-range
- CVE-2021-22881The Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect vulnerability.https://github.com/rails/rails · actionpack
- CVE-2021-22880The PostgreSQL adapter in Active Record before 6.1.2.1, 6.0.3.5, 5.2.4.5 suffers from a regular expression denial of service (REDoS) vulnerahttps://github.com/rails/rails · activerecord
- CVE-2021-22652Access to the Advantech iView versions prior to v5.7.03.6112 configuration are missing authentication, which may allow an unauthorized attacAdvantech iView
- CVE-2021-22656Advantech iView versions prior to v5.7.03.6112 are vulnerable to directory traversal, which may allow an attacker to read sensitive files.Advantech iView
- CVE-2021-22658Advantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow an attacker to escalate privileges to 'AdmAdvantech iView
- CVE-2021-22654Advantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow an unauthorized attacker to disclose inforAdvantech iView
- CVE-2020-8030skuba: Insecure /tmp usage when joining node to clusterSUSE CaaS Platform
- CVE-2020-8029skuba: Insecure handling of private keySUSE CaaS Platform
- CVE-2021-20188A flaw was found in podman before 1.7.0.podman · github.com/containers/libpod
- CVE-2020-10734A vulnerability was found in keycloak in the way that the OIDC logout endpoint does not have CSRF protection.keycloak · org.keycloak:keycloak-oidc-client-adapter-pom
- CVE-2020-1717A flaw was found in Keycloak 7.0.1.keycloak · org.keycloak:keycloak-parent
- CVE-2021-25688Under certain conditions, Teradici PCoIP Agents for Windows prior to version 20.10.0 and Teradici PCoIP Agents for Linux prior to version 21- PCoIP Standard Agent for Windows - PCoIP Standard Agent f…
- CVE-2021-25689An out of bounds write in Teradici PCoIP soft client versions prior to version 20.10.1 could allow an attacker to remotely execute code.- PCoIP Soft Client for Windows - PCoIP Soft Client for Lin…
- CVE-2021-25690A null pointer dereference in Teradici PCoIP Soft Client versions prior to 20.07.3 could allow an attacker to crash the software.- PCoIP Soft Client for Windows - PCoIP Soft Client for Lin…
- CVE-2020-13186An Anti CSRF mechanism was discovered missing in the Teradici Cloud Access Connector v31 and earlier in a specific web form, which allowed a- Cloud Access Connector - Cloud Access Connector Legacy
- CVE-2020-13185Certain web application pages in the authenticated section of the Teradici Cloud Access Connector prior to v18 were accessible without the n- Cloud Access Connector - Cloud Access Connector Legacy
- CVE-2020-8031obs: Stored XSSopenSUSE Open Build Service
- CVE-2021-20335SSL may be unexpectedly disabled during upgrade of multiple-server MongoDB Ops ManagerMongoDB Ops Manager
- CVE-2021-27184Pelco Digital Sentry Server 7.18.72.11464 has an XML External Entity vulnerability (exploitable via the DTD parameter entities technique), r