CVEs published February 12, 2021
49 CVEs were published on February 12, 2021: 0 critical, 2 high.
- Published
- 49
- Critical
- 0
- High
- 2
- Medium
- 4
- Low
- 1
- Unrated
- 42
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- IBM Security Verify Information Queue
- 7
- BIG-IP
- 6
- ELECOM CO. WRC-300FEBK-S
- 3
- LOGITEC LAN-W300N/PGRB
- 3
- BIG-IP Advanced WAF & BIG-IP ASM
- 2
- ELECOM CO. WRC-300FEBK-A
- 2
- LOGITEC LAN-W300N/PR5B
- 2
- LOGITEC LAN-W300N/RS
- 2
- Apache Thrift · org.apache.thrift:libthrift
- 1
- BIG-IP AFM
- 1
High 2
- CVE-2021-20411IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a user to impersonate another user on the system due to incorrectly updatiIBM Security Verify Information Queue
- CVE-2021-20408IBM Security Verify Information Queue 1.0.6 and 1.0.7 could disclose highly sensitive information to a local user due to inproper storage ofIBM Security Verify Information Queue
Medium, low and unrated 47
- CVE-2021-26751NeDi 1.9C allows an authenticated user to perform a SQL Injection in the Monitoring History function on the endpoint /Monitoring-History.php
- CVE-2021-26752NeDi 1.9C allows an authenticated user to execute operating system commands in the Nodes Traffic function on the endpoint /Nodes-Traffic.php
- CVE-2021-26753NeDi 1.9C allows an authenticated user to inject PHP code in the System Files function on the endpoint /System-Files.php via the txt HTTP PO
- CVE-2021-22504Arbitrary code execution vulnerability on Micro Focus Operations Bridge Manager product, affecting versions 10.1x, 10.6x, 2018.05, 2018.11, Operations Bridge Manager.
- CVE-2020-13949In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentialApache Thrift · org.apache.thrift:libthrift
- CVE-2021-22977On BIG-IP version 16.0.0-16.0.1 and 14.1.2.4-14.1.3, cooperation between malicious HTTP client code and a malicious server may cause TMM to BIG-IP
- CVE-2021-22984On BIG-IP Advanced WAF and ASM version 15.1.x before 15.1.0.2, 15.0.x before 15.0.1.4, 14.1.x before 14.1.2.5, 13.1.x before 13.1.3.4, 12.1.BIG-IP Advanced WAF & BIG-IP ASM
- CVE-2021-22978On BIG-IP version 16.0.x before 16.0.1, 15.1.x before 15.1.1, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.5, and all 12.1.x and 11.6.x versBIG-IP
- CVE-2021-22983On BIG-IP AFM version 15.1.x before 15.1.1, 14.1.x before 14.1.3.1, and 13.1.x before 13.1.3.5, authenticated users accessing the ConfiguratBIG-IP AFM
- CVE-2021-22979On BIG-IP version 16.0.x before 16.0.1, 15.1.x before 15.1.1, 14.1.x before 14.1.2.8, 13.1.x before 13.1.3.5, and all 12.1.x versions, a refBIG-IP
- CVE-2021-22980In Edge Client version 7.2.x before 7.2.1.1, 7.1.9.x before 7.1.9.8, and 7.1.x-7.1.8.x before 7.1.8.5, an untrusted search path vulnerabilitEdge Client
- CVE-2021-22981On all versions of BIG-IP 12.1.x and 11.6.x, the original TLS protocol includes a weakness in the master secret negotiation that is mitigateBIG-IP
- CVE-2021-22985On BIG-IP APM version 16.0.x before 16.0.1.1, under certain conditions, when processing VPN traffic with APM, TMM consumes excessive memory.BIG-IP APM
- CVE-2021-22982On BIG-IP DNS and GTM version 13.1.x before 13.1.0.4, and all versions of 12.1.x and 11.6.x, big3d does not securely handle and parse certaiBIG-IP DNS and GTM
- CVE-2021-22976On BIG-IP Advanced WAF and ASM version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.6, and allBIG-IP Advanced WAF & BIG-IP ASM
- CVE-2021-20412IBM Security Verify Information Queue 1.0.6 and 1.0.7 contains hard-coded credentials, such as a password or cryptographic key, which it useIBM Security Verify Information Queue
- CVE-2021-20410IBM Security Verify Information Queue 1.0.6 and 1.0.7 sends user credentials in plain clear text which can be read by an authenticated user IBM Security Verify Information Queue
- CVE-2021-20409IBM Security Verify Information Queue information disclosureIBM Security Verify Information Queue
- CVE-2021-20407IBM Security Verify Information Queue information disclosureIBM Security Verify Information Queue
- CVE-2021-20406IBM Security Verify Information Queue information disclosureIBM Security Verify Information Queue
- CVE-2021-22974On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, and 13.1.x before 13.1.3.6 and all versions of BIG-IBIG-IP, BIG-IQ
- CVE-2021-22973On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.5, and all 12.1.x versions, JSOBIG-IP
- CVE-2021-22975On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, and 14.1.x before 14.1.3.1, under some circumstances, Traffic Management MBIG-IP
- CVE-2021-27197DSUtility.dll in Pelco Digital Sentry Server before 7.19.67 has an arbitrary file write vulnerability.
- CVE-2021-27188The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 allows attackers to cause a denial of service (access suspended for five
- CVE-2021-27187The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 stores authentication credentials in cleartext in login.sav when the Sav
- CVE-2021-27204Telegram before 7.4 (212543) Stable on macOS stores the local passcode in cleartext, leading to information disclosure.
- CVE-2021-27205Telegram before 7.4 (212543) Stable on macOS stores the local copy of self-destructed messages in a sandbox path, leading to sensitive infor
- CVE-2021-20651Directory traversal vulnerability in ELECOM File Manager all versions allows remote attackers to create an arbitrary file or overwrite an exELECOM CO. ELECOM File Manager
- CVE-2021-20650Cross-site request forgery (CSRF) vulnerability in ELECOM NCC-EWF100RMWH2 allows remote attackers to hijack the authentication of administraELECOM CO. NCC-EWF100RMWH2
- CVE-2021-20648ELECOM WRC-300FEBK-S allows an attacker with administrator rights to execute arbitrary OS commands via unspecified vectors.ELECOM CO. WRC-300FEBK-S
- CVE-2021-20649ELECOM WRC-300FEBK-S contains an improper certificate validation vulnerability.ELECOM CO. WRC-300FEBK-S
- CVE-2021-20647Cross-site request forgery (CSRF) vulnerability in ELECOM WRC-300FEBK-S allows remote attackers to hijack the authentication of administratoELECOM CO. WRC-300FEBK-S
- CVE-2021-20645Cross-site scripting vulnerability in ELECOM WRC-300FEBK-A allows remote authenticated attackers to inject arbitrary script via unspecified ELECOM CO. WRC-300FEBK-A
- CVE-2021-20646Cross-site request forgery (CSRF) vulnerability in ELECOM WRC-300FEBK-A allows remote attackers to hijack the authentication of administratoELECOM CO. WRC-300FEBK-A
- CVE-2021-20644ELECOM WRC-1467GHBK-A allows arbitrary scripts to be executed on the user's web browser by displaying a specially crafted SSID on the web seELECOM CO. WRC-1467GHBK-A
- CVE-2021-20643Improper access control vulnerability in ELECOM LD-PS/U1 allows remote attackers to change the administrative password of the affected devicELECOM CO. LD-PS/U1
- CVE-2021-20641Cross-site request forgery (CSRF) vulnerability in LOGITEC LAN-W300N/RS allows remote attackers to hijack the authentication of administratoLOGITEC LAN-W300N/RS
- CVE-2021-20642Improper check or handling of exceptional conditions in LOGITEC LAN-W300N/RS allows a remote attacker to cause a denial-of-service (DoS) conLOGITEC LAN-W300N/RS
- CVE-2021-20640Buffer overflow vulnerability in LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute an arbitrary OS command LOGITEC LAN-W300N/PGRB
- CVE-2021-20638LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors.LOGITEC LAN-W300N/PGRB
- CVE-2021-20639LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors.LOGITEC LAN-W300N/PGRB
- CVE-2021-20637Improper check or handling of exceptional conditions in LOGITEC LAN-W300N/PR5B allows a remote attacker to cause a denial-of-service (DoS) cLOGITEC LAN-W300N/PR5B
- CVE-2021-20635Improper restriction of excessive authentication attempts in LOGITEC LAN-WH450N/GR allows an attacker in the wireless range of the device toLOGITEC LAN-WH450N/GR
- CVE-2021-20636Cross-site request forgery (CSRF) vulnerability in LOGITEC LAN-W300N/PR5B allows remote attackers to hijack the authentication of administraLOGITEC LAN-W300N/PR5B
- CVE-2021-27190A Stored Cross Site Scripting(XSS) Vulnerability was discovered in PEEL SHOPPING 9.3.0 and 9.4.0, which are publicly available.
- CVE-2013-20001An issue was discovered in OpenZFS through 2.0.3.