CVEs published February 14, 2021
7 CVEs were published on February 14, 2021: 0 critical, 0 high.
- Published
- 7
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 7
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- Atlassian Jira Server · Atlassian Jira Data Center
- 3
- openldap
- 1
Medium, low and unrated 7
- CVE-2020-36237Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view custom field options via an InformAtlassian Jira Server · Atlassian Jira Data Center
- CVE-2020-36236Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site ScAtlassian Jira Server · Atlassian Jira Data Center
- CVE-2020-36235Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view custom field and custom SLA names Atlassian Jira Server · Atlassian Jira Data Center
- CVE-2021-26929An XSS issue was discovered in Horde Groupware Webmail Edition through 5.2.22 (where the Horde_Text_Filter library before 2.3.7 is used).
- CVE-2019-25019LimeSurvey before 4.0.0-RC4 allows SQL injection via the participant model.
- CVE-2021-27213config.py in pystemon before 2021-02-13 allows code execution via YAML deserialization because SafeLoader and safe_load are not used.
- CVE-2021-27212In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function viopenldap