# CVEs published 2021-02-14

7 CVEs were published on February 14, 2021: 0 critical, 0 high. Days are UTC.

- [CVE-2020-36237](https://cve.now/CVE-2020-36237.md): Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view custom field options via an Inform (no CVSS, Atlassian Jira Server · Atlassian Jira Data Center)
- [CVE-2020-36236](https://cve.now/CVE-2020-36236.md): Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Sc (no CVSS, Atlassian Jira Server · Atlassian Jira Data Center)
- [CVE-2020-36235](https://cve.now/CVE-2020-36235.md): Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view custom field and custom SLA names (no CVSS, Atlassian Jira Server · Atlassian Jira Data Center)
- [CVE-2021-26929](https://cve.now/CVE-2021-26929.md): An XSS issue was discovered in Horde Groupware Webmail Edition through 5.2.22 (where the Horde\_Text\_Filter library before 2.3.7 is used). (no CVSS)
- [CVE-2019-25019](https://cve.now/CVE-2019-25019.md): LimeSurvey before 4.0.0-RC4 allows SQL injection via the participant model. (no CVSS)
- [CVE-2021-27213](https://cve.now/CVE-2021-27213.md): config.py in pystemon before 2021-02-13 allows code execution via YAML deserialization because SafeLoader and safe\_load are not used. (no CVSS)
- [CVE-2021-27212](https://cve.now/CVE-2021-27212.md): In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function vi (no CVSS, openldap)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-02-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.