CVEs published February 17, 2021
112 CVEs were published on February 17, 2021: 3 critical, 15 high.
- Published
- 112
- Critical
- 3
- High
- 15
- Medium
- 8
- Low
- 2
- Unrated
- 84
- Now in CISA KEV
- 0
- Fix available
- 12
Most affected products
- Intel(R) Graphics Drivers
- 18
- Advantech
- 5
- Intel(R) E810 Ethernet Controllers
- 4
- Intel(R) Ethernet I210 Controller series of network adapters
- 4
- Intel(R) Server Boards, Server Systems and Compute Modules
- 4
- ChanGate EnterPrise Co. property management system
- 3
- Intel(R) 700-series of Ethernet Controllers
- 3
- Intel(R) 722 Ethernet Controllers
- 3
- Soar Cloud System Co. HR Portal
- 3
- Apache Software Foundation Apache Airflow · apache-airflow
- 2
Critical 3
- CVE-2021-22855Soar Cloud System Co., Ltd. HR Portal - Arbitrary Code ExecutionSoar Cloud System Co. HR Portal
- CVE-2021-22856ChanGate EnterPrise Co., Ltd property management system - SQL InjectionChanGate EnterPrise Co. property management system
- CVE-2021-23885Privilege escalation vulnerability in McAfee Web Gateway (MWG) UIMcAfee Web Gateway
High 15
- CVE-2020-9306Tesla SolarCity Solar Monitoring Gateway through 5.46.43 has a "Use of Hard-coded Credentials" issue because Digi ConnectPort X2e uses a .py
- CVE-2020-8625A vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attackISC BIND9
- CVE-2021-27138The boot loader in Das U-Boot before 2021.04-rc2 mishandles use of unit addresses in a FIT.
- CVE-2021-27097The boot loader in Das U-Boot before 2021.04-rc2 mishandles a modified FIT.
- CVE-2020-13555An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installationAdvantech
- CVE-2020-13553An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installationAdvantech
- CVE-2020-13551An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installationAdvantech
- CVE-2020-13552An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installationAdvantech
- CVE-2020-13550A local file inclusion vulnerability exists in the installation functionality of Advantech WebAccess/SCADA 9.0.1.Advantech
- CVE-2021-1366Cisco AnyConnect Secure Mobility Client for Windows with VPN Posture (HostScan) Module DLL Hijacking VulnerabilityCisco AnyConnect Secure Mobility Client
- CVE-2021-22854Soar Cloud System Co., Ltd. HR Portal - SQL InjectionSoar Cloud System Co. HR Portal
- CVE-2020-7848The EFM ipTIME C200 IP Camera is affected by a Command Injection vulnerability in /login.cgi?logout=1 script.EFM networks & multimedia ipTIME C200 IP Camera
- CVE-2020-7849UPRISM CURIX arbitrary code execution vulnerabilityuPrism.io CURIX 7.0 Agent
- CVE-2021-22858ChanGate EnterPrise Co., Ltd property management system - Broken AuthenticationChanGate EnterPrise Co. property management system
- CVE-2021-22857ChanGate EnterPrise Co., Ltd property management system - Directory TraversalChanGate EnterPrise Co. property management system
Medium, low and unrated 94
- CVE-2020-12878Digi ConnectPort X2e before 3.2.30.6 allows an attacker to escalate privileges from the python user to root via a symlink attack that uses c
- CVE-2021-27374VertiGIS WebOffice 10.7 SP1 before patch20210202 and 10.8 SP1 before patch20210207 allows attackers to achieve "Zugriff auf Inhalte der WebO
- CVE-2020-36245GramAddict through 1.2.3 allows remote attackers to execute arbitrary code because of use of UIAutomator2 and ATX-Agent.gramaddict
- CVE-2021-26720avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed as root via /etc/network/if-up.d/avahi-daemon, and allows a
- CVE-2021-26911core/imap/MCIMAPSession.cpp in Canary Mail before 3.22 has Missing SSL Certificate Validation for IMAP in STARTTLS mode.
- CVE-2021-27367Controller/Backend/FileEditController.php and Controller/Backend/FilemanagerController.php in Bolt before 4.1.13 allow Directory Traversal.bolt/core
- CVE-2020-25605Cleartext transmission of sensitive information in Agora Video SDK prior to 3.1 allows a remote attacker to obtain access to audio and video
- CVE-2021-3396OpenNMS Meridian 2016, 2017, 2018 before 2018.1.25, 2019 before 2019.1.16, and 2020 before 2020.1.5, Horizon 1.2 through 27.0.4, and Newts <org.opennms:opennms · org.opennms.features:org.opennms.f… +2
- CVE-2021-1351Cisco Webex Meetings Cross-Site Scripting VulnerabilityCisco Webex Meetings
- CVE-2021-1372Cisco Webex Meetings Desktop App and Webex Productivity Tools for Windows Shared Memory Information Disclosure VulnerabilityCisco Webex Productivity Tools
- CVE-2021-1378Cisco StarOS Denial of Service VulnerabilityCisco ASR 5000 Series Software
- CVE-2021-1412Cisco Identity Services Engine Sensitive Information Disclosure VulnerabilitiesCisco Identity Services Engine Software
- CVE-2021-1416Cisco Identity Services Engine Sensitive Information Disclosure VulnerabilitiesCisco Identity Services Engine Software
- CVE-2021-27224The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a user-mode write access violation starting at WPG+0x0000000000012ec6, which might allo
- CVE-2021-27362The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a Read Access Violation on Control Flow starting at WPG!ReadWPG_W+0x0000000000000133, w
- CVE-2021-26809PHPGurukul Car Rental Project version 2.0 suffers from a remote shell upload vulnerability in changeimage1.php.
- CVE-2021-25780An arbitrary file upload vulnerability has been identified in posts.php in Baby Care System 1.0.
- CVE-2021-25779Baby Care System v1.0 is vulnerable to SQL injection via the 'id' parameter on the contentsectionpage.php page.
- CVE-2020-36003The id parameter in detail.php of Online Book Store v1.0 is vulnerable to union-based blind SQL injection, which leads to the ability to ret
- CVE-2020-36002Seat-Reservation-System 1.0 has a SQL injection vulnerability in index.php in the id parameter where attackers can obtain sensitive database
- CVE-2020-35339In 74cms version 5.0.1, there is a remote code execution vulnerability in /Application/Admin/Controller/ConfigController.class.php and /Thin
- CVE-2021-22173Memory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture fileThe Wireshark Foundation Wireshark
- CVE-2021-22174Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture fileThe Wireshark Foundation Wireshark
- CVE-2021-26697Apache Airflow: Lineage API endpoint for Experimental API missed authentication checkApache Software Foundation Apache Airflow · apache-airflow
- CVE-2021-26559CWE-284 Improper Access Control on Configurations Endpoint for the Stable APIApache Software Foundation Apache Airflow · apache-airflow
- CVE-2020-12365Untrusted pointer dereference in some Intel(R) Graphics Drivers before versions 15.33.51.5146, 15.45.32.5145, 15.36.39.5144 and 15.40.46.514Intel(R) Graphics Drivers
- CVE-2020-0525Improper access control in firmware for the Intel(R) Ethernet I210 Controller series of network adapters before version 3.30 may allow a priIntel(R) Ethernet I210 Controller series of network adapters
- CVE-2020-0524Improper default permissions in the firmware for the Intel(R) Ethernet I210 Controller series of network adapters before version 3.30 may alIntel(R) Ethernet I210 Controller series of network adapters
- CVE-2020-0523Improper access control in the firmware for the Intel(R) Ethernet I210 Controller series of network adapters before version 3.30 may potentiIntel(R) Ethernet I210 Controller series of network adapters
- CVE-2020-0522Improper initialization in the firmware for the Intel(R) Ethernet I210 Controller series of network adapters before version 3.30 may allow aIntel(R) Ethernet I210 Controller series of network adapters
- CVE-2020-8765Incorrect default permissions in the installer for the Intel(R) RealSense(TM) DCM may allow a privileged user to potentially enable escalatiIntel(R) RealSense(TM) DCM
- CVE-2020-12339Insufficient control flow management in the API for the Intel(R) Collaboration Suite for WebRTC before version 4.3.1 may allow an authenticaIntel(R) Collaboration Suite for WebRTC
- CVE-2020-12376Use of hard-coded key in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may allow Intel(R) Server Boards, Server Systems and Compute Modules
- CVE-2020-12375Heap overflow in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may allow an autheIntel(R) Server Boards, Server Systems and Compute Modules
- CVE-2020-12380Out of bounds read in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may allow an Intel(R) Server Boards, Server Systems and Compute Modules
- CVE-2020-12377Insufficient input validation in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 maIntel(R) Server Boards, Server Systems and Compute Modules
- CVE-2020-24451Uncontrolled search path in the Intel(R) Optane(TM) DC Persistent Memory installer for Windows* before version 1.00.00.3506 may allow an autIntel(R) Optane(TM) DC Persistent Memory installer for Wind…
- CVE-2020-12373Expired pointer dereference in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enablIntel(R) Graphics Drivers
- CVE-2020-12372Unchecked return value in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable a dIntel(R) Graphics Drivers
- CVE-2020-12371Divide by zero in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable a denial ofIntel(R) Graphics Drivers
- CVE-2020-12370Untrusted pointer dereference in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enaIntel(R) Graphics Drivers
- CVE-2020-12384Improper access control in some Intel(R) Graphics Drivers before version 26.20.100.8476 may allow an authenticated user to potentially enablIntel(R) Graphics Drivers
- CVE-2020-12386Out-of-bounds write in some Intel(R) Graphics Drivers before version 15.36.39.5143 may allow an authenticated user to potentially enable denIntel(R) Graphics Drivers
- CVE-2020-24448Uncaught exception in some Intel(R) Graphics Drivers before version 15.33.51.5146 may allow an authenticated user to potentially enable deniIntel(R) Graphics Drivers
- CVE-2020-12366Insufficient input validation in some Intel(R) Graphics Drivers before version 27.20.100.8587 may allow a privileged user to potentially enaIntel(R) Graphics Drivers
- CVE-2020-12385Improper input validation in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable Intel(R) Graphics Drivers
- CVE-2020-12369Out of bound write in some Intel(R) Graphics Drivers before version 26.20.100.8336 may allow a privileged user to potentially enable escalatIntel(R) Graphics Drivers
- CVE-2020-12368Integer overflow in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable an escalaIntel(R) Graphics Drivers
- CVE-2020-12367Integer overflow in some Intel(R) Graphics Drivers before version 26.20.100.8476 may allow a privileged user to potentially enable an escalaIntel(R) Graphics Drivers
- CVE-2020-0518Improper access control in the Intel(R) HD Graphics Control Panel before version 15.40.46.5144 and 15.36.39.5143 may allow an authenticated Intel(R) HD Graphics Control Panel
- CVE-2020-8678Improper access control for Intel(R) Graphics Drivers before version 15.45.33.5164 and 27.20.100.8280 may allow an authenticated user to potIntel(R) Graphics Drivers
- CVE-2020-24462Out of bounds write in the Intel(R) Graphics Driver before version 15.33.53.5161, 15.36.40.5162, 15.40.47.5166, 15.45.33.5164 and 27.20.100.Intel(R) Graphics Driver
- CVE-2020-12361Use after free in some Intel(R) Graphics Drivers before version 15.33.51.5146 may allow an authenticated user to potentially enable denial oIntel(R) Graphics Drivers
- CVE-2020-0521Insufficient control flow management in some Intel(R) Graphics Drivers before version 15.45.32.5145 may allow an authenticated user to potenIntel(R) Graphics Drivers
- CVE-2020-0544Insufficient control flow management in the kernel mode driver for some Intel(R) Graphics Drivers before version 15.36.39.5145 may allow an Intel(R) Graphics Drivers
- CVE-2020-24450Improper conditions check in some Intel(R) Graphics Drivers before versions 26.20.100.8141, 15.45.32.5145 and 15.40.46.5144 may allow an autIntel(R) Graphics Drivers
- CVE-2020-24452Improper input validation in the Intel(R) SGX Platform Software for Windows* may allow an authenticated user to potentially enable a denial Intel(R) SGX Platform Software for Windows*
- CVE-2020-24453Improper input validation in the Intel(R) EPID SDK before version 8, may allow an authenticated user to potentially enable an escalation of Intel(R) EPID SDK
- CVE-2020-24458Incomplete cleanup in some Intel(R) PROSet/Wireless WiFi and Killer (TM) drivers before version 22.0 may allow a privileged user to potentiaIntel(R) PROSet/Wireless WiFi and Killer (TM) drivers
- CVE-2020-24480Out-of-bounds write in the Intel(R) XTU before version 6.5.3.25 may allow a privileged user to potentially enable denial of service via locaIntel(R) XTU
- CVE-2020-24481Insecure inherited permissions for the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentialIntel(R) Quartus Prime Pro and Standard edition software
- CVE-2020-24482Improper buffer restrictions in firmware for Intel(R) 7360 Cell Modem before UDE version 9.4.370 may allow unauthenticated user to potentialIntel(R) 7360 Cell Modem
- CVE-2020-24491Debug message containing addresses of memory transactions in some Intel(R) 10th Generation Core Processors supporting SGX may allow a privilIntel(R) 10th Generation Core Processors supporting SGX
- CVE-2020-24500Buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow a privileged user to potentially enIntel(R) E810 Ethernet Controllers
- CVE-2020-24505Insufficient input validation in the firmware for the Intel(R) 700-series of Ethernet Controllers before version 7.3 may allow a privileged Intel(R) 700-series of Ethernet Controllers
- CVE-2020-24496Insufficient input validation in the firmware for Intel(R) 722 Ethernet Controllers before version 1.4.3 may allow a privileged user to poteIntel(R) 722 Ethernet Controllers
- CVE-2020-24501Buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow an unauthenticated user to potentiaIntel(R) E810 Ethernet Controllers
- CVE-2020-24497Insufficient Access Control in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow a privileged user to poIntel(R) E810 Ethernet Controllers
- CVE-2020-24494Insufficient access control in the firmware for the Intel(R) 722 Ethernet Controllers before version 1.4.3 may allow a privileged user to poIntel(R) 722 Ethernet Controllers
- CVE-2020-24498Buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow a privileged user to potentially enIntel(R) E810 Ethernet Controllers
- CVE-2020-24495Insufficient access control in the firmware for the Intel(R) 700-series of Ethernet Controllers before version 7.3 may allow a privileged usIntel(R) 700-series of Ethernet Controllers
- CVE-2020-24493Insufficient access control in the firmware for the Intel(R) 700-series of Ethernet Controllers before version 8.0 may allow a privileged usIntel(R) 700-series of Ethernet Controllers
- CVE-2020-24492Insufficient access control in the firmware for the Intel(R) 722 Ethernet Controllers before version 1.5 may allow a privileged user to poteIntel(R) 722 Ethernet Controllers
- CVE-2020-8701Incorrect default permissions in installer for the Intel(R) SSD Toolbox versions before 2/9/2021 may allow a privileged user to potentially Intel(R) SSD Toolbox versions
- CVE-2020-24503Insufficient access control in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user toIntel(R) Ethernet E810 Adapter drivers for Linux
- CVE-2020-24502Improper input validation in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 and before version 1.4.29.0 for WindIntel(R) Ethernet E810 Adapter drivers for Linux before
- CVE-2020-24504Uncontrolled resource consumption in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated uIntel(R) Ethernet E810 Adapter drivers for Linux
- CVE-2021-0109Insecure inherited permissions for the Intel(R) SOC driver package for STK1A32SC before version 604 may allow an authenticated user to potenIntel(R) SOC driver package for STK1A32SC
- CVE-2020-24485Improper conditions check in the Intel(R) FPGA OPAE Driver for Linux before kernel version 4.17 may allow an authenticated user to potentialIntel(R) FPGA OPAE Driver for Linux
- CVE-2021-22853Soar Cloud System Co., Ltd. HR Portal - Broken Access ControlSoar Cloud System Co. HR Portal
- CVE-2021-22553Heap Memory exhaustion in GerritGoogle Gerrit
- CVE-2021-23339HTTP Request Smugglingcom.typesafe.akka:akka-http-core
- CVE-2020-2502Cross-site Scripting Vulnerability in Photo StationQNAP Systems Photo Station
- CVE-2020-2501Stack Buffer Overflow in Surveillance StationQNAP Systems Surveillance Station
- CVE-2021-20655FileZen (V3.0.0 to V4.2.7 and V5.0.0 to V5.0.2) allows a remote attacker with administrator rights to execute arbitrary OS commands via unspSoliton Systems K.K. FileZen
- CVE-2021-20653Calsos CSDJ (CSDJ-B 01.08.00 and earlier, CSDJ-H 01.08.00 and earlier, CSDJ-D 01.08.00 and earlier, and CSDJ-A 03.08.00 and earlier) allows NEC Platforms Calsos CSDJ
- CVE-2021-26934An issue was discovered in the Linux kernel 4.18 through 5.10.16, as used by Xen.
- CVE-2021-26933An issue was discovered in Xen 4.9 through 4.14.x.
- CVE-2020-12362Integer overflow in the firmware for some Intel(R) Graphics Drivers for Windows * before version 26.20.100.7212 and before Linux kernel versIntel(R) Graphics Drivers for Windows * before
- CVE-2020-12363Improper input validation in some Intel(R) Graphics Drivers for Windows* before version 26.20.100.7212 and before Linux kernel version 5.5 mIntel(R) Graphics Drivers for Windows* before
- CVE-2020-12364Null pointer reference in some Intel(R) Graphics Drivers for Windows* before version 26.20.100.7212 and before version Linux kernel version Intel(R) Graphics Drivers for Windows* before
- CVE-2021-26930An issue was discovered in the Linux kernel 3.11 through 5.10.16, as used by Xen.
- CVE-2021-26931An issue was discovered in the Linux kernel 2.6.39 through 5.10.16, as used in Xen.
- CVE-2021-26932An issue was discovered in the Linux kernel 3.2 through 5.10.16, as used by Xen.