# CVEs published 2021-02-17

112 CVEs were published on February 17, 2021: 3 critical, 15 high. Days are UTC.

- [CVE-2020-9306](https://cve.now/CVE-2020-9306.md): Tesla SolarCity Solar Monitoring Gateway through 5.46.43 has a "Use of Hard-coded Credentials" issue because Digi ConnectPort X2e uses a .py (CVSS 8.8)
- [CVE-2020-12878](https://cve.now/CVE-2020-12878.md): Digi ConnectPort X2e before 3.2.30.6 allows an attacker to escalate privileges from the python user to root via a symlink attack that uses c (no CVSS)
- [CVE-2020-8625](https://cve.now/CVE-2020-8625.md): A vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack (CVSS 8.1, ISC BIND9)
- [CVE-2021-27138](https://cve.now/CVE-2021-27138.md): The boot loader in Das U-Boot before 2021.04-rc2 mishandles use of unit addresses in a FIT. (CVSS 7.8)
- [CVE-2021-27097](https://cve.now/CVE-2021-27097.md): The boot loader in Das U-Boot before 2021.04-rc2 mishandles a modified FIT. (CVSS 7.8)
- [CVE-2021-27374](https://cve.now/CVE-2021-27374.md): VertiGIS WebOffice 10.7 SP1 before patch20210202 and 10.8 SP1 before patch20210207 allows attackers to achieve "Zugriff auf Inhalte der WebO (no CVSS)
- [CVE-2020-36245](https://cve.now/CVE-2020-36245.md): GramAddict through 1.2.3 allows remote attackers to execute arbitrary code because of use of UIAutomator2 and ATX-Agent. (no CVSS, gramaddict)
- [CVE-2021-26720](https://cve.now/CVE-2021-26720.md): avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed as root via /etc/network/if-up.d/avahi-daemon, and allows a (no CVSS)
- [CVE-2021-26911](https://cve.now/CVE-2021-26911.md): core/imap/MCIMAPSession.cpp in Canary Mail before 3.22 has Missing SSL Certificate Validation for IMAP in STARTTLS mode. (no CVSS)
- [CVE-2021-27367](https://cve.now/CVE-2021-27367.md): Controller/Backend/FileEditController.php and Controller/Backend/FilemanagerController.php in Bolt before 4.1.13 allow Directory Traversal. (no CVSS, bolt/core)
- [CVE-2020-25605](https://cve.now/CVE-2020-25605.md): Cleartext transmission of sensitive information in Agora Video SDK prior to 3.1 allows a remote attacker to obtain access to audio and video (no CVSS)
- [CVE-2021-3396](https://cve.now/CVE-2021-3396.md): OpenNMS Meridian 2016, 2017, 2018 before 2018.1.25, 2019 before 2019.1.16, and 2020 before 2020.1.5, Horizon 1.2 through 27.0.4, and Newts \< (no CVSS, org.opennms:opennms · org.opennms.features:org.opennms.f… +2)
- [CVE-2020-13555](https://cve.now/CVE-2020-13555.md): An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation (CVSS 8.8, Advantech)
- [CVE-2020-13553](https://cve.now/CVE-2020-13553.md): An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation (CVSS 8.8, Advantech)
- [CVE-2020-13551](https://cve.now/CVE-2020-13551.md): An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation (CVSS 8.8, Advantech)
- [CVE-2020-13552](https://cve.now/CVE-2020-13552.md): An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation (CVSS 8.8, Advantech)
- [CVE-2020-13550](https://cve.now/CVE-2020-13550.md): A local file inclusion vulnerability exists in the installation functionality of Advantech WebAccess/SCADA 9.0.1. (CVSS 7.7, Advantech)
- [CVE-2021-1351](https://cve.now/CVE-2021-1351.md): Cisco Webex Meetings Cross-Site Scripting Vulnerability (CVSS 6.1, Cisco Webex Meetings)
- [CVE-2021-1366](https://cve.now/CVE-2021-1366.md): Cisco AnyConnect Secure Mobility Client for Windows with VPN Posture (HostScan) Module DLL Hijacking Vulnerability (CVSS 7.8, Cisco AnyConnect Secure Mobility Client)
- [CVE-2021-1372](https://cve.now/CVE-2021-1372.md): Cisco Webex Meetings Desktop App and Webex Productivity Tools for Windows Shared Memory Information Disclosure Vulnerability (CVSS 5.5, Cisco Webex Productivity Tools)
- [CVE-2021-1378](https://cve.now/CVE-2021-1378.md): Cisco StarOS Denial of Service Vulnerability (CVSS 5.3, Cisco ASR 5000 Series Software)
- [CVE-2021-1412](https://cve.now/CVE-2021-1412.md): Cisco Identity Services Engine Sensitive Information Disclosure Vulnerabilities (CVSS 6.5, Cisco Identity Services Engine Software)
- [CVE-2021-1416](https://cve.now/CVE-2021-1416.md): Cisco Identity Services Engine Sensitive Information Disclosure Vulnerabilities (CVSS 6.5, Cisco Identity Services Engine Software)
- [CVE-2021-27224](https://cve.now/CVE-2021-27224.md): The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a user-mode write access violation starting at WPG+0x0000000000012ec6, which might allo (no CVSS)
- [CVE-2021-27362](https://cve.now/CVE-2021-27362.md): The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a Read Access Violation on Control Flow starting at WPG!ReadWPG\_W+0x0000000000000133, w (no CVSS)
- [CVE-2021-26809](https://cve.now/CVE-2021-26809.md): PHPGurukul Car Rental Project version 2.0 suffers from a remote shell upload vulnerability in changeimage1.php. (no CVSS)
- [CVE-2021-25780](https://cve.now/CVE-2021-25780.md): An arbitrary file upload vulnerability has been identified in posts.php in Baby Care System 1.0. (no CVSS)
- [CVE-2021-25779](https://cve.now/CVE-2021-25779.md): Baby Care System v1.0 is vulnerable to SQL injection via the 'id' parameter on the contentsectionpage.php page. (no CVSS)
- [CVE-2020-36003](https://cve.now/CVE-2020-36003.md): The id parameter in detail.php of Online Book Store v1.0 is vulnerable to union-based blind SQL injection, which leads to the ability to ret (no CVSS)
- [CVE-2020-36002](https://cve.now/CVE-2020-36002.md): Seat-Reservation-System 1.0 has a SQL injection vulnerability in index.php in the id parameter where attackers can obtain sensitive database (no CVSS)
- [CVE-2020-35339](https://cve.now/CVE-2020-35339.md): In 74cms version 5.0.1, there is a remote code execution vulnerability in /Application/Admin/Controller/ConfigController.class.php and /Thin (no CVSS)
- [CVE-2021-22173](https://cve.now/CVE-2021-22173.md): Memory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file (CVSS 3.7, The Wireshark Foundation Wireshark)
- [CVE-2021-22174](https://cve.now/CVE-2021-22174.md): Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file (CVSS 3.7, The Wireshark Foundation Wireshark)
- [CVE-2021-26697](https://cve.now/CVE-2021-26697.md): Apache Airflow: Lineage API endpoint for Experimental API missed authentication check (no CVSS, Apache Software Foundation Apache Airflow · apache-airflow)
- [CVE-2021-26559](https://cve.now/CVE-2021-26559.md): CWE-284 Improper Access Control on Configurations Endpoint for the Stable API (no CVSS, Apache Software Foundation Apache Airflow · apache-airflow)
- [CVE-2020-12365](https://cve.now/CVE-2020-12365.md): Untrusted pointer dereference in some Intel(R) Graphics Drivers before versions 15.33.51.5146, 15.45.32.5145, 15.36.39.5144 and 15.40.46.514 (no CVSS, Intel(R) Graphics Drivers)
- [CVE-2020-0525](https://cve.now/CVE-2020-0525.md): Improper access control in firmware for the Intel(R) Ethernet I210 Controller series of network adapters before version 3.30 may allow a pri (no CVSS, Intel(R) Ethernet I210 Controller series of network adapters)
- [CVE-2020-0524](https://cve.now/CVE-2020-0524.md): Improper default permissions in the firmware for the Intel(R) Ethernet I210 Controller series of network adapters before version 3.30 may al (no CVSS, Intel(R) Ethernet I210 Controller series of network adapters)
- [CVE-2020-0523](https://cve.now/CVE-2020-0523.md): Improper access control in the firmware for the Intel(R) Ethernet I210 Controller series of network adapters before version 3.30 may potenti (no CVSS, Intel(R) Ethernet I210 Controller series of network adapters)
- [CVE-2020-0522](https://cve.now/CVE-2020-0522.md): Improper initialization in the firmware for the Intel(R) Ethernet I210 Controller series of network adapters before version 3.30 may allow a (no CVSS, Intel(R) Ethernet I210 Controller series of network adapters)
- [CVE-2020-8765](https://cve.now/CVE-2020-8765.md): Incorrect default permissions in the installer for the Intel(R) RealSense(TM) DCM may allow a privileged user to potentially enable escalati (no CVSS, Intel(R) RealSense(TM) DCM)
- [CVE-2020-12339](https://cve.now/CVE-2020-12339.md): Insufficient control flow management in the API for the Intel(R) Collaboration Suite for WebRTC before version 4.3.1 may allow an authentica (no CVSS, Intel(R) Collaboration Suite for WebRTC)
- [CVE-2020-12376](https://cve.now/CVE-2020-12376.md): Use of hard-coded key in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may allow (no CVSS, Intel(R) Server Boards, Server Systems and Compute Modules)
- [CVE-2020-12375](https://cve.now/CVE-2020-12375.md): Heap overflow in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may allow an authe (no CVSS, Intel(R) Server Boards, Server Systems and Compute Modules)
- [CVE-2020-12380](https://cve.now/CVE-2020-12380.md): Out of bounds read in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may allow an (no CVSS, Intel(R) Server Boards, Server Systems and Compute Modules)
- [CVE-2020-12377](https://cve.now/CVE-2020-12377.md): Insufficient input validation in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 ma (no CVSS, Intel(R) Server Boards, Server Systems and Compute Modules)
- [CVE-2020-24451](https://cve.now/CVE-2020-24451.md): Uncontrolled search path in the Intel(R) Optane(TM) DC Persistent Memory installer for Windows\* before version 1.00.00.3506 may allow an aut (no CVSS, Intel(R) Optane(TM) DC Persistent Memory installer for Wind…)
- [CVE-2020-12373](https://cve.now/CVE-2020-12373.md): Expired pointer dereference in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enabl (no CVSS, Intel(R) Graphics Drivers)
- [CVE-2020-12372](https://cve.now/CVE-2020-12372.md): Unchecked return value in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable a d (no CVSS, Intel(R) Graphics Drivers)
- [CVE-2020-12371](https://cve.now/CVE-2020-12371.md): Divide by zero in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable a denial of (no CVSS, Intel(R) Graphics Drivers)
- [CVE-2020-12370](https://cve.now/CVE-2020-12370.md): Untrusted pointer dereference in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially ena (no CVSS, Intel(R) Graphics Drivers)
- [CVE-2020-12384](https://cve.now/CVE-2020-12384.md): Improper access control in some Intel(R) Graphics Drivers before version 26.20.100.8476 may allow an authenticated user to potentially enabl (no CVSS, Intel(R) Graphics Drivers)
- [CVE-2020-12386](https://cve.now/CVE-2020-12386.md): Out-of-bounds write in some Intel(R) Graphics Drivers before version 15.36.39.5143 may allow an authenticated user to potentially enable den (no CVSS, Intel(R) Graphics Drivers)
- [CVE-2020-24448](https://cve.now/CVE-2020-24448.md): Uncaught exception in some Intel(R) Graphics Drivers before version 15.33.51.5146 may allow an authenticated user to potentially enable deni (no CVSS, Intel(R) Graphics Drivers)
- [CVE-2020-12366](https://cve.now/CVE-2020-12366.md): Insufficient input validation in some Intel(R) Graphics Drivers before version 27.20.100.8587 may allow a privileged user to potentially ena (no CVSS, Intel(R) Graphics Drivers)
- [CVE-2020-12385](https://cve.now/CVE-2020-12385.md): Improper input validation in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable (no CVSS, Intel(R) Graphics Drivers)
- [CVE-2020-12369](https://cve.now/CVE-2020-12369.md): Out of bound write in some Intel(R) Graphics Drivers before version 26.20.100.8336 may allow a privileged user to potentially enable escalat (no CVSS, Intel(R) Graphics Drivers)
- [CVE-2020-12368](https://cve.now/CVE-2020-12368.md): Integer overflow in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable an escala (no CVSS, Intel(R) Graphics Drivers)
- [CVE-2020-12367](https://cve.now/CVE-2020-12367.md): Integer overflow in some Intel(R) Graphics Drivers before version 26.20.100.8476 may allow a privileged user to potentially enable an escala (no CVSS, Intel(R) Graphics Drivers)
- [CVE-2020-0518](https://cve.now/CVE-2020-0518.md): Improper access control in the Intel(R) HD Graphics Control Panel before version 15.40.46.5144 and 15.36.39.5143 may allow an authenticated (no CVSS, Intel(R) HD Graphics Control Panel)
- [CVE-2020-8678](https://cve.now/CVE-2020-8678.md): Improper access control for Intel(R) Graphics Drivers before version 15.45.33.5164 and 27.20.100.8280 may allow an authenticated user to pot (no CVSS, Intel(R) Graphics Drivers)
- [CVE-2020-24462](https://cve.now/CVE-2020-24462.md): Out of bounds write in the Intel(R) Graphics Driver before version 15.33.53.5161, 15.36.40.5162, 15.40.47.5166, 15.45.33.5164 and 27.20.100. (no CVSS, Intel(R) Graphics Driver)
- [CVE-2020-12361](https://cve.now/CVE-2020-12361.md): Use after free in some Intel(R) Graphics Drivers before version 15.33.51.5146 may allow an authenticated user to potentially enable denial o (no CVSS, Intel(R) Graphics Drivers)
- [CVE-2020-0521](https://cve.now/CVE-2020-0521.md): Insufficient control flow management in some Intel(R) Graphics Drivers before version 15.45.32.5145 may allow an authenticated user to poten (no CVSS, Intel(R) Graphics Drivers)
- [CVE-2020-0544](https://cve.now/CVE-2020-0544.md): Insufficient control flow management in the kernel mode driver for some Intel(R) Graphics Drivers before version 15.36.39.5145 may allow an (no CVSS, Intel(R) Graphics Drivers)
- [CVE-2020-24450](https://cve.now/CVE-2020-24450.md): Improper conditions check in some Intel(R) Graphics Drivers before versions 26.20.100.8141, 15.45.32.5145 and 15.40.46.5144 may allow an aut (no CVSS, Intel(R) Graphics Drivers)
- [CVE-2020-24452](https://cve.now/CVE-2020-24452.md): Improper input validation in the Intel(R) SGX Platform Software for Windows\* may allow an authenticated user to potentially enable a denial (no CVSS, Intel(R) SGX Platform Software for Windows\*)
- [CVE-2020-24453](https://cve.now/CVE-2020-24453.md): Improper input validation in the Intel(R) EPID SDK before version 8, may allow an authenticated user to potentially enable an escalation of (no CVSS, Intel(R) EPID SDK)
- [CVE-2020-24458](https://cve.now/CVE-2020-24458.md): Incomplete cleanup in some Intel(R) PROSet/Wireless WiFi and Killer (TM) drivers before version 22.0 may allow a privileged user to potentia (no CVSS, Intel(R) PROSet/Wireless WiFi and Killer (TM) drivers)
- [CVE-2020-24480](https://cve.now/CVE-2020-24480.md): Out-of-bounds write in the Intel(R) XTU before version 6.5.3.25 may allow a privileged user to potentially enable denial of service via loca (no CVSS, Intel(R) XTU)
- [CVE-2020-24481](https://cve.now/CVE-2020-24481.md): Insecure inherited permissions for the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potential (no CVSS, Intel(R) Quartus Prime Pro and Standard edition software)
- [CVE-2020-24482](https://cve.now/CVE-2020-24482.md): Improper buffer restrictions in firmware for Intel(R) 7360 Cell Modem before UDE version 9.4.370 may allow unauthenticated user to potential (no CVSS, Intel(R) 7360 Cell Modem)
- [CVE-2020-24491](https://cve.now/CVE-2020-24491.md): Debug message containing addresses of memory transactions in some Intel(R) 10th Generation Core Processors supporting SGX may allow a privil (no CVSS, Intel(R) 10th Generation Core Processors supporting SGX)
- [CVE-2020-24500](https://cve.now/CVE-2020-24500.md): Buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow a privileged user to potentially en (no CVSS, Intel(R) E810 Ethernet Controllers)
- [CVE-2020-24505](https://cve.now/CVE-2020-24505.md): Insufficient input validation in the firmware for the Intel(R) 700-series of Ethernet Controllers before version 7.3 may allow a privileged (no CVSS, Intel(R) 700-series of Ethernet Controllers)
- [CVE-2020-24496](https://cve.now/CVE-2020-24496.md): Insufficient input validation in the firmware for Intel(R) 722 Ethernet Controllers before version 1.4.3 may allow a privileged user to pote (no CVSS, Intel(R) 722 Ethernet Controllers)
- [CVE-2020-24501](https://cve.now/CVE-2020-24501.md): Buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow an unauthenticated user to potentia (no CVSS, Intel(R) E810 Ethernet Controllers)
- [CVE-2020-24497](https://cve.now/CVE-2020-24497.md): Insufficient Access Control in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow a privileged user to po (no CVSS, Intel(R) E810 Ethernet Controllers)
- [CVE-2020-24494](https://cve.now/CVE-2020-24494.md): Insufficient access control in the firmware for the Intel(R) 722 Ethernet Controllers before version 1.4.3 may allow a privileged user to po (no CVSS, Intel(R) 722 Ethernet Controllers)
- [CVE-2020-24498](https://cve.now/CVE-2020-24498.md): Buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow a privileged user to potentially en (no CVSS, Intel(R) E810 Ethernet Controllers)
- [CVE-2020-24495](https://cve.now/CVE-2020-24495.md): Insufficient access control in the firmware for the Intel(R) 700-series of Ethernet Controllers before version 7.3 may allow a privileged us (no CVSS, Intel(R) 700-series of Ethernet Controllers)
- [CVE-2020-24493](https://cve.now/CVE-2020-24493.md): Insufficient access control in the firmware for the Intel(R) 700-series of Ethernet Controllers before version 8.0 may allow a privileged us (no CVSS, Intel(R) 700-series of Ethernet Controllers)
- [CVE-2020-24492](https://cve.now/CVE-2020-24492.md): Insufficient access control in the firmware for the Intel(R) 722 Ethernet Controllers before version 1.5 may allow a privileged user to pote (no CVSS, Intel(R) 722 Ethernet Controllers)
- [CVE-2020-8701](https://cve.now/CVE-2020-8701.md): Incorrect default permissions in installer for the Intel(R) SSD Toolbox versions before 2/9/2021 may allow a privileged user to potentially (no CVSS, Intel(R) SSD Toolbox versions)
- [CVE-2020-24503](https://cve.now/CVE-2020-24503.md): Insufficient access control in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to (no CVSS, Intel(R) Ethernet E810 Adapter drivers for Linux)
- [CVE-2020-24502](https://cve.now/CVE-2020-24502.md): Improper input validation in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 and before version 1.4.29.0 for Wind (no CVSS, Intel(R) Ethernet E810 Adapter drivers for Linux before)
- [CVE-2020-24504](https://cve.now/CVE-2020-24504.md): Uncontrolled resource consumption in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated u (no CVSS, Intel(R) Ethernet E810 Adapter drivers for Linux)
- [CVE-2021-0109](https://cve.now/CVE-2021-0109.md): Insecure inherited permissions for the Intel(R) SOC driver package for STK1A32SC before version 604 may allow an authenticated user to poten (no CVSS, Intel(R) SOC driver package for STK1A32SC)
- [CVE-2020-24485](https://cve.now/CVE-2020-24485.md): Improper conditions check in the Intel(R) FPGA OPAE Driver for Linux before kernel version 4.17 may allow an authenticated user to potential (no CVSS, Intel(R) FPGA OPAE Driver for Linux)
- [CVE-2021-22855](https://cve.now/CVE-2021-22855.md): Soar Cloud System Co., Ltd. HR Portal - Arbitrary Code Execution (CVSS 9.8, Soar Cloud System Co. HR Portal)
- [CVE-2021-22854](https://cve.now/CVE-2021-22854.md): Soar Cloud System Co., Ltd. HR Portal - SQL Injection (CVSS 7.5, Soar Cloud System Co. HR Portal)
- [CVE-2021-22853](https://cve.now/CVE-2021-22853.md): Soar Cloud System Co., Ltd. HR Portal - Broken Access Control (CVSS 5.4, Soar Cloud System Co. HR Portal)
- [CVE-2020-7848](https://cve.now/CVE-2020-7848.md): The EFM ipTIME C200 IP Camera is affected by a Command Injection vulnerability in /login.cgi?logout=1 script. (CVSS 8.0, EFM networks & multimedia ipTIME C200 IP Camera)
- [CVE-2020-7849](https://cve.now/CVE-2020-7849.md): UPRISM CURIX arbitrary code execution vulnerability (CVSS 8.0, uPrism.io CURIX 7.0 Agent)
- [CVE-2021-22553](https://cve.now/CVE-2021-22553.md): Heap Memory exhaustion in Gerrit (CVSS 6.5, Google Gerrit)
- [CVE-2021-22858](https://cve.now/CVE-2021-22858.md): ChanGate EnterPrise Co., Ltd property management system - Broken Authentication (CVSS 8.8, ChanGate EnterPrise Co. property management system)
- [CVE-2021-22857](https://cve.now/CVE-2021-22857.md): ChanGate EnterPrise Co., Ltd property management system - Directory Traversal (CVSS 7.5, ChanGate EnterPrise Co. property management system)
- [CVE-2021-22856](https://cve.now/CVE-2021-22856.md): ChanGate EnterPrise Co., Ltd property management system - SQL Injection (CVSS 9.8, ChanGate EnterPrise Co. property management system)
- [CVE-2021-23885](https://cve.now/CVE-2021-23885.md): Privilege escalation vulnerability in McAfee Web Gateway (MWG) UI (CVSS 9.0, McAfee Web Gateway)
- [CVE-2021-23339](https://cve.now/CVE-2021-23339.md): HTTP Request Smuggling (CVSS 5.0, com.typesafe.akka:akka-http-core)
- [CVE-2020-2502](https://cve.now/CVE-2020-2502.md): Cross-site Scripting Vulnerability in Photo Station (no CVSS, QNAP Systems Photo Station)
- [CVE-2020-2501](https://cve.now/CVE-2020-2501.md): Stack Buffer Overflow in Surveillance Station (no CVSS, QNAP Systems Surveillance Station)
- [CVE-2021-20655](https://cve.now/CVE-2021-20655.md): FileZen (V3.0.0 to V4.2.7 and V5.0.0 to V5.0.2) allows a remote attacker with administrator rights to execute arbitrary OS commands via unsp (no CVSS, Soliton Systems K.K. FileZen)
- [CVE-2021-20653](https://cve.now/CVE-2021-20653.md): Calsos CSDJ (CSDJ-B 01.08.00 and earlier, CSDJ-H 01.08.00 and earlier, CSDJ-D 01.08.00 and earlier, and CSDJ-A 03.08.00 and earlier) allows (no CVSS, NEC Platforms Calsos CSDJ)
- [CVE-2021-26934](https://cve.now/CVE-2021-26934.md): An issue was discovered in the Linux kernel 4.18 through 5.10.16, as used by Xen. (no CVSS)
- [CVE-2021-26933](https://cve.now/CVE-2021-26933.md): An issue was discovered in Xen 4.9 through 4.14.x. (no CVSS)
- [CVE-2020-12362](https://cve.now/CVE-2020-12362.md): Integer overflow in the firmware for some Intel(R) Graphics Drivers for Windows \* before version 26.20.100.7212 and before Linux kernel vers (no CVSS, Intel(R) Graphics Drivers for Windows \* before)
- [CVE-2020-12363](https://cve.now/CVE-2020-12363.md): Improper input validation in some Intel(R) Graphics Drivers for Windows\* before version 26.20.100.7212 and before Linux kernel version 5.5 m (no CVSS, Intel(R) Graphics Drivers for Windows\* before)
- [CVE-2020-12364](https://cve.now/CVE-2020-12364.md): Null pointer reference in some Intel(R) Graphics Drivers for Windows\* before version 26.20.100.7212 and before version Linux kernel version (no CVSS, Intel(R) Graphics Drivers for Windows\* before)
- [CVE-2021-26930](https://cve.now/CVE-2021-26930.md): An issue was discovered in the Linux kernel 3.11 through 5.10.16, as used by Xen. (no CVSS)
- [CVE-2021-26931](https://cve.now/CVE-2021-26931.md): An issue was discovered in the Linux kernel 2.6.39 through 5.10.16, as used in Xen. (no CVSS)
- [CVE-2021-26932](https://cve.now/CVE-2021-26932.md): An issue was discovered in the Linux kernel 3.2 through 5.10.16, as used by Xen. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-02-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.