CVEs published February 21, 2021
5 CVEs were published on February 21, 2021: 0 critical, 0 high.
- Published
- 5
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 5
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- urijs
- 1
- url-parse
- 1
Medium, low and unrated 5
- CVE-2021-27516URI.js (aka urijs) before 1.19.6 mishandles certain uses of backslash such as http:\/ and interprets the URI as a relative path.urijs
- CVE-2021-27513The module admin_ITSM in EyesOfNetwork 5.3-10 allows remote authenticated users to upload arbitrary .xml.php files because it relies on "le
- CVE-2021-27514EyesOfNetwork 5.3-10 uses an integer of between 8 and 10 digits for the session ID, which might be leveraged for brute-force authentication
- CVE-2021-26716Modules/input/Views/schedule.php in Emoncms through 10.2.7 allows XSS via the node parameter.
- CVE-2021-27515url-parse before 1.5.0 mishandles certain uses of backslash such as http:\/ and interprets the URI as a relative path.url-parse