# CVEs published 2021-02-27

16 CVEs were published on February 27, 2021: 0 critical, 1 high. Days are UTC.

- [CVE-2021-27132](https://cve.now/CVE-2021-27132.md): SerComm AG Combo VD625 AGSOT\_2.1.0 devices allow CRLF injection (for HTTP header injection) in the download function via the Content-Disposi (no CVSS)
- [CVE-2019-25020](https://cve.now/CVE-2019-25020.md): An issue was discovered in Scytl sVote 2.1. (no CVSS)
- [CVE-2019-25021](https://cve.now/CVE-2019-25021.md): An issue was discovered in Scytl sVote 2.1. (no CVSS)
- [CVE-2019-25023](https://cve.now/CVE-2019-25023.md): An issue was discovered in Scytl sVote 2.1. (no CVSS)
- [CVE-2019-25022](https://cve.now/CVE-2019-25022.md): An issue was discovered in Scytl sVote 2.1. (no CVSS)
- [CVE-2021-3151](https://cve.now/CVE-2021-3151.md): i-doit before 1.16.0 is affected by Stored Cross-Site Scripting (XSS) issues that could allow remote authenticated attackers to inject arbit (no CVSS)
- [CVE-2020-28243](https://cve.now/CVE-2020-28243.md): An issue was discovered in SaltStack Salt before 3002.5. (no CVSS, salt)
- [CVE-2020-28972](https://cve.now/CVE-2020-28972.md): In SaltStack Salt before 3002.5, authentication to VMware vcenter, vsphere, and esxi servers (in the vmware.py files) does not always valida (no CVSS, salt)
- [CVE-2020-35662](https://cve.now/CVE-2020-35662.md): In SaltStack Salt before 3002.5, when authenticating to services using certain modules, the SSL certificate is not always validated. (CVSS 7.4, salt)
- [CVE-2021-25281](https://cve.now/CVE-2021-25281.md): An issue was discovered in through SaltStack Salt before 3002.5. (no CVSS, salt)
- [CVE-2021-25282](https://cve.now/CVE-2021-25282.md): An issue was discovered in through SaltStack Salt before 3002.5. (no CVSS, salt)
- [CVE-2021-25283](https://cve.now/CVE-2021-25283.md): An issue was discovered in through SaltStack Salt before 3002.5. (no CVSS, salt)
- [CVE-2021-25284](https://cve.now/CVE-2021-25284.md): An issue was discovered in through SaltStack Salt before 3002.5. (no CVSS, salt)
- [CVE-2021-3144](https://cve.now/CVE-2021-3144.md): In SaltStack Salt before 3002.5, eauth tokens can be used once after expiration. (no CVSS, salt)
- [CVE-2021-3148](https://cve.now/CVE-2021-3148.md): An issue was discovered in SaltStack Salt before 3002.5. (no CVSS, salt)
- [CVE-2021-3197](https://cve.now/CVE-2021-3197.md): An issue was discovered in SaltStack Salt before 3002.5. (no CVSS, salt)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-02-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.