Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: February 2021

152 records · 19 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 1 of 2

  • CVE-2020-13562
    47Plan

    A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7.

    MediumCVSS 6.1No exploitEPSS 77%

    phpgacl project · phpgaclFeb 1, 2021

  • CVE-2020-13563
    47Plan

    A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7.

    MediumCVSS 6.1No exploitEPSS 75%

    phpgacl project · phpgaclFeb 1, 2021

  • CVE-2020-13564
    47Plan

    A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7.

    MediumCVSS 6.1No exploitEPSS 75%

    phpgacl project · phpgaclFeb 1, 2021

  • CVE-2021-21287
    37Monitor

    Server-Side Request Forgery in MinIO Browser API

    HighCVSS 7.7Proof of conceptEPSS 23%

    minio · minioFeb 1, 2021

  • CVE-2021-3378
    68This week

    FortiLogger 4.4.2.2 is affected by Arbitrary File Upload by sending a "Content-Type: image/png" header to Config/SaveUploadedHotspotLogoFile

    CriticalCVSS 9.8WeaponizedEPSS 97%

    fortilogger · fortiloggerFeb 1, 2021

  • CVE-2020-25506
    99Now

    D-Link DNS-320 FW v2.06B01 Revision Ax is affected by command injection in the system_mgr.cgi component, which can lead to remote arbitrary

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    dlink · dns-320 firmwareFeb 2, 2021

  • CVE-2020-18568
    43Plan

    The D-Link DSR-250 (3.14) DSR-1000N (2.11B201) UPnP service contains a command injection vulnerability, which can cause remote command execu

    CriticalCVSS 9.8No exploitEPSS 14%

    dlink · dsr-250 firmwareFeb 2, 2021

  • CVE-2020-28653
    63This week

    Zoho ManageEngine OpManager Stable build before 125203 (and Released build before 125233) allows Remote Code Execution via the Smart Update

    CriticalCVSS 9.8WeaponizedEPSS 78%

    zohocorp · manageengine opmanagerFeb 3, 2021

  • CVE-2020-2506
    70This week

    improper access control vulnerability in Helpdesk

    CriticalCVSS 9.8KEVWeaponizedEPSS 1%

    qnap · helpdeskFeb 3, 2021

  • CVE-2020-17523
    65This week

    Apache Shiro before 1.7.1, when using Apache Shiro with Spring, a specially crafted HTTP request may cause an authentication bypass.

    CriticalCVSS 9.8Proof of conceptEPSS 85%

    apache · shiroFeb 3, 2021

  • CVE-2021-25274
    50Plan

    The Collector Service in SolarWinds Orion Platform before 2020.2.4 uses MSMQ (Microsoft Message Queue) and doesn't set permissions on its pr

    CriticalCVSS 9.8No exploitEPSS 36%

    solarwinds · orion platformFeb 3, 2021

  • CVE-2021-26023
    32Monitor

    The Favorites component before 1.0.2 for Nagios XI 5.8.0 is vulnerable to XSS.

    MediumCVSS 6.1No exploitEPSS 25%

    nagios · favoritesFeb 3, 2021

  • CVE-2021-26024
    27Monitor

    The Favorites component before 1.0.2 for Nagios XI 5.8.0 is vulnerable to Insecure Direct Object Reference: it is possible to create favorit

    MediumCVSS 5.3No exploitEPSS 19%

    nagios · favoritesFeb 3, 2021

  • CVE-2021-3401
    42Plan

    Bitcoin Core before 0.19.0 might allow remote attackers to execute arbitrary code when another application unsafely passes the -platformplug

    CriticalCVSS 9.8No exploitEPSS 10%

    bitcoin · bitcoinFeb 4, 2021

  • CVE-2021-20016
    81Now

    A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access

    CriticalCVSS 9.8KEVWeaponizedEPSS 40%

    sonicwall · sma 100 firmwareFeb 4, 2021

  • CVE-2020-13579
    52Plan

    An exploitable integer overflow vulnerability exists in the PlanMaker document parsing functionality of SoftMaker Office 2021’s PlanMaker ap

    HighCVSS 7.8No exploitEPSS 70%

    softmaker · planmaker 2021Feb 4, 2021

  • CVE-2020-13580
    52Plan

    An exploitable heap-based buffer overflow vulnerability exists in the PlanMaker document parsing functionality of SoftMaker Office 2021’s Pl

    HighCVSS 7.8No exploitEPSS 70%

    softmaker · planmaker 2021Feb 4, 2021

  • CVE-2020-35765
    43Plan

    doFilter in com.adventnet.appmanager.filter.UriCollector in Zoho ManageEngine Applications Manager through 14930 allows an authenticated SQL

    HighCVSS 8.8No exploitEPSS 27%

    zohocorp · manageengine applications managerFeb 5, 2021

  • CVE-2021-26723
    28Monitor

    Jenzabar 9.2.x through 9.2.2 allows /ics?tool=search&query= XSS.

    MediumCVSS 6.1Proof of conceptEPSS 12%

    jenzabar · jenzabarFeb 6, 2021

  • CVE-2020-36242
    38Monitor

    In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result

    CriticalCVSS 9.1No exploitEPSS 6%

    cryptography.io · cryptographyFeb 7, 2021

  • CVE-2020-36243
    54Plan

    The Patient Portal of OpenEMR 5.0.2.1 is affected by a Command Injection vulnerability in /interface/main/backup.php.

    HighCVSS 8.8No exploitEPSS 64%

    open-emr · openemrFeb 7, 2021

  • CVE-2021-3122
    65This week

    CMCAgent in NCR Command Center Agent 16.3 on Aloha POS/BOH servers permits the submission of a runCommand parameter (within an XML document

    CriticalCVSS 9.8WeaponizedEPSS 87%

    ncr · command center agentFeb 7, 2021

  • CVE-2021-3293
    27Monitor

    emlog v5.3.1 has full path disclosure vulnerability in t/index.php, which allows an attacker to see the path to the webroot/file.

    MediumCVSS 5.3Proof of conceptEPSS 19%

    emlog · emlogFeb 8, 2021

  • CVE-2021-22122
    27Monitor

    An improper neutralization of input during web page generation in FortiWeb GUI interface 6.3.0 through 6.3.7 and version before 6.2.4 may al

    MediumCVSS 6.1Proof of conceptEPSS 10%

    fortinet · fortiwebFeb 8, 2021

  • CVE-2021-21305
    39Monitor

    Code Injection vulnerability in CarrierWave

    HighCVSS 8.8No exploitEPSS 12%

    carrierwave project · carrierwaveFeb 8, 2021

  • CVE-2020-13947
    48Plan

    An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the message.jsp

    MediumCVSS 6.1No exploitEPSS 78%

    apache · activemqFeb 8, 2021

  • CVE-2021-22502
    98Now

    Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40.

    CriticalCVSS 9.8KEVWeaponizedEPSS 96%

    microfocus · operation bridge reporterFeb 8, 2021

  • CVE-2021-26912
    44Plan

    NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to execute arbitrary code as SYSTEM because of

    HighCVSS 8.1No exploitEPSS 41%

    netmotionsoftware · netmotion mobilityFeb 8, 2021

  • CVE-2021-26913
    36Monitor

    NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to execute arbitrary code as SYSTEM because of

    HighCVSS 8.1No exploitEPSS 13%

    netmotionsoftware · netmotion mobilityFeb 8, 2021

  • CVE-2021-26914
    55Plan

    NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to execute arbitrary code as SYSTEM because of

    HighCVSS 8.1WeaponizedEPSS 77%

    netmotionsoftware · netmotion mobilityFeb 8, 2021

  • CVE-2021-26915
    45Plan

    NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to execute arbitrary code as SYSTEM because of

    HighCVSS 8.1No exploitEPSS 41%

    netmotionsoftware · netmotion mobilityFeb 8, 2021

  • CVE-2020-22840
    28Monitor

    Open redirect vulnerability in b2evolution CMS version prior to 6.11.6 allows an attacker to perform malicious open redirects to an attacker

    MediumCVSS 6.1Proof of conceptEPSS 13%

    b2evolution · b2evolutionFeb 9, 2021

  • CVE-2021-21118
    40Plan

    Insufficient data validation in V8 in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform out of bounds mem

    HighCVSS 8.8No exploitEPSS 16%

    google · chromeFeb 9, 2021

  • CVE-2021-21123
    29Monitor

    Insufficient data validation in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restri

    MediumCVSS 6.5Proof of conceptEPSS 10%

    google · chromeFeb 9, 2021

  • CVE-2021-21132
    45Plan

    Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox e

    CriticalCVSS 9.6No exploitEPSS 23%

    google · chromeFeb 9, 2021

  • CVE-2021-21135
    32Monitor

    Inappropriate implementation in Performance API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data v

    MediumCVSS 6.5No exploitEPSS 19%

    google · chromeFeb 9, 2021

  • CVE-2021-21148
    71This week

    Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a cr

    HighCVSS 8.8KEVWeaponizedEPSS 19%

    google · chromeFeb 9, 2021

  • CVE-2020-25237
    38Monitor

    A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1 Update 1), SINEMA Server (All versions < V14.0 SP2 Update 2).

    HighCVSS 8.1No exploitEPSS 20%

    siemens · sinec network management systemFeb 9, 2021

  • CVE-2021-25140
    43Plan

    A potential security vulnerability has been identified in the HPE Moonshot Provisioning Manager v1.20.

    CriticalCVSS 9.8No exploitEPSS 12%

    hp · moonshot provisioning managerFeb 9, 2021

  • CVE-2020-13117
    60This week

    Wavlink WN575A4, WN579X3, and WN530G3A devices through 2020-05-15 allow unauthenticated remote users to inject commands via the key paramete

    CriticalCVSS 9.8Proof of conceptEPSS 68%

    wavlink · wn575a4 firmwareFeb 9, 2021

  • CVE-2021-21477
    48Plan

    SAP Commerce Cloud, versions - 1808,1811,1905,2005,2011, enables certain users with required privileges to edit drools rules, an authenticat

    CriticalCVSS 9.9No exploitEPSS 29%

    sap · commerceFeb 9, 2021

  • CVE-2021-21479
    39Monitor

    In SCIMono before 0.0.19, it is possible for an attacker to inject and execute java expression compromising the availability and integrity o

    CriticalCVSS 9.1Proof of conceptEPSS 10%

    sap · scimonoFeb 9, 2021

  • CVE-2020-28871
    65This week

    Remote code execution in Monitorr v1.7.6m in upload.php allows an unauthorized person to execute arbitrary code on the server-side via an in

    CriticalCVSS 9.8WeaponizedEPSS 85%

    monitorr · monitorrFeb 9, 2021

  • CVE-2021-23874
    61This week

    McAfee Total Protection (MTP) privilege escalation vulnerability

    HighCVSS 7.8KEVWeaponizedEPSS 1%

    mcafee · total protectionFeb 10, 2021

  • CVE-2021-27139
    35Monitor

    An issue was discovered on FiberHome HG6245D devices through RP2613.

    HighCVSS 7.5No exploitEPSS 16%

    fiberhome · hg6245d firmwareFeb 10, 2021

  • CVE-2021-27140
    36Monitor

    An issue was discovered on FiberHome HG6245D devices through RP2613.

    HighCVSS 7.5No exploitEPSS 18%

    fiberhome · hg6245d firmwareFeb 10, 2021

  • CVE-2021-27141
    44Plan

    An issue was discovered on FiberHome HG6245D devices through RP2613.

    CriticalCVSS 9.8No exploitEPSS 15%

    fiberhome · hg6245d firmwareFeb 10, 2021

  • CVE-2021-27142
    35Monitor

    An issue was discovered on FiberHome HG6245D devices through RP2613.

    HighCVSS 7.5No exploitEPSS 15%

    fiberhome · hg6245d firmwareFeb 10, 2021

  • CVE-2021-27143
    44Plan

    An issue was discovered on FiberHome HG6245D devices through RP2613.

    CriticalCVSS 9.8No exploitEPSS 15%

    fiberhome · hg6245d firmwareFeb 10, 2021

  • CVE-2021-27144
    45Plan

    An issue was discovered on FiberHome HG6245D devices through RP2613.

    CriticalCVSS 9.8No exploitEPSS 21%

    fiberhome · hg6245d firmwareFeb 10, 2021

  • CVE-2021-27145
    46Plan

    An issue was discovered on FiberHome HG6245D devices through RP2613.

    CriticalCVSS 9.8No exploitEPSS 23%

    fiberhome · hg6245d firmwareFeb 10, 2021

  • CVE-2021-27146
    45Plan

    An issue was discovered on FiberHome HG6245D devices through RP2613.

    CriticalCVSS 9.8No exploitEPSS 20%

    fiberhome · hg6245d firmwareFeb 10, 2021

  • CVE-2021-27147
    44Plan

    An issue was discovered on FiberHome HG6245D devices through RP2613.

    CriticalCVSS 9.8No exploitEPSS 17%

    fiberhome · hg6245d firmwareFeb 10, 2021

  • CVE-2021-27148
    46Plan

    An issue was discovered on FiberHome HG6245D devices through RP2613.

    CriticalCVSS 9.8No exploitEPSS 23%

    fiberhome · hg6245d firmwareFeb 10, 2021

  • CVE-2021-27149
    46Plan

    An issue was discovered on FiberHome HG6245D devices through RP2613.

    CriticalCVSS 9.8No exploitEPSS 23%

    fiberhome · hg6245d firmwareFeb 10, 2021

  • CVE-2021-27150
    45Plan

    An issue was discovered on FiberHome HG6245D devices through RP2613.

    CriticalCVSS 9.8No exploitEPSS 19%

    fiberhome · hg6245d firmwareFeb 10, 2021

  • CVE-2021-27151
    46Plan

    An issue was discovered on FiberHome HG6245D devices through RP2613.

    CriticalCVSS 9.8No exploitEPSS 23%

    fiberhome · hg6245d firmwareFeb 10, 2021

  • CVE-2021-27152
    46Plan

    An issue was discovered on FiberHome HG6245D devices through RP2613.

    CriticalCVSS 9.8No exploitEPSS 23%

    fiberhome · hg6245d firmwareFeb 10, 2021

  • CVE-2021-27153
    45Plan

    An issue was discovered on FiberHome HG6245D devices through RP2613.

    CriticalCVSS 9.8No exploitEPSS 20%

    fiberhome · hg6245d firmwareFeb 10, 2021

  • CVE-2021-27154
    45Plan

    An issue was discovered on FiberHome HG6245D devices through RP2613.

    CriticalCVSS 9.8No exploitEPSS 20%

    fiberhome · hg6245d firmwareFeb 10, 2021

  • CVE-2021-27155
    45Plan

    An issue was discovered on FiberHome HG6245D devices through RP2613.

    CriticalCVSS 9.8No exploitEPSS 20%

    fiberhome · hg6245d firmwareFeb 10, 2021

  • CVE-2021-27156
    44Plan

    An issue was discovered on FiberHome HG6245D devices through RP2613.

    CriticalCVSS 9.8No exploitEPSS 15%

    fiberhome · hg6245d firmwareFeb 10, 2021

  • CVE-2021-27157
    44Plan

    An issue was discovered on FiberHome HG6245D devices through RP2613.

    CriticalCVSS 9.8No exploitEPSS 15%

    fiberhome · hg6245d firmwareFeb 10, 2021

  • CVE-2021-27158
    46Plan

    An issue was discovered on FiberHome HG6245D devices through RP2613.

    CriticalCVSS 9.8No exploitEPSS 23%

    fiberhome · hg6245d firmwareFeb 10, 2021

  • CVE-2021-27159
    46Plan

    An issue was discovered on FiberHome HG6245D devices through RP2613.

    CriticalCVSS 9.8No exploitEPSS 23%

    fiberhome · hg6245d firmwareFeb 10, 2021

  • CVE-2021-27160
    44Plan

    An issue was discovered on FiberHome HG6245D devices through RP2613.

    CriticalCVSS 9.8No exploitEPSS 17%

    fiberhome · hg6245d firmwareFeb 10, 2021

  • CVE-2021-27161
    44Plan

    An issue was discovered on FiberHome HG6245D devices through RP2613.

    CriticalCVSS 9.8No exploitEPSS 17%

    fiberhome · hg6245d firmwareFeb 10, 2021

  • CVE-2021-27162
    47Plan

    An issue was discovered on FiberHome HG6245D devices through RP2613.

    CriticalCVSS 9.8No exploitEPSS 27%

    fiberhome · hg6245d firmwareFeb 10, 2021

  • CVE-2021-27163
    46Plan

    An issue was discovered on FiberHome HG6245D devices through RP2613.

    CriticalCVSS 9.8No exploitEPSS 23%

    fiberhome · hg6245d firmwareFeb 10, 2021

  • CVE-2021-27164
    46Plan

    An issue was discovered on FiberHome HG6245D devices through RP2613.

    CriticalCVSS 9.8No exploitEPSS 23%

    fiberhome · hg6245d firmwareFeb 10, 2021

  • CVE-2021-27165
    45Plan

    An issue was discovered on FiberHome HG6245D devices through RP2613.

    CriticalCVSS 9.8No exploitEPSS 19%

    fiberhome · hg6245d firmwareFeb 10, 2021

  • CVE-2021-27166
    45Plan

    An issue was discovered on FiberHome HG6245D devices through RP2613.

    CriticalCVSS 9.8No exploitEPSS 19%

    fiberhome · hg6245d firmwareFeb 10, 2021

  • CVE-2021-27167
    43Plan

    An issue was discovered on FiberHome HG6245D devices through RP2613.

    CriticalCVSS 9.8No exploitEPSS 14%

    fiberhome · hg6245d firmwareFeb 10, 2021

  • CVE-2021-27168
    45Plan

    An issue was discovered on FiberHome HG6245D devices through RP2613.

    CriticalCVSS 9.8No exploitEPSS 19%

    fiberhome · hg6245d firmwareFeb 10, 2021

  • CVE-2021-27169
    45Plan

    An issue was discovered on FiberHome AN5506-04-FA devices with firmware RP2631.

    CriticalCVSS 9.8No exploitEPSS 19%

    fiberhome · an5506-04-fa firmwareFeb 10, 2021

  • CVE-2021-27170
    44Plan

    An issue was discovered on FiberHome HG6245D devices through RP2613.

    CriticalCVSS 9.8No exploitEPSS 15%

    fiberhome · hg6245d firmwareFeb 10, 2021

  • CVE-2021-27171
    44Plan

    An issue was discovered on FiberHome HG6245D devices through RP2613.

    CriticalCVSS 9.8No exploitEPSS 17%

    fiberhome · hg6245d firmwareFeb 10, 2021

  • CVE-2021-27172
    45Plan

    An issue was discovered on FiberHome HG6245D devices through RP2613.

    CriticalCVSS 9.8No exploitEPSS 19%

    fiberhome · hg6245d firmwareFeb 10, 2021

  • CVE-2021-27173
    34Monitor

    An issue was discovered on FiberHome HG6245D devices through RP2613.

    HighCVSS 7.5No exploitEPSS 12%

    fiberhome · hg6245d firmwareFeb 10, 2021

  • CVE-2021-27174
    36Monitor

    An issue was discovered on FiberHome HG6245D devices through RP2613.

    HighCVSS 7.5No exploitEPSS 18%

    fiberhome · hg6245d firmwareFeb 10, 2021

  • CVE-2021-27175
    35Monitor

    An issue was discovered on FiberHome HG6245D devices through RP2613.

    HighCVSS 7.5No exploitEPSS 18%

    fiberhome · hg6245d firmwareFeb 10, 2021

  • CVE-2021-27176
    36Monitor

    An issue was discovered on FiberHome HG6245D devices through RP2613.

    HighCVSS 7.5No exploitEPSS 18%

    fiberhome · hg6245d firmwareFeb 10, 2021

  • CVE-2021-27177
    45Plan

    An issue was discovered on FiberHome HG6245D devices through RP2613.

    CriticalCVSS 9.8No exploitEPSS 19%

    fiberhome · hg6245d firmwareFeb 10, 2021

  • CVE-2021-27178
    35Monitor

    An issue was discovered on FiberHome HG6245D devices through RP2613.

    HighCVSS 7.5No exploitEPSS 18%

    fiberhome · hg6245d firmwareFeb 10, 2021

  • CVE-2021-27179
    34Monitor

    An issue was discovered on FiberHome HG6245D devices through RP2613.

    HighCVSS 7.5No exploitEPSS 13%

    fiberhome · hg6245d firmwareFeb 10, 2021

  • CVE-2020-13548
    55Plan

    In Foxit Reader 10.1.0.37527, a specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code

    HighCVSS 8.8No exploitEPSS 65%

    foxitsoftware · foxit readerFeb 10, 2021

  • CVE-2020-27871
    55Plan

    This vulnerability allows remote attackers to create arbitrary files on affected installations of SolarWinds Orion Platform 2020.2.1.

    HighCVSS 7.2No exploitEPSS 90%

    solarwinds · orion platformFeb 10, 2021

  • CVE-2021-22652
    50Plan

    Access to the Advantech iView versions prior to v5.7.03.6112 configuration are missing authentication, which may allow an unauthorized attac

    CriticalCVSS 9.8WeaponizedEPSS 36%

    advantech · iviewFeb 11, 2021

  • CVE-2021-22654
    34Monitor

    Advantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow an unauthorized attacker to disclose infor

    HighCVSS 7.5No exploitEPSS 12%

    advantech · iviewFeb 11, 2021

  • CVE-2021-22658
    43Plan

    Advantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow an attacker to escalate privileges to 'Adm

    CriticalCVSS 9.8No exploitEPSS 12%

    advantech · iviewFeb 11, 2021

  • CVE-2021-22881
    50Plan

    The Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect vulnerability.

    MediumCVSS 6.1Proof of conceptEPSS 87%

    rubyonrails · railsFeb 11, 2021

  • CVE-2021-21307
    66This week

    Remote Code Exploit in Lucee Admin

    CriticalCVSS 9.8WeaponizedEPSS 89%

    lucee · lucee serverFeb 11, 2021

  • CVE-2021-21017
    91Now

    Acrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution

    HighCVSS 8.8KEVWeaponizedEPSS 86%

    adobe · acrobatFeb 11, 2021

  • CVE-2021-21029
    44Plan

    Magento Commerce Reflected Cross-site Scripting Vulnerability Could Lead To Arbitrary JavaScript Execution

    MediumCVSS 4.8No exploitEPSS 84%

    magento · magentoFeb 11, 2021

  • CVE-2021-21042
    30Monitor

    Acrobat Reader DC Out-Of-Bounds Read Information Disclosure Vulnerability

    MediumCVSS 6.5Proof of conceptEPSS 14%

    adobe · acrobatFeb 11, 2021

  • CVE-2021-21311
    88Now

    Adminer is an open-source database management in a single PHP file.

    HighCVSS 7.2KEVWeaponizedEPSS 98%

    adminer · adminerFeb 11, 2021

  • CVE-2020-27864
    38Monitor

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1860 firmware version

    HighCVSS 8.8No exploitEPSS 10%

    dlink · dap-1860 firmwareFeb 11, 2021

  • CVE-2020-27868
    64This week

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Qognify Ocularis 5.9.0.395.

    CriticalCVSS 9.8No exploitEPSS 81%

    qognify · ocularisFeb 11, 2021

  • CVE-2021-27212
    50Plan

    In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function vi

    HighCVSS 7.5No exploitEPSS 66%

    openldap · openldapFeb 14, 2021

  • CVE-2021-25296
    87Now

    Nagios XI version xi-5.7.5 is affected by OS command injection.

    HighCVSS 8.8KEVWeaponizedEPSS 71%

    nagios · nagios xiFeb 15, 2021