Yayın tarihine göre

Şubat 2021: sömürülen ve yeni ciddi CVE kayıtları

152 kayıt · 19 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 2

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
47Planlayın	CVE-2020-13562İstismar yok	A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7.phpgacl project · phpgacl · CWE-80 Kimlik doğrulamasız XSS	Orta6,1	—	%77,7	1 Şub 2021
47Planlayın	CVE-2020-13563İstismar yok	A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7.phpgacl project · phpgacl · CWE-80 Kimlik doğrulamasız XSS	Orta6,1	—	%75,8	1 Şub 2021
47Planlayın	CVE-2020-13564İstismar yok	A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7.phpgacl project · phpgacl · CWE-80 Kimlik doğrulamasız XSS	Orta6,1	—	%75,8	1 Şub 2021
37İzleyin	CVE-2021-21287Kavram kanıtı	Server-Side Request Forgery in MinIO Browser APIminio · minio · CWE-918 SSRF Yol geçişi	Yüksek7,7	—	%23,8	1 Şub 2021
68Bu hafta	CVE-2021-3378Silahlaştırılmış	FortiLogger 4.4.2.2 is affected by Arbitrary File Upload by sending a "Content-Type: image/png" header to Config/SaveUploadedHotspotLogoFilefortilogger · fortilogger · CWE-434 Kimlik doğrulamasız Dosya yükleme	Kritik9,8	—	%97,5	1 Şub 2021
99Hemen	CVE-2020-25506Silahlaştırılmış	D-Link DNS-320 FW v2.06B01 Revision Ax is affected by command injection in the system_mgr.cgi component, which can lead to remote arbitrary dlink · dns-320 firmware · CWE-78 Girişsiz RCE Komut enjeksiyonu	Kritik9,8	KEV	%99,9	2 Şub 2021
43Planlayın	CVE-2020-18568İstismar yok	The D-Link DSR-250 (3.14) DSR-1000N (2.11B201) UPnP service contains a command injection vulnerability, which can cause remote command execudlink · dsr-250 firmware · CWE-78 Girişsiz RCE Komut enjeksiyonu	Kritik9,8	—	%14,5	2 Şub 2021
63Bu hafta	CVE-2020-28653Silahlaştırılmış	Zoho ManageEngine OpManager Stable build before 125203 (and Released build before 125233) allows Remote Code Execution via the Smart Update zohocorp · manageengine opmanager Girişsiz RCE	Kritik9,8	—	%78,7	3 Şub 2021
70Bu hafta	CVE-2020-2506Silahlaştırılmış	improper access control vulnerability in Helpdeskqnap · helpdesk · CWE-284 Kimlik doğrulamasız Erişim denetimi (IDOR)	Kritik9,8	KEV	%1,9	3 Şub 2021
65Bu hafta	CVE-2020-17523Kavram kanıtı	Apache Shiro before 1.7.1, when using Apache Shiro with Spring, a specially crafted HTTP request may cause an authentication bypass.apache · shiro · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,8	—	%85,9	3 Şub 2021
50Planlayın	CVE-2021-25274İstismar yok	The Collector Service in SolarWinds Orion Platform before 2020.2.4 uses MSMQ (Microsoft Message Queue) and doesn't set permissions on its prsolarwinds · orion platform · CWE-502 Girişsiz RCE Deserializasyon	Kritik9,8	—	%36,4	3 Şub 2021
32İzleyin	CVE-2021-26023İstismar yok	The Favorites component before 1.0.2 for Nagios XI 5.8.0 is vulnerable to XSS.nagios · favorites · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%25,1	3 Şub 2021
27İzleyin	CVE-2021-26024İstismar yok	The Favorites component before 1.0.2 for Nagios XI 5.8.0 is vulnerable to Insecure Direct Object Reference: it is possible to create favoritnagios · favorites · CWE-639 Kimlik doğrulamasız Erişim denetimi (IDOR)	Orta5,3	—	%19,0	3 Şub 2021
42Planlayın	CVE-2021-3401İstismar yok	Bitcoin Core before 0.19.0 might allow remote attackers to execute arbitrary code when another application unsafely passes the -platformplugbitcoin · bitcoin · CWE-88 Girişsiz RCE	Kritik9,8	—	%10,4	4 Şub 2021
81Hemen	CVE-2021-20016Silahlaştırılmış	A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to accesssonicwall · sma 100 firmware · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Kritik9,8	KEV	%40,0	4 Şub 2021
52Planlayın	CVE-2020-13579İstismar yok	An exploitable integer overflow vulnerability exists in the PlanMaker document parsing functionality of SoftMaker Office 2021’s PlanMaker apsoftmaker · planmaker 2021 · CWE-190 Bellek hatası	Yüksek7,8	—	%70,6	4 Şub 2021
52Planlayın	CVE-2020-13580İstismar yok	An exploitable heap-based buffer overflow vulnerability exists in the PlanMaker document parsing functionality of SoftMaker Office 2021’s Plsoftmaker · planmaker 2021 · CWE-787 Bellek hatası	Yüksek7,8	—	%70,6	4 Şub 2021
43Planlayın	CVE-2020-35765İstismar yok	doFilter in com.adventnet.appmanager.filter.UriCollector in Zoho ManageEngine Applications Manager through 14930 allows an authenticated SQLzohocorp · manageengine applications manager · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%27,3	5 Şub 2021
28İzleyin	CVE-2021-26723Kavram kanıtı	Jenzabar 9.2.x through 9.2.2 allows /ics?tool=search&query= XSS.jenzabar · jenzabar · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%12,6	6 Şub 2021
38İzleyin	CVE-2020-36242İstismar yok	In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could resultcryptography.io · cryptography · CWE-190 Kimlik doğrulamasız Bellek hatası	Kritik9,1	—	%6,7	7 Şub 2021
54Planlayın	CVE-2020-36243İstismar yok	The Patient Portal of OpenEMR 5.0.2.1 is affected by a Command Injection vulnerability in /interface/main/backup.php.open-emr · openemr · CWE-78 RCE Komut enjeksiyonu	Yüksek8,8	—	%64,1	7 Şub 2021
65Bu hafta	CVE-2021-3122Silahlaştırılmış	CMCAgent in NCR Command Center Agent 16.3 on Aloha POS/BOH servers permits the submission of a runCommand parameter (within an XML document ncr · command center agent · CWE-78 Girişsiz RCE Komut enjeksiyonu	Kritik9,8	—	%87,2	7 Şub 2021
27İzleyin	CVE-2021-3293Kavram kanıtı	emlog v5.3.1 has full path disclosure vulnerability in t/index.php, which allows an attacker to see the path to the webroot/file.emlog · emlog Kimlik doğrulamasız	Orta5,3	—	%19,9	8 Şub 2021
27İzleyin	CVE-2021-22122Kavram kanıtı	An improper neutralization of input during web page generation in FortiWeb GUI interface 6.3.0 through 6.3.7 and version before 6.2.4 may alfortinet · fortiweb · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%10,5	8 Şub 2021
39İzleyin	CVE-2021-21305İstismar yok	Code Injection vulnerability in CarrierWavecarrierwave project · carrierwave · CWE-74 RCE	Yüksek8,8	—	%12,6	8 Şub 2021
48Planlayın	CVE-2020-13947İstismar yok	An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the message.jsp apache · activemq · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%78,9	8 Şub 2021
98Hemen	CVE-2021-22502Silahlaştırılmış	Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40.microfocus · operation bridge reporter · CWE-78 Girişsiz RCE Komut enjeksiyonu	Kritik9,8	KEV	%96,7	8 Şub 2021
44Planlayın	CVE-2021-26912İstismar yok	NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to execute arbitrary code as SYSTEM because ofnetmotionsoftware · netmotion mobility · CWE-502 Girişsiz RCE Deserializasyon	Yüksek8,1	—	%41,0	8 Şub 2021
36İzleyin	CVE-2021-26913İstismar yok	NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to execute arbitrary code as SYSTEM because ofnetmotionsoftware · netmotion mobility · CWE-502 Girişsiz RCE Deserializasyon	Yüksek8,1	—	%13,2	8 Şub 2021
60Bu hafta	CVE-2021-26914Silahlaştırılmış	NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to execute arbitrary code as SYSTEM because ofnetmotionsoftware · netmotion mobility · CWE-502 Girişsiz RCE Deserializasyon	Yüksek8,1	—	%77,6	8 Şub 2021
45Planlayın	CVE-2021-26915İstismar yok	NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to execute arbitrary code as SYSTEM because ofnetmotionsoftware · netmotion mobility · CWE-502 Girişsiz RCE Deserializasyon	Yüksek8,1	—	%41,8	8 Şub 2021
28İzleyin	CVE-2020-22840Kavram kanıtı	Open redirect vulnerability in b2evolution CMS version prior to 6.11.6 allows an attacker to perform malicious open redirects to an attackerb2evolution · b2evolution · CWE-601 Kimlik doğrulamasız Açık yönlendirme	Orta6,1	—	%13,8	9 Şub 2021
40Planlayın	CVE-2021-21118İstismar yok	Insufficient data validation in V8 in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform out of bounds memgoogle · chrome · CWE-119 Kimlik doğrulamasız Bellek hatası	Yüksek8,8	—	%16,7	9 Şub 2021
29İzleyin	CVE-2021-21123Kavram kanıtı	Insufficient data validation in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrigoogle · chrome · CWE-20 Kimlik doğrulamasız	Orta6,5	—	%10,9	9 Şub 2021
45Planlayın	CVE-2021-21132İstismar yok	Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox egoogle · chrome · CWE-1021 Kimlik doğrulamasız	Kritik9,6	—	%23,4	9 Şub 2021
32İzleyin	CVE-2021-21135İstismar yok	Inappropriate implementation in Performance API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data vgoogle · chrome · CWE-346 Kimlik doğrulamasız	Orta6,5	—	%19,2	9 Şub 2021
71Bu hafta	CVE-2021-21148Silahlaştırılmış	Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crgoogle · chrome · CWE-787 Kimlik doğrulamasız Bellek hatası	Yüksek8,8	KEV	%19,9	9 Şub 2021
38İzleyin	CVE-2020-25237İstismar yok	A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1 Update 1), SINEMA Server (All versions < V14.0 SP2 Update 2).siemens · sinec network management system · CWE-22 Yol geçişi	Yüksek8,1	—	%20,6	9 Şub 2021
43Planlayın	CVE-2021-25140İstismar yok	A potential security vulnerability has been identified in the HPE Moonshot Provisioning Manager v1.20.hp · moonshot provisioning manager · CWE-22 Girişsiz RCE Yol geçişi	Kritik9,8	—	%12,0	9 Şub 2021
60Bu hafta	CVE-2020-13117Kavram kanıtı	Wavlink WN575A4, WN579X3, and WN530G3A devices through 2020-05-15 allow unauthenticated remote users to inject commands via the key parametewavlink · wn575a4 firmware · CWE-77 Girişsiz RCE Komut enjeksiyonu	Kritik9,8	—	%68,5	9 Şub 2021
48Planlayın	CVE-2021-21477İstismar yok	SAP Commerce Cloud, versions - 1808,1811,1905,2005,2011, enables certain users with required privileges to edit drools rules, an authenticatsap · commerce · CWE-94 RCE	Kritik9,9	—	%29,8	9 Şub 2021
39İzleyin	CVE-2021-21479Kavram kanıtı	In SCIMono before 0.0.19, it is possible for an attacker to inject and execute java expression compromising the availability and integrity osap · scimono · CWE-74 Kimlik doğrulamasız	Kritik9,1	—	%10,1	9 Şub 2021
65Bu hafta	CVE-2020-28871Silahlaştırılmış	Remote code execution in Monitorr v1.7.6m in upload.php allows an unauthorized person to execute arbitrary code on the server-side via an inmonitorr · monitorr · CWE-434 Girişsiz RCE Dosya yükleme	Kritik9,8	—	%85,7	9 Şub 2021
61Bu hafta	CVE-2021-23874Silahlaştırılmış	McAfee Total Protection (MTP) privilege escalation vulnerabilitymcafee · total protection · CWE-269 RCE Yerel yetki yükseltme	Yüksek7,8	KEV	%1,0	10 Şub 2021
35İzleyin	CVE-2021-27139İstismar yok	An issue was discovered on FiberHome HG6245D devices through RP2613.fiberhome · hg6245d firmware Kimlik doğrulamasız Kimlik doğrulama atlatma	Yüksek7,5	—	%16,2	10 Şub 2021
36İzleyin	CVE-2021-27140İstismar yok	An issue was discovered on FiberHome HG6245D devices through RP2613.fiberhome · hg6245d firmware · CWE-312 Kimlik doğrulamasız	Yüksek7,5	—	%18,8	10 Şub 2021
44Planlayın	CVE-2021-27141İstismar yok	An issue was discovered on FiberHome HG6245D devices through RP2613.fiberhome · hg6245d firmware · CWE-798 Kimlik doğrulamasız Gömülü kimlik bilgisi	Kritik9,8	—	%15,8	10 Şub 2021
35İzleyin	CVE-2021-27142İstismar yok	An issue was discovered on FiberHome HG6245D devices through RP2613.fiberhome · hg6245d firmware · CWE-798 Kimlik doğrulamasız Gömülü kimlik bilgisi	Yüksek7,5	—	%15,7	10 Şub 2021
44Planlayın	CVE-2021-27143İstismar yok	An issue was discovered on FiberHome HG6245D devices through RP2613.fiberhome · hg6245d firmware · CWE-798 Kimlik doğrulamasız Gömülü kimlik bilgisi	Kritik9,8	—	%15,9	10 Şub 2021
45Planlayın	CVE-2021-27144İstismar yok	An issue was discovered on FiberHome HG6245D devices through RP2613.fiberhome · hg6245d firmware · CWE-798 Kimlik doğrulamasız Gömülü kimlik bilgisi	Kritik9,8	—	%21,3	10 Şub 2021
46Planlayın	CVE-2021-27145İstismar yok	An issue was discovered on FiberHome HG6245D devices through RP2613.fiberhome · hg6245d firmware · CWE-798 Kimlik doğrulamasız Gömülü kimlik bilgisi	Kritik9,8	—	%23,6	10 Şub 2021
45Planlayın	CVE-2021-27146İstismar yok	An issue was discovered on FiberHome HG6245D devices through RP2613.fiberhome · hg6245d firmware · CWE-798 Kimlik doğrulamasız Gömülü kimlik bilgisi	Kritik9,8	—	%20,2	10 Şub 2021
44Planlayın	CVE-2021-27147İstismar yok	An issue was discovered on FiberHome HG6245D devices through RP2613.fiberhome · hg6245d firmware · CWE-798 Kimlik doğrulamasız Gömülü kimlik bilgisi	Kritik9,8	—	%17,1	10 Şub 2021
46Planlayın	CVE-2021-27148İstismar yok	An issue was discovered on FiberHome HG6245D devices through RP2613.fiberhome · hg6245d firmware · CWE-798 Kimlik doğrulamasız Gömülü kimlik bilgisi	Kritik9,8	—	%23,6	10 Şub 2021
46Planlayın	CVE-2021-27149İstismar yok	An issue was discovered on FiberHome HG6245D devices through RP2613.fiberhome · hg6245d firmware · CWE-798 Kimlik doğrulamasız Gömülü kimlik bilgisi	Kritik9,8	—	%23,6	10 Şub 2021
45Planlayın	CVE-2021-27150İstismar yok	An issue was discovered on FiberHome HG6245D devices through RP2613.fiberhome · hg6245d firmware · CWE-798 Kimlik doğrulamasız Gömülü kimlik bilgisi	Kritik9,8	—	%19,7	10 Şub 2021
46Planlayın	CVE-2021-27151İstismar yok	An issue was discovered on FiberHome HG6245D devices through RP2613.fiberhome · hg6245d firmware · CWE-798 Kimlik doğrulamasız Gömülü kimlik bilgisi	Kritik9,8	—	%23,0	10 Şub 2021
46Planlayın	CVE-2021-27152İstismar yok	An issue was discovered on FiberHome HG6245D devices through RP2613.fiberhome · hg6245d firmware · CWE-798 Kimlik doğrulamasız Gömülü kimlik bilgisi	Kritik9,8	—	%23,0	10 Şub 2021
45Planlayın	CVE-2021-27153İstismar yok	An issue was discovered on FiberHome HG6245D devices through RP2613.fiberhome · hg6245d firmware · CWE-798 Kimlik doğrulamasız Gömülü kimlik bilgisi	Kritik9,8	—	%20,2	10 Şub 2021
45Planlayın	CVE-2021-27154İstismar yok	An issue was discovered on FiberHome HG6245D devices through RP2613.fiberhome · hg6245d firmware · CWE-798 Kimlik doğrulamasız Gömülü kimlik bilgisi	Kritik9,8	—	%20,2	10 Şub 2021
45Planlayın	CVE-2021-27155İstismar yok	An issue was discovered on FiberHome HG6245D devices through RP2613.fiberhome · hg6245d firmware · CWE-798 Kimlik doğrulamasız Gömülü kimlik bilgisi	Kritik9,8	—	%20,2	10 Şub 2021
44Planlayın	CVE-2021-27156İstismar yok	An issue was discovered on FiberHome HG6245D devices through RP2613.fiberhome · hg6245d firmware · CWE-798 Kimlik doğrulamasız Gömülü kimlik bilgisi	Kritik9,8	—	%15,0	10 Şub 2021
44Planlayın	CVE-2021-27157İstismar yok	An issue was discovered on FiberHome HG6245D devices through RP2613.fiberhome · hg6245d firmware · CWE-798 Kimlik doğrulamasız Gömülü kimlik bilgisi	Kritik9,8	—	%15,0	10 Şub 2021
46Planlayın	CVE-2021-27158İstismar yok	An issue was discovered on FiberHome HG6245D devices through RP2613.fiberhome · hg6245d firmware · CWE-798 Kimlik doğrulamasız Gömülü kimlik bilgisi	Kritik9,8	—	%23,6	10 Şub 2021
46Planlayın	CVE-2021-27159İstismar yok	An issue was discovered on FiberHome HG6245D devices through RP2613.fiberhome · hg6245d firmware · CWE-798 Kimlik doğrulamasız Gömülü kimlik bilgisi	Kritik9,8	—	%23,0	10 Şub 2021
44Planlayın	CVE-2021-27160İstismar yok	An issue was discovered on FiberHome HG6245D devices through RP2613.fiberhome · hg6245d firmware · CWE-798 Kimlik doğrulamasız Gömülü kimlik bilgisi	Kritik9,8	—	%17,1	10 Şub 2021
44Planlayın	CVE-2021-27161İstismar yok	An issue was discovered on FiberHome HG6245D devices through RP2613.fiberhome · hg6245d firmware · CWE-798 Kimlik doğrulamasız Gömülü kimlik bilgisi	Kritik9,8	—	%17,1	10 Şub 2021
47Planlayın	CVE-2021-27162İstismar yok	An issue was discovered on FiberHome HG6245D devices through RP2613.fiberhome · hg6245d firmware · CWE-798 Kimlik doğrulamasız Gömülü kimlik bilgisi	Kritik9,8	—	%27,8	10 Şub 2021
46Planlayın	CVE-2021-27163İstismar yok	An issue was discovered on FiberHome HG6245D devices through RP2613.fiberhome · hg6245d firmware · CWE-798 Kimlik doğrulamasız Gömülü kimlik bilgisi	Kritik9,8	—	%23,0	10 Şub 2021
46Planlayın	CVE-2021-27164İstismar yok	An issue was discovered on FiberHome HG6245D devices through RP2613.fiberhome · hg6245d firmware · CWE-798 Kimlik doğrulamasız Gömülü kimlik bilgisi	Kritik9,8	—	%23,6	10 Şub 2021
45Planlayın	CVE-2021-27165İstismar yok	An issue was discovered on FiberHome HG6245D devices through RP2613.fiberhome · hg6245d firmware · CWE-798 Kimlik doğrulamasız Gömülü kimlik bilgisi	Kritik9,8	—	%19,8	10 Şub 2021
45Planlayın	CVE-2021-27166İstismar yok	An issue was discovered on FiberHome HG6245D devices through RP2613.fiberhome · hg6245d firmware · CWE-798 Kimlik doğrulamasız Gömülü kimlik bilgisi	Kritik9,8	—	%19,3	10 Şub 2021
43Planlayın	CVE-2021-27167İstismar yok	An issue was discovered on FiberHome HG6245D devices through RP2613.fiberhome · hg6245d firmware · CWE-798 Kimlik doğrulamasız Gömülü kimlik bilgisi	Kritik9,8	—	%14,5	10 Şub 2021
45Planlayın	CVE-2021-27168İstismar yok	An issue was discovered on FiberHome HG6245D devices through RP2613.fiberhome · hg6245d firmware · CWE-798 Kimlik doğrulamasız Gömülü kimlik bilgisi	Kritik9,8	—	%19,8	10 Şub 2021
45Planlayın	CVE-2021-27169İstismar yok	An issue was discovered on FiberHome AN5506-04-FA devices with firmware RP2631.fiberhome · an5506-04-fa firmware · CWE-798 Kimlik doğrulamasız Gömülü kimlik bilgisi	Kritik9,8	—	%19,8	10 Şub 2021
44Planlayın	CVE-2021-27170İstismar yok	An issue was discovered on FiberHome HG6245D devices through RP2613.fiberhome · hg6245d firmware · CWE-922 Kimlik doğrulamasız	Kritik9,8	—	%15,9	10 Şub 2021
44Planlayın	CVE-2021-27171İstismar yok	An issue was discovered on FiberHome HG6245D devices through RP2613.fiberhome · hg6245d firmware · CWE-787 Kimlik doğrulamasız Bellek hatası	Kritik9,8	—	%17,8	10 Şub 2021
45Planlayın	CVE-2021-27172İstismar yok	An issue was discovered on FiberHome HG6245D devices through RP2613.fiberhome · hg6245d firmware · CWE-798 Kimlik doğrulamasız Gömülü kimlik bilgisi	Kritik9,8	—	%19,3	10 Şub 2021
34İzleyin	CVE-2021-27173İstismar yok	An issue was discovered on FiberHome HG6245D devices through RP2613.fiberhome · hg6245d firmware Kimlik doğrulamasız Kimlik doğrulama atlatma	Yüksek7,5	—	%12,6	10 Şub 2021
36İzleyin	CVE-2021-27174İstismar yok	An issue was discovered on FiberHome HG6245D devices through RP2613.fiberhome · hg6245d firmware · CWE-312 Kimlik doğrulamasız	Yüksek7,5	—	%18,6	10 Şub 2021
35İzleyin	CVE-2021-27175İstismar yok	An issue was discovered on FiberHome HG6245D devices through RP2613.fiberhome · hg6245d firmware · CWE-312 Kimlik doğrulamasız	Yüksek7,5	—	%18,1	10 Şub 2021
36İzleyin	CVE-2021-27176İstismar yok	An issue was discovered on FiberHome HG6245D devices through RP2613.fiberhome · hg6245d firmware · CWE-312 Kimlik doğrulamasız	Yüksek7,5	—	%18,6	10 Şub 2021
45Planlayın	CVE-2021-27177İstismar yok	An issue was discovered on FiberHome HG6245D devices through RP2613.fiberhome · hg6245d firmware · CWE-863 Kimlik doğrulamasız Kimlik doğrulama atlatma Erişim denetimi (IDOR)	Kritik9,8	—	%19,7	10 Şub 2021
35İzleyin	CVE-2021-27178İstismar yok	An issue was discovered on FiberHome HG6245D devices through RP2613.fiberhome · hg6245d firmware · CWE-312 Kimlik doğrulamasız	Yüksek7,5	—	%18,1	10 Şub 2021
34İzleyin	CVE-2021-27179İstismar yok	An issue was discovered on FiberHome HG6245D devices through RP2613.fiberhome · hg6245d firmware · CWE-20 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	%13,9	10 Şub 2021
55Planlayın	CVE-2020-13548İstismar yok	In Foxit Reader 10.1.0.37527, a specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code foxitsoftware · foxit reader · CWE-416 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%65,8	10 Şub 2021
55Planlayın	CVE-2020-27871İstismar yok	This vulnerability allows remote attackers to create arbitrary files on affected installations of SolarWinds Orion Platform 2020.2.1.solarwinds · orion platform · CWE-22 RCE Yol geçişi	Yüksek7,2	—	%90,8	10 Şub 2021
60Bu hafta	CVE-2021-22652Silahlaştırılmış	Access to the Advantech iView versions prior to v5.7.03.6112 configuration are missing authentication, which may allow an unauthorized attacadvantech · iview · CWE-306 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,8	—	%36,8	11 Şub 2021
34İzleyin	CVE-2021-22654İstismar yok	Advantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow an unauthorized attacker to disclose inforadvantech · iview · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Yüksek7,5	—	%12,1	11 Şub 2021
43Planlayın	CVE-2021-22658İstismar yok	Advantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow an attacker to escalate privileges to 'Admadvantech · iview · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Kritik9,8	—	%12,6	11 Şub 2021
50Planlayın	CVE-2021-22881Kavram kanıtı	The Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect vulnerability.rubyonrails · rails · CWE-601 Kimlik doğrulamasız Açık yönlendirme	Orta6,1	—	%87,3	11 Şub 2021
66Bu hafta	CVE-2021-21307Silahlaştırılmış	Remote Code Exploit in Lucee Adminlucee · lucee server · CWE-862 Kimlik doğrulamasız Erişim denetimi (IDOR)	Kritik9,8	—	%89,1	11 Şub 2021
91Hemen	CVE-2021-21017Silahlaştırılmış	Acrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code Executionadobe · acrobat · CWE-122 Girişsiz RCE Bellek hatası	Yüksek8,8	KEV	%86,3	11 Şub 2021
44Planlayın	CVE-2021-21029İstismar yok	Magento Commerce Reflected Cross-site Scripting Vulnerability Could Lead To Arbitrary JavaScript Executionmagento · magento · CWE-79 XSS	Orta4,8	—	%84,6	11 Şub 2021
30İzleyin	CVE-2021-21042Kavram kanıtı	Acrobat Reader DC Out-Of-Bounds Read Information Disclosure Vulnerabilityadobe · acrobat · CWE-125 Kimlik doğrulamasız Bellek hatası	Orta6,5	—	%14,7	11 Şub 2021
88Hemen	CVE-2021-21311Silahlaştırılmış	Adminer is an open-source database management in a single PHP file.adminer · adminer · CWE-918 Kimlik doğrulamasız SSRF	Yüksek7,2	KEV	%98,4	11 Şub 2021
38İzleyin	CVE-2020-27864İstismar yok	This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1860 firmware versiondlink · dap-1860 firmware · CWE-77 Girişsiz RCE Komut enjeksiyonu	Yüksek8,8	—	%10,0	11 Şub 2021
64Bu hafta	CVE-2020-27868İstismar yok	This vulnerability allows remote attackers to execute arbitrary code on affected installations of Qognify Ocularis 5.9.0.395.qognify · ocularis · CWE-502 Girişsiz RCE Deserializasyon	Kritik9,8	—	%81,7	11 Şub 2021
50Planlayın	CVE-2021-27212İstismar yok	In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function viopenldap · openldap · CWE-617 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	%66,1	14 Şub 2021
87Hemen	CVE-2021-25296Silahlaştırılmış	Nagios XI version xi-5.7.5 is affected by OS command injection.nagios · nagios xi RCE Komut enjeksiyonu	Yüksek8,8	KEV	%71,9	15 Şub 2021

CVE-2020-13562
47Planlayın
A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7.
OrtaCVSS 6,1İstismar yokEPSS %77
- Kimlik doğrulamasız
- XSS
phpgacl project · phpgacl1 Şub 2021
CVE-2020-13563
47Planlayın
A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7.
OrtaCVSS 6,1İstismar yokEPSS %75
- Kimlik doğrulamasız
- XSS
phpgacl project · phpgacl1 Şub 2021
CVE-2020-13564
47Planlayın
A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7.
OrtaCVSS 6,1İstismar yokEPSS %75
- Kimlik doğrulamasız
- XSS
phpgacl project · phpgacl1 Şub 2021
CVE-2021-21287
37İzleyin
Server-Side Request Forgery in MinIO Browser API
YüksekCVSS 7,7Kavram kanıtıEPSS %23
- SSRF
- Yol geçişi
minio · minio1 Şub 2021
CVE-2021-3378
68Bu hafta
FortiLogger 4.4.2.2 is affected by Arbitrary File Upload by sending a "Content-Type: image/png" header to Config/SaveUploadedHotspotLogoFile
KritikCVSS 9,8SilahlaştırılmışEPSS %97
- Kimlik doğrulamasız
- Dosya yükleme
fortilogger · fortilogger1 Şub 2021
CVE-2020-25506
99Hemen
D-Link DNS-320 FW v2.06B01 Revision Ax is affected by command injection in the system_mgr.cgi component, which can lead to remote arbitrary
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99
- Girişsiz RCE
- Komut enjeksiyonu
dlink · dns-320 firmware2 Şub 2021
CVE-2020-18568
43Planlayın
The D-Link DSR-250 (3.14) DSR-1000N (2.11B201) UPnP service contains a command injection vulnerability, which can cause remote command execu
KritikCVSS 9,8İstismar yokEPSS %14
- Girişsiz RCE
- Komut enjeksiyonu
dlink · dsr-250 firmware2 Şub 2021
CVE-2020-28653
63Bu hafta
Zoho ManageEngine OpManager Stable build before 125203 (and Released build before 125233) allows Remote Code Execution via the Smart Update
KritikCVSS 9,8SilahlaştırılmışEPSS %78
- Girişsiz RCE
zohocorp · manageengine opmanager3 Şub 2021
CVE-2020-2506
70Bu hafta
improper access control vulnerability in Helpdesk
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %1
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
qnap · helpdesk3 Şub 2021
CVE-2020-17523
65Bu hafta
Apache Shiro before 1.7.1, when using Apache Shiro with Spring, a specially crafted HTTP request may cause an authentication bypass.
KritikCVSS 9,8Kavram kanıtıEPSS %85
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
apache · shiro3 Şub 2021
CVE-2021-25274
50Planlayın
The Collector Service in SolarWinds Orion Platform before 2020.2.4 uses MSMQ (Microsoft Message Queue) and doesn't set permissions on its pr
KritikCVSS 9,8İstismar yokEPSS %36
- Girişsiz RCE
- Deserializasyon
solarwinds · orion platform3 Şub 2021
CVE-2021-26023
32İzleyin
The Favorites component before 1.0.2 for Nagios XI 5.8.0 is vulnerable to XSS.
OrtaCVSS 6,1İstismar yokEPSS %25
- Kimlik doğrulamasız
- XSS
nagios · favorites3 Şub 2021
CVE-2021-26024
27İzleyin
The Favorites component before 1.0.2 for Nagios XI 5.8.0 is vulnerable to Insecure Direct Object Reference: it is possible to create favorit
OrtaCVSS 5,3İstismar yokEPSS %19
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
nagios · favorites3 Şub 2021
CVE-2021-3401
42Planlayın
Bitcoin Core before 0.19.0 might allow remote attackers to execute arbitrary code when another application unsafely passes the -platformplug
KritikCVSS 9,8İstismar yokEPSS %10
- Girişsiz RCE
bitcoin · bitcoin4 Şub 2021
CVE-2021-20016
81Hemen
A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %40
- Kimlik doğrulamasız
- SQL enjeksiyonu
sonicwall · sma 100 firmware4 Şub 2021
CVE-2020-13579
52Planlayın
An exploitable integer overflow vulnerability exists in the PlanMaker document parsing functionality of SoftMaker Office 2021’s PlanMaker ap
YüksekCVSS 7,8İstismar yokEPSS %70
- Bellek hatası
softmaker · planmaker 20214 Şub 2021
CVE-2020-13580
52Planlayın
An exploitable heap-based buffer overflow vulnerability exists in the PlanMaker document parsing functionality of SoftMaker Office 2021’s Pl
YüksekCVSS 7,8İstismar yokEPSS %70
- Bellek hatası
softmaker · planmaker 20214 Şub 2021
CVE-2020-35765
43Planlayın
doFilter in com.adventnet.appmanager.filter.UriCollector in Zoho ManageEngine Applications Manager through 14930 allows an authenticated SQL
YüksekCVSS 8,8İstismar yokEPSS %27
- SQL enjeksiyonu
zohocorp · manageengine applications manager5 Şub 2021
CVE-2021-26723
28İzleyin
Jenzabar 9.2.x through 9.2.2 allows /ics?tool=search&query= XSS.
OrtaCVSS 6,1Kavram kanıtıEPSS %12
- Kimlik doğrulamasız
- XSS
jenzabar · jenzabar6 Şub 2021
CVE-2020-36242
38İzleyin
In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result
KritikCVSS 9,1İstismar yokEPSS %6
- Kimlik doğrulamasız
- Bellek hatası
cryptography.io · cryptography7 Şub 2021
CVE-2020-36243
54Planlayın
The Patient Portal of OpenEMR 5.0.2.1 is affected by a Command Injection vulnerability in /interface/main/backup.php.
YüksekCVSS 8,8İstismar yokEPSS %64
- RCE
- Komut enjeksiyonu
open-emr · openemr7 Şub 2021
CVE-2021-3122
65Bu hafta
CMCAgent in NCR Command Center Agent 16.3 on Aloha POS/BOH servers permits the submission of a runCommand parameter (within an XML document
KritikCVSS 9,8SilahlaştırılmışEPSS %87
- Girişsiz RCE
- Komut enjeksiyonu
ncr · command center agent7 Şub 2021
CVE-2021-3293
27İzleyin
emlog v5.3.1 has full path disclosure vulnerability in t/index.php, which allows an attacker to see the path to the webroot/file.
OrtaCVSS 5,3Kavram kanıtıEPSS %19
- Kimlik doğrulamasız
emlog · emlog8 Şub 2021
CVE-2021-22122
27İzleyin
An improper neutralization of input during web page generation in FortiWeb GUI interface 6.3.0 through 6.3.7 and version before 6.2.4 may al
OrtaCVSS 6,1Kavram kanıtıEPSS %10
- Kimlik doğrulamasız
- XSS
fortinet · fortiweb8 Şub 2021
CVE-2021-21305
39İzleyin
Code Injection vulnerability in CarrierWave
YüksekCVSS 8,8İstismar yokEPSS %12
- RCE
carrierwave project · carrierwave8 Şub 2021
CVE-2020-13947
48Planlayın
An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the message.jsp
OrtaCVSS 6,1İstismar yokEPSS %78
- Kimlik doğrulamasız
- XSS
apache · activemq8 Şub 2021
CVE-2021-22502
98Hemen
Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40.
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %96
- Girişsiz RCE
- Komut enjeksiyonu
microfocus · operation bridge reporter8 Şub 2021
CVE-2021-26912
44Planlayın
NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to execute arbitrary code as SYSTEM because of
YüksekCVSS 8,1İstismar yokEPSS %41
- Girişsiz RCE
- Deserializasyon
netmotionsoftware · netmotion mobility8 Şub 2021
CVE-2021-26913
36İzleyin
NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to execute arbitrary code as SYSTEM because of
YüksekCVSS 8,1İstismar yokEPSS %13
- Girişsiz RCE
- Deserializasyon
netmotionsoftware · netmotion mobility8 Şub 2021
CVE-2021-26914
60Bu hafta
NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to execute arbitrary code as SYSTEM because of
YüksekCVSS 8,1SilahlaştırılmışEPSS %77
- Girişsiz RCE
- Deserializasyon
netmotionsoftware · netmotion mobility8 Şub 2021
CVE-2021-26915
45Planlayın
NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to execute arbitrary code as SYSTEM because of
YüksekCVSS 8,1İstismar yokEPSS %41
- Girişsiz RCE
- Deserializasyon
netmotionsoftware · netmotion mobility8 Şub 2021
CVE-2020-22840
28İzleyin
Open redirect vulnerability in b2evolution CMS version prior to 6.11.6 allows an attacker to perform malicious open redirects to an attacker
OrtaCVSS 6,1Kavram kanıtıEPSS %13
- Kimlik doğrulamasız
- Açık yönlendirme
b2evolution · b2evolution9 Şub 2021
CVE-2021-21118
40Planlayın
Insufficient data validation in V8 in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform out of bounds mem
YüksekCVSS 8,8İstismar yokEPSS %16
- Kimlik doğrulamasız
- Bellek hatası
google · chrome9 Şub 2021
CVE-2021-21123
29İzleyin
Insufficient data validation in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restri
OrtaCVSS 6,5Kavram kanıtıEPSS %10
- Kimlik doğrulamasız
google · chrome9 Şub 2021
CVE-2021-21132
45Planlayın
Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox e
KritikCVSS 9,6İstismar yokEPSS %23
- Kimlik doğrulamasız
google · chrome9 Şub 2021
CVE-2021-21135
32İzleyin
Inappropriate implementation in Performance API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data v
OrtaCVSS 6,5İstismar yokEPSS %19
- Kimlik doğrulamasız
google · chrome9 Şub 2021
CVE-2021-21148
71Bu hafta
Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a cr
YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %19
- Kimlik doğrulamasız
- Bellek hatası
google · chrome9 Şub 2021
CVE-2020-25237
38İzleyin
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1 Update 1), SINEMA Server (All versions < V14.0 SP2 Update 2).
YüksekCVSS 8,1İstismar yokEPSS %20
- Yol geçişi
siemens · sinec network management system9 Şub 2021
CVE-2021-25140
43Planlayın
A potential security vulnerability has been identified in the HPE Moonshot Provisioning Manager v1.20.
KritikCVSS 9,8İstismar yokEPSS %12
- Girişsiz RCE
- Yol geçişi
hp · moonshot provisioning manager9 Şub 2021
CVE-2020-13117
60Bu hafta
Wavlink WN575A4, WN579X3, and WN530G3A devices through 2020-05-15 allow unauthenticated remote users to inject commands via the key paramete
KritikCVSS 9,8Kavram kanıtıEPSS %68
- Girişsiz RCE
- Komut enjeksiyonu
wavlink · wn575a4 firmware9 Şub 2021
CVE-2021-21477
48Planlayın
SAP Commerce Cloud, versions - 1808,1811,1905,2005,2011, enables certain users with required privileges to edit drools rules, an authenticat
KritikCVSS 9,9İstismar yokEPSS %29
- RCE
sap · commerce9 Şub 2021
CVE-2021-21479
39İzleyin
In SCIMono before 0.0.19, it is possible for an attacker to inject and execute java expression compromising the availability and integrity o
KritikCVSS 9,1Kavram kanıtıEPSS %10
- Kimlik doğrulamasız
sap · scimono9 Şub 2021
CVE-2020-28871
65Bu hafta
Remote code execution in Monitorr v1.7.6m in upload.php allows an unauthorized person to execute arbitrary code on the server-side via an in
KritikCVSS 9,8SilahlaştırılmışEPSS %85
- Girişsiz RCE
- Dosya yükleme
monitorr · monitorr9 Şub 2021
CVE-2021-23874
61Bu hafta
McAfee Total Protection (MTP) privilege escalation vulnerability
YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %1
- RCE
- Yerel yetki yükseltme
mcafee · total protection10 Şub 2021
CVE-2021-27139
35İzleyin
An issue was discovered on FiberHome HG6245D devices through RP2613.
YüksekCVSS 7,5İstismar yokEPSS %16
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
fiberhome · hg6245d firmware10 Şub 2021
CVE-2021-27140
36İzleyin
An issue was discovered on FiberHome HG6245D devices through RP2613.
YüksekCVSS 7,5İstismar yokEPSS %18
- Kimlik doğrulamasız
fiberhome · hg6245d firmware10 Şub 2021
CVE-2021-27141
44Planlayın
An issue was discovered on FiberHome HG6245D devices through RP2613.
KritikCVSS 9,8İstismar yokEPSS %15
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
fiberhome · hg6245d firmware10 Şub 2021
CVE-2021-27142
35İzleyin
An issue was discovered on FiberHome HG6245D devices through RP2613.
YüksekCVSS 7,5İstismar yokEPSS %15
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
fiberhome · hg6245d firmware10 Şub 2021
CVE-2021-27143
44Planlayın
An issue was discovered on FiberHome HG6245D devices through RP2613.
KritikCVSS 9,8İstismar yokEPSS %15
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
fiberhome · hg6245d firmware10 Şub 2021
CVE-2021-27144
45Planlayın
An issue was discovered on FiberHome HG6245D devices through RP2613.
KritikCVSS 9,8İstismar yokEPSS %21
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
fiberhome · hg6245d firmware10 Şub 2021
CVE-2021-27145
46Planlayın
An issue was discovered on FiberHome HG6245D devices through RP2613.
KritikCVSS 9,8İstismar yokEPSS %23
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
fiberhome · hg6245d firmware10 Şub 2021
CVE-2021-27146
45Planlayın
An issue was discovered on FiberHome HG6245D devices through RP2613.
KritikCVSS 9,8İstismar yokEPSS %20
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
fiberhome · hg6245d firmware10 Şub 2021
CVE-2021-27147
44Planlayın
An issue was discovered on FiberHome HG6245D devices through RP2613.
KritikCVSS 9,8İstismar yokEPSS %17
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
fiberhome · hg6245d firmware10 Şub 2021
CVE-2021-27148
46Planlayın
An issue was discovered on FiberHome HG6245D devices through RP2613.
KritikCVSS 9,8İstismar yokEPSS %23
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
fiberhome · hg6245d firmware10 Şub 2021
CVE-2021-27149
46Planlayın
An issue was discovered on FiberHome HG6245D devices through RP2613.
KritikCVSS 9,8İstismar yokEPSS %23
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
fiberhome · hg6245d firmware10 Şub 2021
CVE-2021-27150
45Planlayın
An issue was discovered on FiberHome HG6245D devices through RP2613.
KritikCVSS 9,8İstismar yokEPSS %19
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
fiberhome · hg6245d firmware10 Şub 2021
CVE-2021-27151
46Planlayın
An issue was discovered on FiberHome HG6245D devices through RP2613.
KritikCVSS 9,8İstismar yokEPSS %23
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
fiberhome · hg6245d firmware10 Şub 2021
CVE-2021-27152
46Planlayın
An issue was discovered on FiberHome HG6245D devices through RP2613.
KritikCVSS 9,8İstismar yokEPSS %23
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
fiberhome · hg6245d firmware10 Şub 2021
CVE-2021-27153
45Planlayın
An issue was discovered on FiberHome HG6245D devices through RP2613.
KritikCVSS 9,8İstismar yokEPSS %20
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
fiberhome · hg6245d firmware10 Şub 2021
CVE-2021-27154
45Planlayın
An issue was discovered on FiberHome HG6245D devices through RP2613.
KritikCVSS 9,8İstismar yokEPSS %20
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
fiberhome · hg6245d firmware10 Şub 2021
CVE-2021-27155
45Planlayın
An issue was discovered on FiberHome HG6245D devices through RP2613.
KritikCVSS 9,8İstismar yokEPSS %20
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
fiberhome · hg6245d firmware10 Şub 2021
CVE-2021-27156
44Planlayın
An issue was discovered on FiberHome HG6245D devices through RP2613.
KritikCVSS 9,8İstismar yokEPSS %15
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
fiberhome · hg6245d firmware10 Şub 2021
CVE-2021-27157
44Planlayın
An issue was discovered on FiberHome HG6245D devices through RP2613.
KritikCVSS 9,8İstismar yokEPSS %15
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
fiberhome · hg6245d firmware10 Şub 2021
CVE-2021-27158
46Planlayın
An issue was discovered on FiberHome HG6245D devices through RP2613.
KritikCVSS 9,8İstismar yokEPSS %23
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
fiberhome · hg6245d firmware10 Şub 2021
CVE-2021-27159
46Planlayın
An issue was discovered on FiberHome HG6245D devices through RP2613.
KritikCVSS 9,8İstismar yokEPSS %23
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
fiberhome · hg6245d firmware10 Şub 2021
CVE-2021-27160
44Planlayın
An issue was discovered on FiberHome HG6245D devices through RP2613.
KritikCVSS 9,8İstismar yokEPSS %17
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
fiberhome · hg6245d firmware10 Şub 2021
CVE-2021-27161
44Planlayın
An issue was discovered on FiberHome HG6245D devices through RP2613.
KritikCVSS 9,8İstismar yokEPSS %17
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
fiberhome · hg6245d firmware10 Şub 2021
CVE-2021-27162
47Planlayın
An issue was discovered on FiberHome HG6245D devices through RP2613.
KritikCVSS 9,8İstismar yokEPSS %27
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
fiberhome · hg6245d firmware10 Şub 2021
CVE-2021-27163
46Planlayın
An issue was discovered on FiberHome HG6245D devices through RP2613.
KritikCVSS 9,8İstismar yokEPSS %23
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
fiberhome · hg6245d firmware10 Şub 2021
CVE-2021-27164
46Planlayın
An issue was discovered on FiberHome HG6245D devices through RP2613.
KritikCVSS 9,8İstismar yokEPSS %23
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
fiberhome · hg6245d firmware10 Şub 2021
CVE-2021-27165
45Planlayın
An issue was discovered on FiberHome HG6245D devices through RP2613.
KritikCVSS 9,8İstismar yokEPSS %19
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
fiberhome · hg6245d firmware10 Şub 2021
CVE-2021-27166
45Planlayın
An issue was discovered on FiberHome HG6245D devices through RP2613.
KritikCVSS 9,8İstismar yokEPSS %19
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
fiberhome · hg6245d firmware10 Şub 2021
CVE-2021-27167
43Planlayın
An issue was discovered on FiberHome HG6245D devices through RP2613.
KritikCVSS 9,8İstismar yokEPSS %14
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
fiberhome · hg6245d firmware10 Şub 2021
CVE-2021-27168
45Planlayın
An issue was discovered on FiberHome HG6245D devices through RP2613.
KritikCVSS 9,8İstismar yokEPSS %19
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
fiberhome · hg6245d firmware10 Şub 2021
CVE-2021-27169
45Planlayın
An issue was discovered on FiberHome AN5506-04-FA devices with firmware RP2631.
KritikCVSS 9,8İstismar yokEPSS %19
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
fiberhome · an5506-04-fa firmware10 Şub 2021
CVE-2021-27170
44Planlayın
An issue was discovered on FiberHome HG6245D devices through RP2613.
KritikCVSS 9,8İstismar yokEPSS %15
- Kimlik doğrulamasız
fiberhome · hg6245d firmware10 Şub 2021
CVE-2021-27171
44Planlayın
An issue was discovered on FiberHome HG6245D devices through RP2613.
KritikCVSS 9,8İstismar yokEPSS %17
- Kimlik doğrulamasız
- Bellek hatası
fiberhome · hg6245d firmware10 Şub 2021
CVE-2021-27172
45Planlayın
An issue was discovered on FiberHome HG6245D devices through RP2613.
KritikCVSS 9,8İstismar yokEPSS %19
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
fiberhome · hg6245d firmware10 Şub 2021
CVE-2021-27173
34İzleyin
An issue was discovered on FiberHome HG6245D devices through RP2613.
YüksekCVSS 7,5İstismar yokEPSS %12
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
fiberhome · hg6245d firmware10 Şub 2021
CVE-2021-27174
36İzleyin
An issue was discovered on FiberHome HG6245D devices through RP2613.
YüksekCVSS 7,5İstismar yokEPSS %18
- Kimlik doğrulamasız
fiberhome · hg6245d firmware10 Şub 2021
CVE-2021-27175
35İzleyin
An issue was discovered on FiberHome HG6245D devices through RP2613.
YüksekCVSS 7,5İstismar yokEPSS %18
- Kimlik doğrulamasız
fiberhome · hg6245d firmware10 Şub 2021
CVE-2021-27176
36İzleyin
An issue was discovered on FiberHome HG6245D devices through RP2613.
YüksekCVSS 7,5İstismar yokEPSS %18
- Kimlik doğrulamasız
fiberhome · hg6245d firmware10 Şub 2021
CVE-2021-27177
45Planlayın
An issue was discovered on FiberHome HG6245D devices through RP2613.
KritikCVSS 9,8İstismar yokEPSS %19
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
- Erişim denetimi (IDOR)
fiberhome · hg6245d firmware10 Şub 2021
CVE-2021-27178
35İzleyin
An issue was discovered on FiberHome HG6245D devices through RP2613.
YüksekCVSS 7,5İstismar yokEPSS %18
- Kimlik doğrulamasız
fiberhome · hg6245d firmware10 Şub 2021
CVE-2021-27179
34İzleyin
An issue was discovered on FiberHome HG6245D devices through RP2613.
YüksekCVSS 7,5İstismar yokEPSS %13
- Kimlik doğrulamasız
- Hizmet dışı bırakma
fiberhome · hg6245d firmware10 Şub 2021
CVE-2020-13548
55Planlayın
In Foxit Reader 10.1.0.37527, a specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code
YüksekCVSS 8,8İstismar yokEPSS %65
- Girişsiz RCE
- Bellek hatası
foxitsoftware · foxit reader10 Şub 2021
CVE-2020-27871
55Planlayın
This vulnerability allows remote attackers to create arbitrary files on affected installations of SolarWinds Orion Platform 2020.2.1.
YüksekCVSS 7,2İstismar yokEPSS %90
- RCE
- Yol geçişi
solarwinds · orion platform10 Şub 2021
CVE-2021-22652
60Bu hafta
Access to the Advantech iView versions prior to v5.7.03.6112 configuration are missing authentication, which may allow an unauthorized attac
KritikCVSS 9,8SilahlaştırılmışEPSS %36
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
advantech · iview11 Şub 2021
CVE-2021-22654
34İzleyin
Advantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow an unauthorized attacker to disclose infor
YüksekCVSS 7,5İstismar yokEPSS %12
- Kimlik doğrulamasız
- SQL enjeksiyonu
advantech · iview11 Şub 2021
CVE-2021-22658
43Planlayın
Advantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow an attacker to escalate privileges to 'Adm
KritikCVSS 9,8İstismar yokEPSS %12
- Kimlik doğrulamasız
- SQL enjeksiyonu
advantech · iview11 Şub 2021
CVE-2021-22881
50Planlayın
The Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect vulnerability.
OrtaCVSS 6,1Kavram kanıtıEPSS %87
- Kimlik doğrulamasız
- Açık yönlendirme
rubyonrails · rails11 Şub 2021
CVE-2021-21307
66Bu hafta
Remote Code Exploit in Lucee Admin
KritikCVSS 9,8SilahlaştırılmışEPSS %89
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
lucee · lucee server11 Şub 2021
CVE-2021-21017
91Hemen
Acrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution
YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %86
- Girişsiz RCE
- Bellek hatası
adobe · acrobat11 Şub 2021
CVE-2021-21029
44Planlayın
Magento Commerce Reflected Cross-site Scripting Vulnerability Could Lead To Arbitrary JavaScript Execution
OrtaCVSS 4,8İstismar yokEPSS %84
- XSS
magento · magento11 Şub 2021
CVE-2021-21042
30İzleyin
Acrobat Reader DC Out-Of-Bounds Read Information Disclosure Vulnerability
OrtaCVSS 6,5Kavram kanıtıEPSS %14
- Kimlik doğrulamasız
- Bellek hatası
adobe · acrobat11 Şub 2021
CVE-2021-21311
88Hemen
Adminer is an open-source database management in a single PHP file.
YüksekCVSS 7,2KEVSilahlaştırılmışEPSS %98
- Kimlik doğrulamasız
- SSRF
adminer · adminer11 Şub 2021
CVE-2020-27864
38İzleyin
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1860 firmware version
YüksekCVSS 8,8İstismar yokEPSS %10
- Girişsiz RCE
- Komut enjeksiyonu
dlink · dap-1860 firmware11 Şub 2021
CVE-2020-27868
64Bu hafta
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Qognify Ocularis 5.9.0.395.
KritikCVSS 9,8İstismar yokEPSS %81
- Girişsiz RCE
- Deserializasyon
qognify · ocularis11 Şub 2021
CVE-2021-27212
50Planlayın
In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function vi
YüksekCVSS 7,5İstismar yokEPSS %66
- Kimlik doğrulamasız
- Hizmet dışı bırakma
openldap · openldap14 Şub 2021
CVE-2021-25296
87Hemen
Nagios XI version xi-5.7.5 is affected by OS command injection.
YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %71
- RCE
- Komut enjeksiyonu
nagios · nagios xi15 Şub 2021