CVEs published in February 2021
34 tracked CVEs from 7 vendors had their first vendor advisory published in February 2021: 2 critical, 14 high, 4 in CISA KEV. Newest first.
- Added
CVE-2021-1732HighCISA KEV
Microsoft Win32k Privilege Escalation Vulnerability
MS Server · 1 advisory - Added
CVE-2021-21972UnratedCISA KEV
VMware vCenter Server Remote Code Execution Vulnerability
VMware · 1 advisory - Added
CVE-2020-11987Unrated
Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel
Apache · 1 advisory - Added
CVE-2021-26068High
endpoint in Atlassian Jira Server for Slack plugin from version 0.0.3 before version 2.0.15
Atlassian · 1 advisory - Added
CVE-2020-36232Medium
The MessageBundleWhiteList class of atlassian-gadgets before version 4.2.37, from version 4.3.0 before 4.3.14, from version…
Atlassian · 1 advisory - Added
CVE-2020-29453Medium
The CachingResourceDownloadRewriteRule class in Jira Server and Jira Data Center before version 8.5.11, from 8.6.0 before…
Atlassian · 1 advisory - Added
CVE-2020-29448Medium
The ConfluenceResourceDownloadRewriteRule class in Confluence Server and Confluence Data Center before version 6.13.18, from…
Atlassian · 1 advisory - Added
CVE-2020-36233High
The Microsoft Windows Installer for Atlassian Bitbucket Server and Data Center before version 6.10.9, 7.x before 7.6.4, and from…
Atlassian · 1 advisory - Added
CVE-2020-2502Medium
Photo Station: This cross-site scripting vulnerability in Photo Station allows remote attackers to inject malicious code.
QNAP · 1 advisory - Added
CVE-2020-2501Critical
QNAP NAS: stack-based buffer overflow vulnerability has been reported to affect QNAP NAS devices running Surveillance Station.
QNAP · 1 advisory - Added
CVE-2020-29451Medium
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate Jira projects
Atlassian · 1 advisory - Added
CVE-2020-36237Medium
Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view custom field options
Atlassian · 1 advisory - Added
CVE-2020-36236Medium
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript
Atlassian · 1 advisory - Added
CVE-2020-36235Medium
Affected versions of Atlassian Jira Server and Data Center
Atlassian · 1 advisory - Added
CVE-2020-36234Medium
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript
Atlassian · 1 advisory - Added
CVE-2021-22984Medium
On BIG-IP Advanced WAF and ASM version 15.1.x before 15.1.0.2, 15.0.x before 15.0.1.4, 14.1.x before 14.1.2.5, 13.1.x before…
F5 · 1 advisory - Added
CVE-2021-22978High
On BIG-IP version 16.0.x before 16.0.1, 15.1.x before 15.1.1, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.5, and all 12.1.x and…
F5 · 1 advisory - Added
CVE-2021-22977High
On BIG-IP version 16.0.0-16.0.1 and 14.1.2.4-14.1.3, cooperation between malicious HTTP client code and a malicious server
F5 · 1 advisory - Added
CVE-2021-22985High
On BIG-IP APM version 16.0.x before 16.0.1.1, under certain conditions
F5 · 1 advisory - Added
CVE-2021-22983Medium
On BIG-IP AFM version 15.1.x before 15.1.1, 14.1.x before 14.1.3.1, and 13.1.x before 13.1.3.5, authenticated users accessing…
F5 · 1 advisory - Added
CVE-2021-22982High
On BIG-IP DNS and GTM version 13.1.x before 13.1.0.4, and all versions of 12.1.x and 11.6.x, big3d does not securely handle and…
F5 · 1 advisory - Added
CVE-2021-22981Medium
On all versions of BIG-IP 12.1.x and 11.6.x, the original TLS protocol includes a weakness in the master secret negotiation that…
F5 · 1 advisory - Added
CVE-2021-22980High
BIG-IP: In Edge Client version 7.2.x before 7.2.1.1, 7.1.9.x before 7.1.9.8, and 7.1.x-7.1.8.x before 7.1.8.5, an untrusted search path…
F5 · 1 advisory - Added
CVE-2021-22979Medium
On BIG-IP version 16.0.x before 16.0.1, 15.1.x before 15.1.1, 14.1.x before 14.1.2.8, 13.1.x before 13.1.3.5, and all 12.1.x…
F5 · 1 advisory - Added
CVE-2021-22976High
On BIG-IP Advanced WAF and ASM version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before…
F5 · 1 advisory - Added
CVE-2021-22975High
On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, and 14.1.x before 14.1.3.1, under some circumstances, Traffic…
F5 · 1 advisory - Added
CVE-2021-22974High
F5 · 1 advisory - Added
CVE-2017-6167High
F5 · 1 advisory - Added
CVE-2021-22973High
On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.5, and all 12.1.x…
F5 · 1 advisory - Added
CVE-2021-20016UnratedCISA KEV
SonicWall SSLVPN SMA100 SQL Injection Vulnerability
SonicWall · 1 advisory - Added
CVE-2020-2507Critical
QTS: The vulnerability have been reported to affect earlier versions of QTS.
QNAP · 1 advisory - Added
CVE-2020-2506HighCISA KEV
QNAP Helpdesk Improper Access Control Vulnerability
QNAP · 1 advisory - Added
CVE-2020-36231Medium
Affected versions of Atlassian Jira Server and Data Center
Atlassian · 1 advisory - Added
CVE-2020-14192Medium
Affected versions of Atlassian Fisheye and Crucible allow remote attackers to view a product's SEN
Atlassian · 1 advisory