Browse CVEs

HIGH 7.8 CVE-2021-20194 There is a vulnerability in the linux kernel versions higher than 5.2 (if kernel compiled with config params CONFIG_BPF_SYSCALL=y , CONFIG_BPF=y , CO… Linux Kernel Patch available Fix from $1,9502021-02-23 MEDIUM 6.5 CVE-2021-20252 A flaw was found in Red Hat 3scale API Management Platform 2. The 3scale backend does not perform preventive handling on user-requested date ranges i… 3scale Api Management Mitigation only Fix from $1,6002021-02-23 HIGH 7.4 CVE-2021-20247 A flaw was found in mbsync before v1.3.5 and v1.4.1. Validations of the mailbox names returned by IMAP LIST/LSUB do not occur allowing a malicious or… Debian Linux 1.3.5 / 1.4.1+ Fix from $1,9502021-02-23 MEDIUM 6.5 CVE-2020-29075EPSS 8% Acrobat Reader DC versions 2020.013.20066 (and earlier), 2020.001.30010 (and earlier) and 2017.011.30180 (and earlier) are affected by an information… Acrobat after 20.013.20066 Fix from $1,6002021-02-23 HIGH 7.8 CVE-2020-11204 Possible memory corruption and information leakage in sub-system due to lack of check for validity and boundary compliance for parameters that are re… Apq8009 Firmware Mitigation only Fix from $1,9502021-02-22 HIGH 7.8 CVE-2020-11253 Arbitrary memory write issue in video driver while setting the internal buffers in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snap… Aqt1000 Firmware Mitigation only Fix from $1,9502021-02-22 HIGH 7.8 CVE-2020-11194 Possible out of bound access in TA while processing a command from NS side due to improper length check of response buffer in Snapdragon Auto, Snapdr… Aqt1000 Firmware Mitigation only Fix from $1,9502021-02-22 HIGH 7.8 CVE-2020-11195 Out of bound write and read in TA while processing command from NS side due to improper length check on command and response buffers in Snapdragon Au… Apq8009 Firmware Mitigation only Fix from $1,9502021-02-22 MEDIUM 5.5 CVE-2020-24502 Improper input validation in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 and before version 1.4.29.0 for Windows*, may… Ethernet Network Adapter E810 Firmware 1.0.4 / 1.4.29.0+ Fix from $1,6002021-02-17 HIGH 8.0 CVE-2020-7848 The EFM ipTIME C200 IP Camera is affected by a Command Injection vulnerability in /login.cgi?logout=1 script. To exploit this vulnerability, an attac… C200 Firmware Mitigation only Fix from $1,9502021-02-17 HIGH 8.8 CVE-2020-7849 A vulnerability of uPrism.io CURIX(Video conferecing solution) could allow an unauthenticated attacker to execute arbitrary code. This vulnerability … Curix Mitigation only Fix from $1,9502021-02-17 HIGH 7.8 CVE-2020-12385 Improper input validation in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable escalatio… Graphics Drivers 26.20.100.8141+ Fix from $1,9502021-02-17 MEDIUM 5.5 CVE-2020-24452 Improper input validation in the Intel(R) SGX Platform Software for Windows* may allow an authenticated user to potentially enable a denial of servic… Sgx Platform 2.10.100.2+ Fix from $1,6002021-02-17 HIGH 7.8 CVE-2020-24453 Improper input validation in the Intel(R) EPID SDK before version 8, may allow an authenticated user to potentially enable an escalation of privilege… Epid Software Development Kit 8.0+ Fix from $1,9502021-02-17 MEDIUM 5.5 CVE-2020-12363 Improper input validation in some Intel(R) Graphics Drivers for Windows* before version 26.20.100.7212 and before Linux kernel version 5.5 may allow … Graphics Drivers 26.20.100.7212+ Fix from $1,6002021-02-17 HIGH 7.8 CVE-2020-12366 Insufficient input validation in some Intel(R) Graphics Drivers before version 27.20.100.8587 may allow a privileged user to potentially enable an es… Graphics Drivers 27.20.100.8587+ Fix from $1,9502021-02-17 HIGH 7.8 CVE-2020-12377 Insufficient input validation in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.47 may allow a… Bmc Firmware 2.47+ Fix from $1,9502021-02-17 MEDIUM 5.3 CVE-2020-7071 In PHP versions 7.3.x below 7.3.26, 7.4.x below 7.4.14 and 8.0.0, when validating URL with functions like filter_var($url, FILTER_VALIDATE_URL), PHP … PHP 7.3.26 / 7.4.14+ Fix from $1,6002021-02-15 HIGH 7.5 CVE-2021-27179EPSS 14% An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to crash the telnet daemon by sending a certain 0a 65 6e 61 62 6c… Hg6245d Firmware No fix yet Fix from $1,9502021-02-10 CRITICAL 9.8 CVE-2020-28870 In InoERP 0.7.2, an unauthorized attacker can execute arbitrary code on the server side due to lack of validations in /modules/sys/form_personalizati… Inoerp No fix yet Fix from $2,3002021-02-10 HIGH 7.8 CVE-2020-26193 Dell EMC PowerScale OneFS versions 8.1.0 - 9.1.0 contain an improper input validation vulnerability. A user with the ISI_PRIV_CLUSTER privilege may e… Emc Powerscale Onefs Mitigation only Fix from $1,9502021-02-09 CRITICAL 9.8 CVE-2020-14343EPSS 6% A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes un… Pyyaml 5.4+ Fix from $2,3002021-02-09 CRITICAL 9.1 CVE-2020-28645 Deleting users with certain names caused system files to be deleted. Risk is higher for systems which allow users to register themselves and have the… Owncloud 10.6.0+ Fix from $2,3002021-02-09 MEDIUM 6.5 CVE-2020-4790 IBM Security Identity Governance and Intelligence 5.2.6 could allow a user to cause a denial of service due to improperly validating a supplied URL, … Security Identity Governance And Intelligence Patch available Fix from $1,6002021-02-09 MEDIUM 6.5 CVE-2021-21126EPSS 9% Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass site isolation via a crafted… Chrome 88.0.705.50 / 88.0.4324.96+ Fix from $1,6002021-02-09 MEDIUM 6.5 CVE-2021-21123EPSS 10% Insufficient data validation in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions vi… Chrome 88.0.705.50 / 88.0.4324.96+ Fix from $1,6002021-02-09 HIGH 7.8 CVE-2020-12122 In Max Secure Max Spyware Detector 1.0.0.044, the driver file (MaxProc64.sys) allows local users to cause a denial of service (BSOD) or possibly have… Max Spyware Detector No fix yet Fix from $1,9502021-02-05 MEDIUM 6.7 CVE-2021-0345 In mobile_log_d, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with … Android Mitigation only Fix from $1,6002021-02-04 HIGH 7.2 CVE-2021-1315 Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could al… Rv016 Multi Wan Vpn Router Firmware after 4.2.3.14 Fix from $1,9502021-02-04 HIGH 7.2 CVE-2021-1316 Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could al… Rv016 Multi Wan Vpn Router Firmware after 4.2.3.14 Fix from $1,9502021-02-04