CVE-2021-22701 - A CWE-352: Cross-Site Request Forgery vulnerability exists in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notification for affected versions), that could cause a user to perform an unintended actio... read CVE-2021-22701
Published: February 19, 2021; 11:15:12 AM -0500

V3.1: 4.5 MEDIUM
V2.0: 3.5 LOW

CVE-2021-22703 - A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notification for affected versions), that could cause disclosure of us... read CVE-2021-22703
Published: February 19, 2021; 11:15:13 AM -0500

V3.1: 7.5 HIGH
V2.0: 5.0 MEDIUM

CVE-2021-22702 - A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION7700/73xx, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notification for affected versions), that could cause di... read CVE-2021-22702
Published: February 19, 2021; 11:15:13 AM -0500

V3.1: 7.5 HIGH
V2.0: 5.0 MEDIUM

CVE-2020-9050 - Path Traversal vulnerability exists in Metasys Reporting Engine (MRE) Web Services which could allow a remote unauthenticated attacker to access and download arbitrary files from the system.
Published: February 19, 2021; 1:15:11 PM -0500

V3.1: 7.5 HIGH
V2.0: 5.0 MEDIUM

CVE-2020-11147 - Use after free issue in audio modules while removing and freeing objects during list iteration due to incorrect usage of macro in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile
Published: February 22, 2021; 2:15:13 AM -0500

V3.1: 6.7 MEDIUM
V2.0: 4.6 MEDIUM

CVE-2020-35571 - An issue was discovered in MantisBT through 2.24.3. In the helper_ensure_confirmed call in manage_custom_field_update.php, the custom field name is not sanitized. This may be problematic depending on CSP settings.
Published: February 21, 2021; 10:15:14 PM -0500

V3.1: 6.1 MEDIUM
V2.0: 4.3 MEDIUM

CVE-2021-26933 - An issue was discovered in Xen 4.9 through 4.14.x. On Arm, a guest is allowed to control whether memory accesses are bypassing the cache. This means that Xen needs to ensure that all writes (such as the ones during scrubbing) have reached the memo... read CVE-2021-26933
Published: February 16, 2021; 9:15:13 PM -0500

V3.1: 5.5 MEDIUM
V2.0: 2.1 LOW

CVE-2021-21318 - Opencast is a free, open-source platform to support the management of educational audio and video content. In Opencast before version 9.2 there is a vulnerability in which publishing an episode with strict access rules will overwrite the currently... read CVE-2021-21318
Published: February 18, 2021; 1:15:11 PM -0500

V3.1: 5.4 MEDIUM
V2.0: 5.5 MEDIUM

CVE-2021-27231 - Hestia Control Panel through 1.3.3, in a shared-hosting environment, sometimes allows remote authenticated users to create a subdomain for a different customer's domain name, leading to spoofing of services or email messages.
Published: February 15, 2021; 11:15:12 PM -0500

V3.1: 5.4 MEDIUM
V2.0: 5.5 MEDIUM

CVE-2021-26932 - An issue was discovered in the Linux kernel 3.2 through 5.10.16, as used by Xen. Grant mapping operations often occur in batch hypercalls, where a number of operations are done in a single hypercall, the success or failure of each one is reported ... read CVE-2021-26932
Published: February 16, 2021; 9:15:13 PM -0500

V3.1: 5.5 MEDIUM
V2.0: 1.9 LOW

CVE-2020-35664 - An issue was discovered in Acronis Cyber Protect before 15 Update 1 build 26172. There is cross-site scripting (XSS) in the console.
Published: February 21, 2021; 10:15:14 PM -0500

V3.1: 6.1 MEDIUM
V2.0: 4.3 MEDIUM

CVE-2020-35556 - An issue was discovered in Acronis Cyber Protect before 15 Update 1 build 26172. Because the local notification service misconfigures CORS, information disclosure can occur.
Published: February 21, 2021; 10:15:14 PM -0500

V3.1: 7.5 HIGH
V2.0: 5.0 MEDIUM

CVE-2019-11360 - A buffer overflow in iptables-restore in netfilter iptables 1.8.2 allows an attacker to (at least) crash the program or potentially gain code execution via a specially crafted iptables-save file. This is related to add_param_to_argv in xshared.c.
Published: July 12, 2019; 10:15:11 AM -0400

V3.1: 4.2 MEDIUM
V2.0: 3.5 LOW

CVE-2021-20199 - Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 (including from remote hosts). This impacts containerized applications that trust localhost (127.0.01) connections by default and do not require authent... read CVE-2021-20199
Published: February 02, 2021; 2:15:14 PM -0500

V3.1: 5.9 MEDIUM
V2.0: 4.3 MEDIUM

CVE-2020-29443 - ide_atapi_cmd_reply_end in hw/ide/atapi.c in QEMU 5.1.0 allows out-of-bounds read access because a buffer index is not validated.
Published: January 26, 2021; 1:15:51 PM -0500

V3.1: 3.9 LOW
V2.0: 3.3 LOW

CVE-2021-21155 - Heap buffer overflow in Tab Strip in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
Published: February 22, 2021; 5:15:12 PM -0500

V3.1: 9.6 CRITICAL
V2.0: 6.8 MEDIUM

CVE-2021-21150 - Use after free in Downloads in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
Published: February 22, 2021; 5:15:12 PM -0500

V3.1: 9.6 CRITICAL
V2.0: 6.8 MEDIUM

CVE-2021-21149 - Stack buffer overflow in Data Transfer in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.
Published: February 22, 2021; 5:15:12 PM -0500

V3.1: 8.8 HIGH
V2.0: 6.8 MEDIUM

CVE-2021-21152 - Heap buffer overflow in Media in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Published: February 22, 2021; 5:15:12 PM -0500

V3.1: 8.8 HIGH
V2.0: 6.8 MEDIUM

CVE-2021-21153 - Stack buffer overflow in GPU Process in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
Published: February 22, 2021; 5:15:12 PM -0500

V3.1: 8.8 HIGH
V2.0: 6.8 MEDIUM