Latest CVE Feed
-
7.5
HIGHCVE-2021-27405
A ReDoS (regular expression denial of service) flaw was found in the @progfay/scrapbox-parser package before 6.0.3 for Node.js.... Read more
Affected Products : scrapbox-parser- EPSS Score: %0.56
- Published: Feb. 19, 2021
- Modified: Nov. 21, 2024
-
6.1
MEDIUMCVE-2021-27404
Askey RTF8115VW BR_SV_g11.11_RTF_TEF001_V6.54_V014 devices allow injection of a Host HTTP header.... Read more
- EPSS Score: %0.16
- Published: Feb. 19, 2021
- Modified: Nov. 21, 2024
-
6.1
MEDIUMCVE-2021-27403
Askey RTF8115VW BR_SV_g11.11_RTF_TEF001_V6.54_V014 devices allow cgi-bin/te_acceso_router.cgi curWebPage XSS.... Read more
- EPSS Score: %0.94
- Published: Feb. 19, 2021
- Modified: Nov. 21, 2024
-
6.5
MEDIUMCVE-2021-27402
The SAS Admin portal of Mitel MiCollab before 9.2 FP2 could allow an unauthenticated attacker to access (view and modify) user data by injecting arbitrary directory paths due to improper URL validation, aka Directory Traversal.... Read more
Affected Products : micollab- EPSS Score: %0.30
- Published: Aug. 13, 2021
- Modified: Nov. 21, 2024
-
6.1
MEDIUMCVE-2021-27401
The Join Meeting page of Mitel MiCollab Web Client before 9.2 FP2 could allow an attacker to access (view and modify) user data by executing arbitrary code due to insufficient input validation, aka Cross-Site Scripting (XSS).... Read more
Affected Products : micollab- EPSS Score: %0.28
- Published: Aug. 13, 2021
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2021-27400
HashiCorp Vault and Vault Enterprise Cassandra integrations (storage backend and database secrets engine plugin) did not validate TLS certificates when connecting to Cassandra clusters. Fixed in 1.6.4 and 1.7.1... Read more
Affected Products : vault- EPSS Score: %0.19
- Published: Apr. 22, 2021
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2021-27399
A vulnerability has been identified in Simcenter Femap 2020.2 (All versions < V2020.2.MP3), Simcenter Femap 2021.1 (All versions < V2021.1.MP3). The femap.exe application lacks proper validation of user-supplied data when parsing FEMAP files. This could r... Read more
Affected Products : simcenter_femap- EPSS Score: %0.40
- Published: Jun. 08, 2021
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2021-27398
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The PlantSimCore.dll library lacks proper validation of user-supplied data when parsing SPP files. This could result in a stack based buffer overflow, a different... Read more
Affected Products : tecnomatix_plant_simulation- EPSS Score: %0.94
- Published: May. 12, 2021
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2021-27397
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The PlantSimCore.dll library lacks proper validation of user-supplied data when parsing SPP files. This could result in a memory corruption condition. An attacker... Read more
Affected Products : tecnomatix_plant_simulation- EPSS Score: %0.38
- Published: May. 12, 2021
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2021-27396
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The PlantSimCore.dll library lacks proper validation of user-supplied data when parsing SPP files. This could result in a stack based buffer overflow, a different... Read more
Affected Products : tecnomatix_plant_simulation- EPSS Score: %0.94
- Published: May. 12, 2021
- Modified: Nov. 21, 2024
-
8.1
HIGHCVE-2021-27395
A vulnerability has been identified in SIMATIC Process Historian 2013 and earlier (All versions), SIMATIC Process Historian 2014 (All versions < SP3 Update 6), SIMATIC Process Historian 2019 (All versions), SIMATIC Process Historian 2020 (All versions). A... Read more
- EPSS Score: %0.25
- Published: Oct. 12, 2021
- Modified: Nov. 21, 2024
-
8.8
HIGHCVE-2021-27394
A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.19), Mendix Applications using Mendix 8 (All versions < V8.17.0), Mendix Applications using Mendix 8 (V8.12) (All versions < V8.12.5), Mendix Applications usin... Read more
Affected Products : mendix- EPSS Score: %0.34
- Published: Apr. 16, 2021
- Modified: Nov. 21, 2024
-
5.3
MEDIUMCVE-2021-27393
A vulnerability has been identified in Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2013.08), Nucleus Source Code (Versions including affected DNS modules). The DNS client does not properly randomize UDP port numbers of DNS requests.... Read more
- EPSS Score: %0.22
- Published: Apr. 22, 2021
- Modified: Nov. 21, 2024
-
8.8
HIGHCVE-2021-27392
A vulnerability has been identified in Siveillance Video Open Network Bridge (2020 R3), Siveillance Video Open Network Bridge (2020 R2), Siveillance Video Open Network Bridge (2020 R1), Siveillance Video Open Network Bridge (2019 R3), Siveillance Video Op... Read more
Affected Products : siveillance_video_open_network_bridge- EPSS Score: %0.24
- Published: Apr. 22, 2021
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2021-27390
A vulnerability has been identified in JT2Go (All versions < V13.1.0.3), Teamcenter Visualization (All versions < V13.1.0.3). The TIFF_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing TIFF files. This ... Read more
- EPSS Score: %0.37
- Published: Jun. 08, 2021
- Modified: Nov. 21, 2024
-
9.8
CRITICALCVE-2021-27389
A vulnerability has been identified in Opcenter Quality (All versions < V12.2), QMS Automotive (All versions < V12.30). A private sign key is shipped with the product without adequate protection.... Read more
- EPSS Score: %0.41
- Published: Apr. 22, 2021
- Modified: Nov. 21, 2024
-
9.8
CRITICALCVE-2021-27388
SINAMICS medium voltage routable products are affected by a vulnerability in the Sm@rtServer component for remote access that could allow an unauthenticated attacker to cause a denial-of-service condition, and/or execution of limited configuration modific... Read more
- EPSS Score: %1.72
- Published: Jun. 15, 2021
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2021-27387
A vulnerability has been identified in Simcenter Femap 2020.2 (All versions < V2020.2.MP3), Simcenter Femap 2021.1 (All versions < V2021.1.MP3). The femap.exe application lacks proper validation of user-supplied data when parsing FEMAP files. This could r... Read more
Affected Products : simcenter_femap- EPSS Score: %0.40
- Published: Jun. 08, 2021
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2021-27386
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMA... Read more
Affected Products : sinamics_sl150_firmware sinamics_sm150_firmware sinamics_sm150i_firmware simatic_wincc_runtime_advanced sinamics_gh150_firmware sinamics_gl150_firmware sinamics_gm150_firmware sinamics_sm120_firmware sinamics_sh150_firmware simatic_hmi_comfort_outdoor_panels_7\"_firmware +25 more products- EPSS Score: %0.44
- Published: May. 12, 2021
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2021-27385
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMA... Read more
Affected Products : sinamics_sl150_firmware sinamics_sm150_firmware sinamics_sm150i_firmware simatic_wincc_runtime_advanced sinamics_gh150_firmware sinamics_gl150_firmware sinamics_gm150_firmware sinamics_sm120_firmware sinamics_sh150_firmware simatic_hmi_comfort_outdoor_panels_7\"_firmware +25 more products- EPSS Score: %0.25
- Published: May. 12, 2021
- Modified: Nov. 21, 2024