CVEs published in March 2021
1,535 vulnerabilities, 180 critical, 24 exploited.
- mahara Mahara 20.10 is affected by Cross Site Request Forgery (CSRF) that allows a remote attacker to... 6.5 Medium
- kopano groupware core, zarafa +1 more kopano-ical (formerly zarafa-ical) in Kopano Groupware Core through 8.7.16, 9.x through 9.1.0, 10... 7.5 High
- paessler prtg network monitor An issue was discovered in PRTG Network Monitor before 21.1.66.1623. By invoking the screenshot... 5.3 Medium
- algolplus advanced order export for woocommerce Advanced Order Export before 3.1.8 for WooCommerce allows XSS, a different vulnerability than CVE... 6.1 Medium
- episerver find An Open Redirect vulnerability in EpiServer Find before 13.2.7 allows an attacker to redirect... 6.1 Medium
- google exposure notifications verification server Privilege escalation in RBAC system 6.3 Medium
- asus ux360ca bios The UX360CA BIOS through 303 on ASUS laptops allow an attacker (with the ring 0 privilege) to... 8.2 High
- conquest dicom server project dicom server CONQUEST DICOM SERVER before 1.5.0 has a code execution vulnerability which can be exploited by... 9.8 Critical
- course registration management system project registration management system CourseMS (aka Course Registration Management System) 2.1 is affected by cross-site scripting (XSS... 4.8 Medium
- vmware vrealize operations manager api, vrealize operations manager, cloud foundation +1 more +3 more Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may... 7.5 High
- vmware vrealize operations manager, cloud foundation, vrealize suite lifecycle manager +2 more Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8... 6.5 Medium
- f5 big-ip advanced web application firewall, big-ip application security manager +1 more On BIG-IP Advanced WAF and BIG-IP ASM versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1... 8.8 High
- f5 big-iq, big-iq centralized management +1 more On all 7.x and 6.x versions (fixed in 8.0.0), undisclosed BIG-IQ pages have a reflected cross... 6.1 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +14 more +16 more On BIG-IP versions 14.1.4 and 16.0.1.1, when the Traffic Management Microkernel (TMM) process... 5.3 Medium
- f5 big-iq, big-iq centralized management +1 more On all 7.x and 6.x versions (fixed in 8.0.0), when using a Quorum device for BIG-IQ high... 9.1 Critical
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 more On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x... 7.5 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip advanced web application firewall +11 more +13 more On versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before... 4.3 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 more On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x... 5.3 Medium
- f5 big-iq, big-iq centralized management +1 more On all 7.x and 6.x versions (fixed in 8.0.0), BIG-IQ HA ElasticSearch service does not implement... 7.5 High
- prestashop ps emailsubscription Potential XSS injection in the newsletter conditions field 4.6 Medium
- f5 big-iq, big-iq centralized management +1 more On all 7.x versions (fixed in 8.0.0), when set up for auto failover, a BIG-IQ Data Collection... 7.5 High
- f5 access policy manager clients, big-ip access policy manager +1 more When using BIG-IP APM 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1... 4.5 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 more On versions 15.0.x before 15.1.0 and 14.1.x before 14.1.4, the BIG-IP system provides an option... 7.5 High
- data\ \, netapp snapcenter +1 more The Data::Validate::IP module through 0.29 for Perl does not properly consider extraneous zero... 7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 more On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x... 7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 more On BIG-IP versions 13.1.3.4-13.1.3.6 and 12.1.5.2, if the tmm.http.rfc.enforcement BigDB key is... 7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 more On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x... 6.1 Medium
- f5 big-ip, big-ip traffic management microkernel, big-ip access policy manager +13 more +15 more On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x... 9.8 Critical
- vscode-rufo project vscode-rufo The unofficial vscode-rufo extension before 0.0.4 for Visual Studio Code allows attackers to... 8.8 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip advanced web application firewall +11 more +13 more On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x... 9.1 Critical
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip advanced web application firewall +11 more +13 more On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x... 9.8 Critical
- f5 big-iq, big-iq centralized management +1 more On all 7.x and 6.x versions (fixed in 8.0.0), BIG-IQ high availability (HA) when using a Quorum... 7.5 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip advanced web application firewall +11 more +13 more On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x... 7.2 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip advanced web application firewall +11 more +13 more On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x... 9.9 Critical
- portprocesses project portprocesses Arbitrary Command Injection 6.3 Medium
- f5 big-ip and big-iq centralized management, big-ip access policy manager, big-ip advanced firewall manager +13 more +15 more On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x... 9.8 Critical
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 more On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x... 8.8 High
- accusoft imagegear An out-of-bounds write vulnerability exists in the SGI format buffer size processing... 9.8 Critical
- accusoft imagegear An out-of-bounds write vulnerability exists in the SGI Format Buffer Size Processing... 9.8 Critical
- accusoft imagegear An out-of-bounds write vulnerability exists in the TIFF header count-processing functionality of... 8.1 High
- redis A heap overflow issue was found in Redis in versions before 5.0.10, before 6.0.9 and before 6.2.0... 5.3 Medium
- pbootcms PbootCMS 3.0.4 contains a SQL injection vulnerability through index.php via the search parameter... 7.5 High
- simple college project college Simple College Website 1.0 allows a user to conduct remote code execution via /alumni/admin/ajax... 7.2 High
- simple college project college A SQL injection vulnerability in Simple College Website 1.0 allows remote unauthenticated... 9.8 Critical
- apache tika, oracle communications messaging server, healthcare foundation +2 more +4 more Infinite loop in Apache Tika's MP3 parser 5.5 Medium
-
kimageformatsOSS-Fuzz Use-of-uninitialized-value in void intra_prediction_angular<unsigned short> No score -
selinuxOSS-Fuzz Heap-buffer-overflow in ebitmap_match_any No score - academysoftwarefoundation openexr, debian linux +1 more There's a flaw in OpenEXR's Scanline API functionality in versions before 3.0.0-beta. An attacker... 5.5 Medium
- academysoftwarefoundation openexr, debian linux +1 more There's a flaw in OpenEXR's scanline input file functionality in versions before 3.0.0-beta. An... 5.5 Medium
- academysoftwarefoundation openexr, debian linux +1 more There's a flaw in OpenEXR's deep tile sample size calculations in versions before 3.0.0-beta. An... 5.5 Medium
- Show olderLoading…