CVEs published in March 2021
1,535 vulnerabilities, 180 critical, 24 exploited.
- fireblink object-colliderPrototype Pollution Vulnerability in object-collider9.8 Critical
- atlassian crowdThe ResourceDownloadRewriteRule class in Crowd before version 4.0.4, and from version 4.1.0...5.3 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreInvariant failure when explaining a find with a UUID4.9 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreSpecially crafted regex query can cause DoS6.5 Medium
- apache asterixdbunzip directory traversal5.5 Medium
- onlyoffice document server123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678909.8 Critical
- onlyoffice document serverA heap buffer overflow vulnerability inside of BMP image processing was found at [core] module of...9.8 Critical
- onlyoffice document serverA file extension handling issue was found in [core] module of ONLYOFFICE DocumentServer v4.0.0-9...9.8 Critical
- onlyoffice document serverA file extension handling issue was found in [core] module of ONLYOFFICE DocumentServer v4.2.0...9.8 Critical
- onlyoffice document serverAn improper binary stream data handling issue was found in the [core] module of ONLYOFFICE...7.5 High
- apache tomcat, debian linux, oracle agile product lifecycle management +9 more +11 moreIncomplete fix for CVE-2020-94847.0 High
- apache tomcat, debian linux, oracle agile product lifecycle management +9 more +11 moreApache Tomcat h2c request mix-up7.5 High
- byte struct project structDeserializing an array can free uninitialized memory in byte_struct9.8 Critical
rpmlint-miniSUSESecurity update for rpmlintNo score- dataiku data science studioIn Dataiku DSS before 8.0.6, insufficient access control in the Jupyter notebooks integration...5.4 Medium
kimageformatsOSS-FuzzHeap-buffer-overflow in void mc_chroma<unsigned short>No scorec-blosc2OSS-FuzzHeap-buffer-overflow in blosc_read_headerNo scorewolfsslOSS-FuzzHeap-buffer-overflow in ProcessReplyNo scorekimageformatsOSS-FuzzHeap-buffer-overflow in Op_to_sdr_planes::convert_colorspaceNo scorekimageformatsOSS-FuzzSegv on unknown address in slice_segment_header::operator=No scorekimageformatsOSS-FuzzHeap-buffer-overflow in put_epel_8_fallbackNo scoreirssiOSS-FuzzHeap-buffer-overflow in unescape_tagNo score- google androidIn qtaguid_untag of xt_qtaguid.c, there is a possible memory corruption due to a use after free....7.8 High
- google androidIn bindServiceLocked of ActiveServices.java, there is a possible foreground service launch due to...7.8 High
- google androidIn sdp_copy_raw_data of sdp_discovery.cc, there is a possible system compromise due to a double...9.8 Critical
- google androidIn Builtins::Generate_ArgumentsAdaptorTrampoline of builtins-arm.cc and related files, there is a...9.8 Critical
- google androidIn StopServicesAndLogViolations of reboot.cpp, there is possible memory corruption due to a use...7.8 High
- google androidIn android_os_Parcel_readString8 of android_os_Parcel.cpp, there is a possible out of bounds read...5.5 Medium
- google androidIn Scanner::LiteralBuffer::NewCapacity of scanner.cc, there is a possible out of bounds write due...7.8 High
- google androidIn main of main.cpp, there is a possible memory corruption due to a double free. This could lead...7.8 High
- google androidIn onCreate() of ChooseTypeAndAccountActivity.java, there is a possible way to learn the...7.8 High
- google androidIn various methods of WifiNetworkSuggestionsManager.java, there is a possible modification of...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 moreUse after free in GPU driver while mapping the user memory to GPU memory due to improper check of...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8009 firmware, aqt1000 firmware +331 more +333 moreBuffer overflow occurs when trying to convert ASCII string to Unicode string if the actual size...6.8 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +326 more +328 moreUse after free condition in msm ioctl events due to race between the ioctl register and...7.0 High