CVEs published in March 2021
1,535 vulnerabilities, 180 critical, 24 exploited.
bindSUSESecurity update for bindNo score- huawei harmonyosA component of the HarmonyOS 2.0 has a DoS vulnerability. Local attackers may exploit this...5.5 Medium
- google android, samsung mobile devices +1 moreCalling of non-existent provider in MobileWips application prior to SMR Feb-2021 Release 1 allows...7.5 High
- stormshield network securityA vulnerability in Stormshield Network Security could allow an attacker to trigger a protection...5.3 Medium
- ibm cloud apm, cloud application performance management +1 moreThe IBM Application Performance Monitoring UI (IBM Cloud APM 8.1.4) allows web pages to be stored...4.0 Medium
- ibm cloud apm, cloud application performance management +1 moreIBM Monitoring (IBM Cloud APM 8.1.4 ) could allow an authenticated user to modify HTML content by...4.3 Medium
- ibm cloud apm, cloud application performance management +1 moreThe IBM Cloud APM 8.1.4 server will issue a DNS request to resolve any hostname specified in the...4.9 Medium
- ultimatekode neo billingCross Site Scripting (XSS) vulnerability in UltimateKode Neo Billing - Accounting, Invoicing And...5.4 Medium
- dell openmanage server administrator, open manage server administrator +1 moreDell EMC OpenManage Server Administrator (OMSA) versions 9.5 and prior contain a path traversal...4.9 Medium
- dell openmanage server administrator, open manage server administrator +1 moreDell EMC OpenManage Server Administrator (OMSA) version 9.5 Microsoft Windows installations with...8.6 High
- blackboard collaborate ultraBlackboard Collaborate Ultra 20.02 is affected by a cross-site scripting (XSS) vulnerability. The...6.1 Medium
- apache ambariStored XSS in Apache Ambari6.1 Medium
- misp-project mispAn issue was discovered in app/Model/SharingGroupServer.php in MISP 2.4.139. In the...5.5 Medium
- google androidAn issue was discovered on LG mobile devices with Android OS 11 software. They mishandle...6.8 Medium
- fastify fastify-reply-fromPrefix escape10.0 Critical
- fastify fastify-http-proxyPrefix escape10.0 Critical
- matrix-org matrix-react-sdkUser content sandbox can be confused into opening arbitrary documents2.6 Low
- accellion ftaAccellion FTA 9_12_432 and earlier is affected by argument injection via a crafted POST request...9.8 Critical
- accellion ftaAccellion FTA 9_12_432 and earlier is affected by stored XSS via a crafted POST request to a user...6.1 Medium
- gigaset dx600a firmwareThe telnet administrator service running on port 650 on Gigaset DX600A v41.00-175 devices does...9.8 Critical
- gigaset dx600a firmwareA buffer overflow vulnerability in the AT command interface of Gigaset DX600A v41.00-175 devices...7.5 High
- libjxl project libjxlJPEG XL (aka jpeg-xl) through 0.3.2 allows writable memory corruption.9.8 Critical
- zend zendtoZendTo before 6.06-4 Beta allows XSS during the display of a drop-off in which a filename has...6.1 Medium
c-blosc2OSS-FuzzHeap-buffer-overflow in blosc_dNo scoreopenscOSS-FuzzHeap-buffer-overflow in sc_pkcs15emu_oberthur_add_certNo scorespipDebianspip - security updateNo score- gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +5 more +7 moreA flaw was found in grub2 in versions prior to 2.06. Setparam_prefix() in the menu rendering code...8.2 High
- gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +5 more +7 moreA flaw was found in grub2 in versions prior to 2.06. The option parser allows an attacker to...6.7 Medium
- gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +5 more +7 moreA flaw was found in grub2 in versions prior to 2.06. The cutmem command does not honor secure...7.5 High
- gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +5 more +7 moreA flaw was found in grub2 in versions prior to 2.06. Variable names present are expanded in the...6.7 Medium
- gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +5 more +7 moreA flaw was found in grub2 in versions prior to 2.06. During USB device initialization,...7.6 High
- gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +5 more +7 moreA flaw was found in grub2 in versions prior to 2.06. The rmmod implementation allows the...8.2 High
- gnu grub2, fedoraproject fedora, netapp cloud backup +6 more +8 moreA flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of...7.5 High
- docker dashboard project dashboardrakibtg Docker Dashboard before 2021-02-28 allows command injection in backend/utilities/terminal...9.8 Critical
- ymfe yapiWeak JSON Web Token in yapi-vendor5.1 Medium
- veritas backup exec, backup exec agent +1 moreAn issue was discovered in Veritas Backup Exec before 21.2. It supports multiple authentication...8.2 High
- veritas backup exec, backup exec agent +1 moreAn issue was discovered in Veritas Backup Exec before 21.2. The communication between a client...8.8 High
- veritas backup exec, backup exec agent +1 moreAn issue was discovered in Veritas Backup Exec before 21.2. The communication between a client...8.1 High
- eprintsEPrints 3.4.2 allows remote attackers to execute arbitrary commands via crafted input to the verb...8.8 High
- eprintsEPrints 3.4.2 allows remote attackers to read arbitrary files and possibly execute commands via...9.8 Critical
- eprintsEPrints 3.4.2 allows remote attackers to read arbitrary files and possibly execute commands via...9.8 Critical
- eprintsEPrints 3.4.2 exposes a reflected XSS opportunity in the via a cgi/cal URI.6.1 Medium
- eprintsEPrints 3.4.2 allows remote attackers to execute OS commands via crafted LaTeX input to a cgi/cal...9.8 Critical
- eprintsEPrints 3.4.2 exposes a reflected XSS opportunity in the dataset parameter to the cgi...6.1 Medium
- dell srs policy manager, emc srs policy manager +1 moreSRS Policy Manager 6.X is affected by an XML External Entity Injection (XXE) vulnerability due to...7.2 High
- dell emc sourceone, sourceone +1 moreDell EMC SourceOne, versions 7.2SP10 and prior, contain a Stored Cross-Site Scripting...9.0 Critical
- wpserveur wps hide loginWPS Hide Login 1.6.1 allows remote attackers to bypass a protection mechanism via post_password.5.3 Medium
- doctor appointment system project appointment systemCross Site Scripting (XSS) vulnerability in contactus.php in Doctor Appointment System 1.0 allows...6.1 Medium
- doctor appointment system project appointment systemCross Site Scripting (XSS) vulnerability in contactus.php in Doctor Appointment System 1.0 allows...6.1 Medium
- vmware spring integration zipPath Traversal in Spring-integration-zip5.3 Medium
- Show moreLoading…