CVEs published in March 2021
1,535 vulnerabilities, 180 critical, 24 exploited.
- fatek fvdesignerFatek FvDesigner Version 1.5.76 and prior is vulnerable to an out-of-bounds read while processing...7.8 High
- fatek fvdesignerFatek FvDesigner Version 1.5.76 and prior is vulnerable to an out-of-bounds write while...7.8 High
- fatek fvdesignerFatek FvDesigner Version 1.5.76 and prior is vulnerable to a stack-based buffer overflow while...7.8 High
- fatek fvdesignerAn uninitialized pointer may be exploited in Fatek FvDesigner Version 1.5.76 and prior while the...7.8 High
- fatek fvdesignerA use after free issue has been identified in Fatek FvDesigner Version 1.5.76 and prior in the...7.8 High
- fortinet fortiosAn improper neutralization of input vulnerability in FortiGate version 6.2.x below 6.2.5 and 6.4...4.7 Medium
- genua genuagateAn issue was discovered in genua genugate before 9.0 Z p19, 9.1.x through 9.6.x before 9.6 p7,...9.8 Critical
- trend micro virus scan api (vsapi) engine, trendmicro apex central, apex one +17 more +19 moreTrend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a...5.5 Medium
- markdown2 project markdown2, fedoraproject fedora +1 moremarkdown2 Regular Expression Denial of Service7.5 High
- thinkadminThinkAdmin Admin Panel Access using Default Credentials7.5 High
- internment project internmentData race in internment9.8 Critical
- argoproj argo cdCross-site Scripting (XSS)4.7 Medium
- opensuse tumbleweed, saltstack salt, suse linux enterprise server 15 sp 3 +2 moresalt-api unauthenticated remote code execution9.8 Critical
- python pillow, fedoraproject fedora +1 morePillow Denial of Service by Uncontrolled Resource Consumption7.5 High
- python pillow, fedoraproject fedora +1 morePillow Uncontrolled Resource Consumption7.5 High
- python pillow, fedoraproject fedora +1 morePillow Denial of Service by Uncontrolled Resource Consumption7.5 High
- oracle cloud infrastructure data science, oracle corporation cloud infrastructure data science notebook sessions +1 moreVulnerability in the Oracle Cloud Infrastructure Data Science Notebook Sessions. Easily...4.6 Medium
- github, github enterprise server +1 moreImproper access control in GitHub Enterprise Server leading to unauthorized changes to maintainer permissions on pull requests8.1 High
- github, github enterprise server +1 moreImproper access control in GitHub Enterprise Server leading to the disclosure of Actions secrets to forks6.5 Medium
- github, github enterprise server +1 moreImproper access control in GitHub Enterprise Server leading to unauthorized write access to forkable repositories6.5 Medium
- github, github enterprise server +1 moreUnsafe configuration options in GitHub Pages leading to remote code execution on GitHub Enterprise Server8.8 High
- pugjs pug, pug-code-gen +1 moreRemote code execution in pug6.8 Medium
- anuko time tracker, timetracker +1 morePredictable tokens used for password resets6.8 Medium
c-blosc2OSS-FuzzHeap-buffer-overflow in blosc_run_decompression_with_contextNo scoredracoOSS-FuzzHeap-buffer-overflow in draco::MeshPredictionSchemeTexCoordsDecoder<int, draco::PredictionSchemeWrapDecoNo scorec-blosc2OSS-FuzzHeap-buffer-overflow in ZSTD_createDDict_advancedNo score- zabbixIn Zabbix before 4.0.28rc1, 5.x before 5.0.8rc1, 5.1.x and 5.2.x before 5.2.4rc1, and 5.3.x and 5...8.8 High
- python pillowOut of bounds read in Pillow7.5 High
- python pillowRegular Expression Denial of Service (ReDoS) in Pillow6.5 Medium
- python pillowOut of bounds read in Pillow7.5 High
- python pillow, debian linux +1 moreOut-of-bounds Write in Pillow7.5 High
- python pillowOut of bounds write in Pillow9.8 Critical
linuxUbuntu,linux-awsUbuntu,linux-aws-5.0Ubuntu +40 more +42 more[Unknown description]No score- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 18 +3 more +5 moreMicrosoft Exchange Server Remote Code Execution Vulnerability9.1 Critical
- microsoft exchange server, exchange server 2013 cumulative update 21, exchange server 2013 cumulative update 22 +23 more +25 moreMicrosoft Exchange Server Remote Code Execution Vulnerability7.8 High
- microsoft exchange server, exchange server 2013 cumulative update 21, exchange server 2013 cumulative update 22 +22 more +24 moreMicrosoft Exchange Server Remote Code Execution Vulnerability7.8 High
- microsoft exchange server, exchange server 2010 service pack 3, exchange server 2013 cumulative update 21 +24 more +26 moreMicrosoft Exchange Server Remote Code Execution Vulnerability7.8 High
- microsoft exchange server, exchange server 2013 cumulative update 21, exchange server 2013 cumulative update 22 +22 more +24 moreMicrosoft Exchange Server Remote Code Execution Vulnerability9.1 Critical
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 18 +3 more +5 moreMicrosoft Exchange Server Remote Code Execution Vulnerability6.6 Medium
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 18 +3 more +5 moreMicrosoft Exchange Server Remote Code Execution Vulnerability9.1 Critical
- mb connect line mbconnect24, mymbconnect24 +1 moreAn issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions...4.3 Medium
- mb connect line mbconnect24, mymbconnect24 +1 moreAn issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions...5.8 Medium
- mb connect line mbconnect24, mymbconnect24 +1 moreAn issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions...6.5 Medium
- helmholz myrex24, myrex24.virtual, mb connect line mbconnect24 +1 more +3 moreImproper Access Validation in products of MB connect line and Helmholz6.5 Medium
- glpi-project glpiXSS injection in ajax/kanban6.8 Medium
- glpi-project glpientities switch IDOR5.8 Medium
- e107usersettings.php in e107 through 2.3.0 lacks a certain e_TOKEN protection mechanism.8.8 High
- gitlabAn issue has been discovered in GitLab affecting all versions of Gitlab EE/CE before 12.6.7. A...4.3 Medium
- huawei harmonyosA component API of the HarmonyOS 2.0 has a permission bypass vulnerability. Local attackers may...3.3 Low
- bittacora bpanelIn bPanel 2.0, the administrative ajax endpoints (aka ajax/aj_*.php) are accessible without...9.8 Critical
- Show moreLoading…