CVEs published in March 2021
1,535 vulnerabilities, 180 critical, 24 exploited.
- html-parse-stringify project html-parse-stringifyRegular Expression Denial of Service (ReDoS)4.8 Medium
- totaljs total.jsRemote Code Execution (RCE)9.8 Critical
chromium-browser-stableMageiaUpdated chromium-browser-stable packages fix security vulnerabilitiesNo scorefreeradius-serverSUSESecurity update for freeradius-serverNo scorefreeradius-serverSUSESecurity update for freeradius-serverNo score- courier management system project management systemCourier Management System 1.0 1.0 is affected by SQL Injection via 'MULTIPART street '.6.5 Medium
- courier management system project management systemCourier Management System 1.0 - 'First Name' Stored XSS5.4 Medium
- courier management system project management systemSQL injection vulnerability was discovered in Courier Management System 1.0, which can be...6.5 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting with 11.8. GitLab was...4.1 Medium
- gitlabStarting with version 13.7 the Gitlab CE/EE editions were affected by a security issue related to...5.9 Medium
- qcubedqcubed PHP object injection9.8 Critical
- qcubedqcubed SQL injection vulnerability in profile.php via the strQuery parameter9.8 Critical
- qcubedqcubed reflected cross-site scripting (XSS) vulnerability6.1 Medium
- fork-cms fork cmsPHP object injection in the Ajax endpoint of the backend in ForkCMS below version 5.8.3 allows an...8.8 High
- linux kernel, oracle communications cloud native core binding support function, communications cloud native core network exposure function +1 more +3 moreAn information disclosure vulnerability exists in the ARM SIGPAGE functionality of Linux Kernel...4.0 Medium
- libtiff, fedoraproject fedora, netapp ontap select deploy administration utility +1 more +3 moreIn LibTIFF, there is a memory malloc failure in tif_pixarlog.c. A crafted TIFF document can lead...5.5 Medium
- libtiff, fedoraproject fedora, netapp ontap select deploy administration utility +1 more +3 moreA flaw was found in libtiff. Due to a memory allocation failure in tif_read.c, a crafted TIFF...5.5 Medium
- simplesystems libtiff, debian linux +1 moreBuffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the ...6.5 Medium
- quinn project quinnquinn invalidly assumes the memory layout of std::net::SocketAddr7.5 High
- xerox altalink b8045 firmware, altalink b8055 firmware, altalink b8065 firmware +7 more +9 moreXerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction...8.1 High
- xerox altalink b8045 firmware, altalink b8055 firmware, altalink b8065 firmware +7 more +9 moreXerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction...4.9 Medium
c-blosc2OSS-FuzzUNKNOWN READ in blosc_run_decompression_with_contextNo score- cgal computational geometry algorithms library, debian linux +1 moreA code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal...10.0 Critical
- cgal computational geometry algorithms library, debian linux, fedoraproject fedora +2 moreA code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal...10.0 Critical
- cgal computational geometry algorithms library, debian linux, fedoraproject fedora +2 moreA code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal...10.0 Critical
- cgal computational geometry algorithms library, debian linux, fedoraproject fedora +2 moreA code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal...10.0 Critical
- datadog datadog-api-client-javaDataDog API Client contains a Local Information Disclosure Vulnerability3.0 Low
- openark orchestratoropenark/orchestrator cross-site scripting vulnerability6.1 Medium
- lumis experience platformLumisXP (aka Lumis Experience Platform) before 10.0.0 allows unauthenticated blind XXE via an API...9.1 Critical
- adguard homeAn issue was discovered in AdGuard before 0.105.2. An attacker able to get the user's cookie is...7.5 High
- glpi-project glpiXSS injection on ticket update5.4 Medium
- glpi-project glpiStored XSS on documents5.4 Medium
- glpi-project glpiXSS on tabs4.9 Medium
- bigprof online invoicing systemA CSV injection vulnerability found in Online Invoicing System (OIS) 4.3 and below can be...4.4 Medium
- rockwellautomation rslogix 5000, studio 5000 logix designer, rockwell multiple products +1 more +3 moreRockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions...9.8 Critical
- gitlabAn issue has been discovered in GitLab affecting all versions starting with 13.7. GitLab was...3.5 Low
- gitlabAn issue has been discovered in GitLab affecting all versions starting with 13.0. Confidential...5.3 Medium
- slic3r libslic3r, fedoraproject fedora +1 moreAn out-of-bounds read vulnerability exists in the AMF File AMFParserContext::endElement()...8.6 High
- epignosishq efrontA predictable seed vulnerability exists in the password reset functionality of Epignosis...9.8 Critical
- vmware view plannerVMware View Planner 4.x prior to 4.6 Security Patch 1 contains a remote code execution...9.8 Critical
- hackerone nextcloud server, nextcloud server, fedoraproject fedora +2 moreNextcloud Server prior to 20.0.0 stores passwords in a recoverable format even when external...6.7 Medium
- hackerone nextcloud server, nextcloud server, fedoraproject fedora +2 moreNextcloud Server prior to 20.0.6 is vulnerable to reflected cross-site scripting (XSS) due to...4.8 Medium
- fedoraproject fedora, hackerone nextcloud server, nextcloud server +2 moreA missing user check in Nextcloud prior to 20.0.6 inadvertently populates a user's own...6.5 Medium
- thimpress wp hotel bookingThe wp-hotel-booking plugin through 1.10.2 for WordPress allows remote attackers to execute...9.8 Critical
- ibm security verify bridgeIBM Security Verify Bridge contains hard-coded credentials, such as a password or cryptographic...5.9 Medium
- ibm security verify bridgeIBM Security Verify Bridge uses weaker than expected cryptographic algorithms that could allow an...5.9 Medium
drupal/webformPackagistThe Webform module for Drupal 8/9 includes a default Contact webform, which sends a notification email to the site owner and a confirmation email to the email address supplied via the form. The confir…No score- tenable tenable.scTenable.sc and Tenable.sc Core versions 5.13.0 through 5.17.0 were found to contain a...8.8 High
- bitnami containersIn Bitnami Containers, all Laravel container versions prior to: 6.20.0-debian-10-r107 for Laravel...7.3 High
- advantech webaccess\/scadaAn exploitable local privilege elevation vulnerability exists in the file system permissions of...8.8 High
- Show moreLoading…