CVEs published in March 2021
1,535 vulnerabilities, 180 critical, 24 exploited.
- linux kernel, xen, netapp cloud backup +1 more +3 moreAn issue was discovered in the Linux kernel 5.9.x through 5.11.3, as used with Xen. In some less...6.5 Medium
- debian linux, linux kernel, netapp cloud backup +1 more +3 moreAn issue was discovered in the Linux kernel through 5.11.3, as used with Xen PV. A certain part...6.5 Medium
- containerd, fedoraproject fedora +1 moreenvironment variable leak6.3 Medium
- doctor appointment system project appointment systemSQL injection in admin.php in doctor appointment system 1.0 allows an unauthenticated attacker to...9.8 Critical
- xerox altalink b8045 firmware, altalink b8055 firmware, altalink b8065 firmware +7 more +9 moreOn Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction...7.5 High
- ytnef, fedoraproject fedora, redhat enterprise linux +2 moreIn ytnef 1.9.3, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial-of...7.8 High
- ytnef, fedoraproject fedora, redhat enterprise linux +2 moreIn ytnef 1.9.3, the TNEFSubjectHandler function in lib/ytnef.c allows remote attackers to cause a...7.8 High
- samsung internetImproper permission grant check in Samsung Internet prior to version 13.0.1.60 allows access to...2.1 Low
- google android, samsung mobile devices +1 moreA possible arbitrary memory overwrite vulnerabilities in quram library version prior to SMR Jan...7.1 High
- google android, samsung mobile devices +1 moreHijacking vulnerability in Samsung Email application version prior to SMR Feb-2021 Release 1...5.3 Medium
- google android, samsung mobile devices +1 moreGraphic format mismatch while converting video format in hwcomposer prior to SMR Mar-2021 Release...4.0 Medium
- google android, samsung mobile devices +1 moreMissing permission check in knox_custom service prior to SMR Mar-2021 Release 1 allows attackers...6.2 Medium
- samsung membersCalling of non-existent provider in Samsung Members prior to version 2.4.81.13 (in Android O(8.1)...4.0 Medium
- samsung mobile smp sdk, samsung members +1 moreCalling of non-existent provider in SMP sdk prior to version 3.0.9 allows unauthorized actions...4.0 Medium
- samsung s assistantCalling of non-existent provider in S Assistant prior to version 6.5.01.22 allows unauthorized...4.0 Medium
- google android, samsung mobile devices +1 moreImproper access control vulnerability in Samsung keyboard version prior to SMR Feb-2021 Release 1...5.1 Medium
- samsung mobile devices, google android +1 moreImproper address validation in HArx in Samsung mobile devices prior to SMR Mar-2021 Release 1...4.4 Medium
- samsung mobile devices, google android +1 moreImproper memory access control in RKP in Samsung mobile devices prior to SMR Mar-2021 Release 1...4.4 Medium
- samsung mobile devices, samsung mobile devices, samsung android +2 moreImproper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021...4.4 Medium
- samsung mobile devices, google android +1 moreImproper access control in NotificationManagerService in Samsung mobile devices prior to SMR Mar...2.8 Low
- samsung mobile devices, google android, samsung one ui +2 moreImproper lockscreen status check in cocktailbar service in Samsung mobile devices prior to SMR...2.5 Low
- samsung mobile devices, google android +1 moreImproper input check in wallpaper service in Samsung mobile devices prior to SMR Feb-2021 Release...5.5 Medium
- samsung pay miniImproper access control in Samsung Pay mini application prior to v4.0.14 allows unauthorized...3.2 Low
- samsung pay miniImproper access control in Samsung Pay mini application prior to v4.0.14 allows unauthorized...3.2 Low
- samsung pay miniImproper access control in Samsung Pay mini application prior to v4.0.14 allows unauthorized...3.2 Low
- netapp data ontapClustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P12, 9.7P9 and 9.8 are susceptible to a...6.5 Medium
- netapp data ontapClustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P12, 9.7P8 and 9.8 are susceptible to a...3.5 Low
- afterlogic aurora, webmail pro +1 moreAn issue was discovered in AfterLogic Aurora through 8.5.3 and WebMail Pro through 8.5.3, when...9.8 Critical
- fs-path project fs-pathCommand injection in fs-path9.8 Critical
- ibm doors next, engineering lifecycle optimization, engineering test management +7 more +9 moreIBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users...5.4 Medium
- ibm doors next, engineering lifecycle optimization, engineering test management +7 more +9 moreIBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users...5.4 Medium
- ibm doors next, engineering lifecycle optimization, engineering test management +7 more +9 moreIBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users...5.4 Medium
- ibm doors next, engineering lifecycle optimization, engineering test management +7 more +9 moreIBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users...5.4 Medium
- ibm doors next, engineering lifecycle optimization, engineering test management +7 more +9 moreIBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users...5.4 Medium
- ibm doors next, engineering lifecycle optimization, engineering test management +7 more +9 moreIBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows...6.4 Medium
- ibm doors next, engineering lifecycle optimization, engineering test management +7 more +9 moreIBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows...6.4 Medium
- ibm doors next, engineering lifecycle optimization, engineering test management +7 more +9 moreIBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows...6.4 Medium
- yubico yubihsm-shellAn issue was discovered in the _send_secure_msg() function of Yubico yubihsm-shell through 2.0.3....4.4 Medium
- joomla joomla\!, joomla! project cms +1 more[20210309] - Core - Inadequate filtering of form contents could allow to overwrite the author field5.3 Medium
- joomla joomla\!, joomla! project cms +1 more[20210308] - Core - Path Traversal within joomla/archive zip class5.5 Medium
- joomla joomla\!, joomla! project cms +1 more[20210307] - Core - ACL violation within com_content frontend editing5.3 Medium
- joomla joomla\!, joomla! project cms +1 more[20210306] - Core - com_media allowed paths that are not intended for image uploads7.5 High
- joomla joomla\!, joomla! project cms +1 more[20210305] - Core - Input validation within the template manager7.5 High
- joomla joomla\!, joomla! project cms +1 more[20210304] - Core - XSS within the feed parser library6.1 Medium
- joomla joomla\!, joomla! project cms +1 more[20210303] - Core - XSS within alert messages showed to users6.1 Medium
- joomla joomla\!, joomla! project cms +1 more[20210302] - Core - Potential Insecure FOFEncryptRandval9.1 Critical
- joomla joomla\!, joomla! project cms +1 more[20210301] - Core - Insecure randomness within 2FA secret generation9.1 Critical
- joomla joomla\!, joomla! project cms +1 more[20210301] - Core - Insecure randomness within 2FA secret generation5.3 Medium
- fortinet fortiosWhen traffic other than HTTP/S (eg: SSH traffic, etc...) traverses the FortiGate in version below...4.0 Medium
- fortinet fortiproxyAn improper access control vulnerability in FortiProxy SSL VPN portal 2.0.0, 1.2.9 and below...7.1 High
- Show moreLoading…