CVEs published in March 2021
1,535 vulnerabilities, 180 critical, 24 exploited.
- netgear r7800, r7800 firmware, br200 firmware +41 more +43 moreThis vulnerability allows network-adjacent attackers to compromise the integrity of downloaded...6.5 Medium
- netgear r7800, r7800 firmware, br200 firmware +41 more +43 moreThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected...8.8 High
- netgear r7800, r7800 firmware, br200 firmware +41 more +43 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...6.3 Medium
- netgear r7800, br200 firmware, br500 firmware +41 more +43 moreThis vulnerability allows network-adjacent attackers to bypass authentication on affected...6.3 Medium
- newlib project newlib, fedoraproject fedora +1 moreA flaw was found in newlib in versions prior to 4.0.0. Improper overflow validation in the memory...9.8 Critical
- secomea gatemanager, gatemanager firmware +1 moreInsufficient CSRF guards8.1 High
- secomea sitemanager, sitemanager firmware +1 moreReject Remote Management via Cellular UPLINK29.1 Critical
- secomea gatemanager, gatemanager firmware +1 moreReflected XSS issues6.3 Medium
- secomea gatemanager, gatemanager firmware +1 moreXSS issue due to insufficient sanitization of input field7.3 High
- openbsd openssh, fedoraproject fedora, netapp cloud backup +9 more +11 moressh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common...7.1 High
- ansi up project upansi_up cross-site scripting vulnerability6.1 Medium
- squarebox catdvAn issue was discovered in SquareBox CatDV Server through 9.2. An attacker can invoke sensitive...9.1 Critical
- ossecAn issue was discovered in OSSEC 3.6.0. An uncontrolled recursion vulnerability in os_xml.c...7.5 High
- xmlhttprequest project xmlhttprequestArbitrary Code Injection8.1 High
- cncf spireIn SPIRE before versions 0.8.5, 0.9.4, 0.10.2, 0.11.3 and 0.12.1, the "aws_iid" Node Attestor improperly normalizes the path provided through the agent ID templating feature, which may allow the issua…6.8 Medium
- cncf spireLegacy Node API Allows Impersonation in github.com/spiffe/spire/pkg/server/endpoints/node8.1 High
- secomea gatemanager, gatemanager 8250 firmware +1 moreAdd integrity check of GateManager firmware8.4 High
- zte zxhn h196q firmwareA ZTE product has an information leak vulnerability. An attacker with higher authority can go...5.7 Medium
- arubanetworks airwaveA remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave...6.3 Medium
- arubanetworks airwaveA remote authenticated authenticated xml external entity (xxe) vulnerability was discovered in...6.5 Medium
- arubanetworks airwaveA remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave...6.3 Medium
- zohocorp manageengine desktop centralZoho ManageEngine Desktop Central before build 10.0.647 allows a single authentication secret...9.1 Critical
- arubanetworks airwaveA remote authenticated stored cross-site scripting (xss) vulnerability was discovered in Aruba...4.8 Medium
- arubanetworks airwaveA remote reflected cross-site scripting (xss) vulnerability was discovered in Aruba AirWave...6.1 Medium
- arubanetworks airwaveA remote authenticated sql injection vulnerability was discovered in Aruba AirWave Management...6.5 Medium
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus before 7066 allows XSS.6.1 Medium
pngcheckMageiaUpdated pngcheck packages fix security vulnerabilitiesNo scorepython-pygmentsMageiaUpdated python-pygments packages fix a security vulnerabilityNo score- arubanetworks airwaveA remote authenticated sql injection vulnerability was discovered in Aruba AirWave Management...6.5 Medium
- arubanetworks airwaveA remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave...7.2 High
- arubanetworks airwaveA remote authentication restriction bypass vulnerability was discovered in Aruba AirWave...7.1 High
- arubanetworks airwaveA remote unauthenticated cross-site request forgery (csrf) vulnerability was discovered in Aruba...8.8 High
- arubanetworks airwaveA remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave...7.2 High
- arubanetworks airwaveA remote unauthenticated cross-site request forgery (csrf) vulnerability was discovered in Aruba...8.8 High
- totvs fluigTOTVS Fluig Luke 1.7.0 allows directory traversal via a base64 encoded file=../ to a volume...8.6 High
- jpeg jpeg-xljpeg-xl v0.3.2 is affected by a heap buffer overflow in /lib/jxl/coeff_order.cc ReadPermutation....7.8 High
- dieselFix a use-after-free bug in diesels Sqlite backend9.8 Critical
- apache supersetApache Superset stored XSS on Dashboard markdown5.4 Medium
- movabletype movable type, movable type advanced, movable type premium +1 more +3 moreCross-site scripting vulnerability in in Add asset screen of Contents field of Movable Type 7 r...6.1 Medium
- movabletype movable type, movable type advanced, movable type premium +1 more +3 moreCross-site scripting vulnerability in in Asset registration screen of Movable Type 7 r.4705 and...6.1 Medium
- movabletype movable type, movable type advanced, movable type premium +1 more +3 moreCross-site scripting vulnerability in in Role authority setting screen of Movable Type 7 r.4705...6.1 Medium
- zohocorp manageengine applications control plusZoho ManageEngine Application Control Plus before 100523 has an insecure SSL configuration...9.8 Critical
- suse rancherRancher: XSS on /v3/cluster/7.1 High
- rubyonrails active record session storeActiverecord-session_store Vulnerable to Timing Attack5.3 Medium
- sonicwall directory services connectorSonicWall SSO-agent default configuration uses NetAPI to probe the associated IP's in the network...8.2 High
- identitymodel project identitymodelAn issue was discovered in IdentityModel (aka ScottBrady.IdentityModel) before 1.3.0. The Branca...7.5 High
- msi dragon centerThe MsIo64.sys driver before 1.1.19.1016 in MSI Dragon Center before 2.0.98.0 has a buffer...9.8 Critical
- sfcyazilim sonloggerSonLogger before 6.4.1 is affected by user creation with any user permissions profile (e.g.,...8.2 High
- sfcyazilim sonloggerSonLogger before 6.4.1 is affected by Unauthenticated Arbitrary File Upload. An attacker can send...9.8 Critical
libredwgOSS-FuzzHeap-buffer-overflow in encode_3dsolidNo score- Show moreLoading…