CVEs published in March 2021
1,535 vulnerabilities, 180 critical, 24 exploited.
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in extensions in Google Chrome prior to 89.0.4389.72 allowed an...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in performance APIs in Google Chrome prior to 89.0.4389.72 allowed a...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in performance APIs in Google Chrome prior to 89.0.4389.72 allowed a...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in navigations in Google Chrome prior to 89.0.4389.72 allowed a...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreSide-channel information leakage in autofill in Google Chrome prior to 89.0.4389.72 allowed a...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in tab search in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to...8.8 High
- debian linux, google chrome, fedoraproject fedora +2 moreUse after free in Network Internals in Google Chrome on Linux prior to 89.0.4389.72 allowed a...8.8 High
- debian linux, google chrome, fedoraproject fedora +2 moreInappropriate implementation in Compositing in Google Chrome on Linux and Windows prior to 89.0...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in Autofill in Google Chrome prior to 89.0.4389.72 allowed a...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in full screen mode in Google Chrome prior to 89.0.4389.72 allowed a...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Site isolation in Google Chrome prior to 89.0.4389.72 allowed a...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Referrer in Google Chrome prior to 89.0.4389.72 allowed a remote...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreSide-channel information leakage in Network Internals in Google Chrome prior to 89.0.4389.72...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in File System API in Google Chrome on Windows prior to 89.0.4389...8.1 High
- google chrome, debian linux, fedoraproject fedora +2 moreIncorrect security UI in TabStrip and Navigation in Google Chrome on Android prior to 89.0.4389...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreIncorrect security UI in Loader in Google Chrome prior to 89.0.4389.72 allowed a remote attacker...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreOut of bounds memory access in V8 in Google Chrome prior to 89.0.4389.72 allowed a remote...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in appcache in Google Chrome prior to 89.0.4389.72 allowed a...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in bookmarks in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreData race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreData race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient data validation in Chrome on iOS in Google Chrome on iOS prior to 89.0.4389.72...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient data validation in Reader Mode in Google Chrome on iOS prior to 89.0.4389.72 allowed...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in WebRTC in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.72 allowed a remote attacker...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in WebAudio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.72 allowed a remote attacker...8.8 High
- go-proxyproto project go-proxyproto, fedoraproject fedora +1 moreDenial of Service (DoS)4.4 Medium
xcftoolsDebianxcftools - regression updateNo score- mantisbtMantisBT Insufficient Session Expiration cookie string not reset after logout8.1 High
- algorithmica project algorithmicaDouble free in algorithmica7.5 High
- linuxfoundation nats-serverDenial of Service (DoS)7.5 High
- debian linux, linux kernel, netapp cloud backup +2 more +4 moreAn issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI data structures do not...7.8 High
- debian linux, linux kernel, canonical ubuntu linux +3 more +5 moreAn issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c...7.1 High
- debian linux, linux kernel, netapp cloud backup +1 more +3 moreAn issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be used to...4.4 Medium
- afterlogic aurora, webmail pro +1 moreAn issue was discovered in AfterLogic Aurora through 7.7.9 and WebMail Pro through 7.7.9. They...7.5 High
libavcOSS-FuzzHeap-buffer-overflow in ih264d_mark_err_slice_skipNo scoreskiaOSS-FuzzUse-after-poison in std::__1::unique_ptr<SkSL::Expression, std::__1::default_delete<SkSL::ExpressionNo score- fltk project fltkOut of bounds read in fltk9.1 Critical
- fltk project fltkNull pointer deference in fltk7.5 High
- fltk project fltkNull pointer deference in fltk7.5 High
- wazuhImproper Input Validation (RCE)8.8 High
kimageformatsOSS-FuzzHeap-buffer-overflow in put_epel_8_fallbackNo scorec-blosc2OSS-FuzzInvalid-free in frame_get_lazychunkNo scorec-blosc2OSS-FuzzHeap-buffer-overflow in blosc_dNo scorelibredwgOSS-FuzzHeap-double-free in bit_chain_freeNo scoreserenityOSS-FuzzHeap-buffer-overflow in AK::ByteBuffer::overwriteNo scorebindopenSUSESecurity update for bindNo score- kentico cmsThe Blog module in Kentico CMS 5.5 R2 build 5.5.3996 allows SQL injection via the tagname parameter.9.8 Critical
- deutschepost mailoptimizerDeutsche Post Mailoptimizer 4.3 before 2020-11-09 allows Directory Traversal via a crafted ZIP...7.8 High
- Show moreLoading…