CVEs published in March 2021
1,535 vulnerabilities, 180 critical, 24 exploited.
- sap netweaver knowledge managementKnowledge Management versions 7.01, 7.02, 7.30, 7.31, 7.40, 7.50 allows a remote attacker with...6.5 Medium
- sap netweaver, sap se netweaver as java (migrationservice) +1 moreThe MigrationService, which is part of SAP NetWeaver versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40,...9.6 Critical
- privoxyA flaw was found in privoxy before 3.0.32. A crash may occur due a NULL-pointer dereference when...7.5 High
- web based quiz system project based quiz systemWeb Based Quiz System 1.0 is affected by cross-site scripting (XSS) in admin.php through the...6.1 Medium
- vagrant project vagrant, jlleitschuh security-research +1 moreSensitive information disclosure via log in com.bmuschko:gradle-vagrant-plugin5.3 Medium
- zope products.genericsetupExposure of Sensitive Information to an Unauthorized Actor in Products.GenericSetup5.3 Medium
- facebook react-dev-utilsreact-dev-utils OS Command Injection in function `getProcessForPort`5.6 Medium
libsassOSS-FuzzSegv on unknown address in Sass::CompoundSelector::resolve_parent_refsNo score- git, apple xcode, debian linux +1 more +3 moremalicious repositories can execute remote code while cloning8.0 High
- privoxy, debian linux +1 moreA flaw was found in privoxy before 3.0.32. Invalid memory access with an invalid pattern passed...7.5 High
- privoxy, debian linux +1 moreA flaw was found in privoxy before 3.0.32. A invalid read of size two may occur in...7.5 High
- privoxy, debian linux +1 moreA flaw was found in privoxy before 3.0.32. A crash can occur via a crafted CGI request if Privoxy...7.5 High
- privoxy, debian linux +1 moreA flaw was found in privoxy before 3.0.32. An assertion failure could be triggered with a crafted...7.5 High
- pygments, debian linux, fedoraproject fedora +5 more +7 moreInfinite Loop in Pygments7.5 High
- imagemagick, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in ImageMagick in coders/webp.c. An attacker who submits a crafted file that is...5.5 Medium
- microsoft zeromq, zeromq libzmq +1 moreThere's a flaw in the zeromq server in versions before 4.3.3 in src/decoder_allocators.hpp. The...8.1 High
- microsoft zeromq, zeromq libzmq +1 moreAn uncontrolled resource consumption (memory leak) flaw was found in the ZeroMQ client in...6.5 Medium
- dell idrac8 firmware, integrated dell remote access controller (idrac) +1 moreDell iDRAC8 versions prior to 2.75.100.75 contain a host header injection vulnerability. A remote...6.1 Medium
- dell powerscale onefs, emc powerscale onefs +1 morePowerScale OneFS 8.1.2,8.2.2 and 9.1.0 contains an improper input sanitization issue in its API...8.8 High
- dell powerscale onefs, emc powerscale onefs +1 morePowerScale OneFS 8.1.2,8.2.2 and 9.1.0 contains an improper input sanitization issue in a command...7.8 High
- keycloak, redhat single sign-on +1 moreKeycloak discloses information without authentication6.5 Medium
- maxum rumpusMaxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site scripting (XSS). Users are able to...5.4 Medium
- zope products.pluggableauthserviceURL Redirection to Untrusted Site ('Open Redirect') in Products.PluggableAuthService5.7 Medium
- maxum rumpusMaxum Rumpus 8.2.13 and 8.2.14 is affected by a command injection vulnerability. The web...8.8 High
- maxum rumpusMaxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site request forgery (CSRF). If an...8.8 High
- elastic elasticsearch, oracle communications cloud native core automated test suite +1 moreExposure of Sensitive Information to an Unauthorized Actor4.3 Medium
- zope products.pluggableauthservice, plone +1 moreExposure of Sensitive Information to an Unauthorized Actor in Products.PluggableAuthService ZODBRoleManager6.5 Medium
- spnego http authentication module project http authentication module, stnoonan spnego-http-auth-nginx-module +1 moreBasic Authentication can be bypassed using a malformed username5.3 Medium
- mozilla pollbotOpen redirect in pollbot7.4 High
- minioBypassing readOnly policy by creating a temporary 'mc share upload' URL7.7 High
gnome-autoarUbuntugnome-autoar regressionNo score- ibm datapower gatewayIBM DataPower Gateway V10 and V2018 could allow a local attacker with administrative privileges...6.7 Medium
- ibm api connectIBM API Connect V10 and V2018 could allow an attacker who has intercepted a registration...4.8 Medium
- ibm api connectIBM API Connect V10 is impacted by insecure communications during database replication. As the...5.9 Medium
- ratcf, opnsense core +1 moreMulti Factor Authentication Token Improperly Validated On User Login8.7 High
- glpi-project glpiInsecure Direct Object Reference (IDOR) on "Solutions"6.8 Medium
- glpi-project glpiStored XSS in budget type6.2 Medium
- glpi-project glpiHorizontal Privilege Escalation7.7 High
- glpi-project glpiUnsafe Reflection in getItemForItemtype()6.8 Medium
Microsoft.Bot.ConnectorNuGetImproper AuthenticationNo score- redhat 389 directory server, directory server, enterprise linux +2 moreWhen binding against a DN during authentication, the reply from 389-ds-base will be different...5.3 Medium
- clusterlabs hawkAn issue was discovered in ClusterLabs Hawk (aka HA Web Konsole) through 2.3.0-15. It ships the...8.8 High
- drweb security spaceDr.Web Security Space versions 11 and 12 allow elevation of privilege for local users without...7.8 High
- obss time in statusIn the "Time in Status" app before 4.13.0 for Jira, remote authenticated attackers can cause...5.4 Medium
- oryx-embedded cyclonetcpOryx Embedded CycloneTCP 1.7.6 to 2.0.0, fixed in 2.0.2, is affected by incorrect input...7.5 High
- google chrome, debian linux, fedoraproject fedora +2 moreUninitialized data in PDFium in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in payments in Google Chrome prior to 89.0.4389.72 allowed a...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Blink in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient data validation in URL formatting in Google Chrome prior to 89.0.4389.72 allowed a...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in QR scanning in Google Chrome on iOS prior to 89.0.4389.72...4.3 Medium
- Show moreLoading…