CVEs published in March 2021
1,535 vulnerabilities, 180 critical, 24 exploited.
- weseek growi, weseek, inc. growi (v4.2 series) +1 moreStored cross-site scripting vulnerability in Admin Page of GROWI (v4.2 Series) versions from v4.2...4.8 Medium
- weseek growi, weseek, inc. growi (v4.2 series) +1 moreReflected cross-site scripting vulnerability due to insufficient verification of URL query...6.1 Medium
- growi, inc. growiInvalid file validation on the upload feature in GROWI versions v4.2.2 allows a remote attacker...7.2 High
- growi, inc. growiImproper access control vulnerability in GROWI versions v4.2.2 and earlier allows a remote...7.5 High
- growi, inc. growiPath traversal vulnerability in GROWI versions v4.2.2 and earlier allows an attacker with...4.7 Medium
- growi, inc. growiPath traversal vulnerability in GROWI versions v4.2.2 and earlier allows an attacker with...2.7 Low
- growi, inc. growiStored cross-site scripting vulnerability due to inadequate CSP (Content Security Policy)...5.4 Medium
- apache velocity tools, debian linux +1 moreVelocity Tools XSS Vulnerability6.1 Medium
- apache velocity engine, wss4j, debian linux +13 more +15 moreVelocity Sandbox Bypass8.8 High
- westerndigital my cloud osWestern Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB...7.8 High
- expressvpnAn integer buffer overflow in the Nginx webserver of ExpressVPN Router version 1 allows remote...7.5 High
- 3mf lib3mf, debian linux, fedoraproject fedora +2 moreA use-after-free vulnerability exists in the NMR::COpcPackageReader::releaseZIP() functionality...8.1 High
- siemens simatic mv420 firmware, simatic mv440 firmware +1 moreIn SIMATIC MV400 family versions prior to v7.0.6, the ISN generator is initialized with a...7.5 High
- twinkletray twinkle trayTwinkle Tray (aka twinkle-tray) through 1.13.3 allows remote command execution. A remote attacker...9.8 Critical
- squid-cache squid, debian linux, fedoraproject fedora +2 moreSquid through 4.14 and 5.x through 5.0.5, in some configurations, allows information disclosure...3.7 Low
- ougc feedback project feedbackThe OUGC Feedback plugin before 1.8.23 for MyBB allows XSS via the comment field of feedback...6.1 Medium
- tibco analytics platform, spotfire analyst, spotfire desktop +2 more +4 moreTIBCO Spotfire Cross Site Scripting Vulnerability8.0 High
- homey firmware, pro firmware +1 moreAn issue was discovered on Athom Homey and Homey Pro devices before 5.0.0. ZigBee hub devices...7.5 High
- qemu, debian linux +1 moreA stack overflow via an infinite recursion vulnerability was found in the eepro100 i8255x device...5.5 Medium
- linux kernel, redhat enterprise linux +1 moreA flaw was found in the Linux kernel in versions prior to 5.10. A violation of memory access was...6.7 Medium
- netty io.netty:netty-codec-http2, netty, apache kudu +6 more +8 morePossible request smuggling in HTTP/2 due missing validation5.9 Medium
- madge project madgeCommand Injection8.6 High
- parall jspdfRegular Expression Denial of Service (ReDoS)5.9 Medium
- eclipse platform, the eclipse foundation eclipse platform +1 moreIn versions 4.18 and earlier of the Eclipse Platform, the Help Subsystem does not authenticate...7.8 High
- hyperledger besuPotential DoS in Besu HTTP JSON-RPC API6.5 Medium
- inetsoftware i-net clear reportsI-Net Software Clear Reports 20.10.136 web application accepts a user-controlled input that...6.1 Medium
- keycloak, redhat single sign-on +1 moreKeycloak Missing authentication for critical function6.8 Medium
- qemuA flaw was found in the virtio-fs shared file system daemon (virtiofsd) of QEMU. The new ...3.3 Low
- linux kernelAn out-of-bounds access flaw was found in the Linux kernel's implementation of the eBPF code...7.8 High
- red hat ansible-tower, redhat ansible tower +1 moreA flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape...6.7 Medium
- lenovo xclarity orchestratorAn internal product security audit of LXCO, prior to version 1.2.2, discovered that credentials...4.9 Medium
- honor pcmanagerA denial of service vulnerability was reported in Lenovo PCManager, prior to version 3.0.200.2042...5.5 Medium
- lenovo xclarity orchestratorAn internal product security audit of LXCO, prior to version 1.2.2, discovered that optional...4.9 Medium
- apache oozieOozie local privilege escalation4.7 Medium
- ibm cloud pak for multicloud management monitoringIBM Cloud Pak for Multicloud Management Monitoring 2.2 returns potentially sensitive information...5.3 Medium
- changeset project changesetChangeset vulnerable to prototype pollution9.8 Critical
- sap 3d visual enterprise viewerWhen a user opens manipulated Universal 3D (.U3D) files received from untrusted sources in SAP 3D...4.3 Medium
- sap 3d visual enterprise viewerWhen a user opens manipulated Tag Image File Format (.TIFF) format files received from untrusted...4.3 Medium
- sap 3d visual enterprise viewerWhen a user opens manipulated PhotoShop Document (.PSD) format files received from untrusted...4.3 Medium
- sap 3d visual enterprise viewerWhen a user opens manipulated HPGL format files received from untrusted sources in SAP 3D Visual...4.3 Medium
- sap 3d visual enterprise viewerWhen a user opens manipulated Interchange File Format (.IFF) format files received from untrusted...4.3 Medium
- sap 3d visual enterprise viewerWhen a user opens manipulated Jupiter Tessellation (.JT) format files received from untrusted...4.3 Medium
- sap 3d visual enterprise viewerWhen a user opens manipulated Portable Document Format (.PDF) format files received from...4.3 Medium
- sap 3d visual enterprise viewerWhen a user opens manipulated Scalable Vector Graphics (.SVG) format files received from...4.3 Medium
- sap 3d visual enterprise viewerWhen a user opens manipulated Computer Graphics Metafile (.CGM) format files received from...4.3 Medium
- sap hanaLDAP authentication in SAP HANA Database version 2.0 can be bypassed if the attached LDAP...7.7 High
- sap payment engineSAP Payment Engine version 500, does not perform necessary authorization checks for an...6.8 Medium
- sap manufacturing integration and intelligenceSAP MII allows users to create dashboards and save them as JSP through the SSCE (Self Service...9.9 Critical
- sap 3d visual enterprise viewerWhen a user opens manipulated Graphics Interchange Format (.GIF) format files received from...4.3 Medium
- sap enterprise financial services, sap se enterprise financial services (bank customer accounts) +1 moreSAP Enterprise Financial Services versions, 101, 102, 103, 104, 105, 600, 603, 604, 605, 606, 616...6.8 Medium
- Show moreLoading…