CVEs published in March 2021
1,535 vulnerabilities, 180 critical, 24 exploited.
- google androidIn the FingerTipS touch screen driver, there is a possible out of bounds read due to an integer...4.4 Medium
- google androidIn the FingerTipS touch screen driver, there is a possible out of bounds write due to a heap...6.7 Medium
- google androidIn the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds...6.7 Medium
- google androidIn the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds...6.7 Medium
- google androidIn the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds...6.7 Medium
- google androidIn the Titan-M chip firmware, there is a possible disclosure of stack memory due to uninitialized...4.4 Medium
- google androidIn the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized...4.4 Medium
- google androidIn the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized...4.4 Medium
- google androidIn the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized...4.4 Medium
- google androidIn the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized...4.4 Medium
- google androidIn setNightModeActivated of UiModeManagerService.java, there is a missing permission check. This...7.8 High
- google androidIn onReceive of ImsPhoneCallTracker.java, there is a possible misattribution of data usage due to...7.8 High
- google androidIn FindQuotaDeviceForUuid of QuotaUtils.cpp, there is a possible use-after-free due to a race...6.4 Medium
- google androidIn onCreate of UsbConfirmActivity, there is a possible tapjacking vector due to an insecure...7.8 High
- google androidIn createConnectToAvailableNetworkNotification of ConnectToNetworkNotificationBuilder.java, there...7.8 High
- google androidIn done of CaptivePortalLoginActivity.java, there is a confused deputy. This could lead to local...7.8 High
- google androidIn checkSlicePermission of SliceManagerService.java, there is a possible resource exposure due to...5.5 Medium
- google androidIn updateNotifications of DeviceStorageMonitorService.java, there is a possible permission bypass...5.5 Medium
- google androidIn onReceive of DcTracker.java, there is a possible way to trigger a provisioning URL and modify...7.8 High
- google androidIn getUpTo17bits of pvmp3_getbits.cpp, there is a possible out of bounds read due to a heap...6.5 Medium
- google androidIn getNbits of pvmp3_getbits.cpp, there is a possible out of bounds read due to a heap buffer...6.5 Medium
- google androidIn DeltaPerformer::Write of delta_performer.cc, there is a possible use of untrusted input due to...5.5 Medium
- google androidIn checkUriPermission and related functions of MediaProvider.java, there is a possible way to...7.8 High
- google androidIn onPackageModified of VoiceInteractionManagerService.java, there is a possible change of...5.5 Medium
- google androidIn BnAudioPolicyService::onTransact of IAudioPolicyService.cpp, there is a possible out of bounds...4.4 Medium
- google androidIn getMediaOutputSliceAction of RemoteMediaSlice.java, there is a possible permission bypass due...7.8 High
- google androidIn nci_proc_rf_management_ntf of nci_hrcv.cc, there is a possible out of bounds read due to a...6.7 Medium
- google androidIn Write of NxpMfcReader.cc, there is a possible out of bounds write due to a missing bounds...6.7 Medium
- google androidIn CrossProfileAppsServiceImpl.java, there is the possibility of an application's...7.8 High
- google androidIn oggpack_look of bitwise.c, there is a possible out of bounds read due to a missing bounds...6.5 Medium
- google androidIn deletePackageVersionedInternal of PackageManagerService.java, there is a possible way to exit...7.8 High
- facebook gameroomThe fbgames protocol handler registered as part of Facebook Gameroom does not properly quote...9.8 Critical
- facebook hhvmDue to incorrect string size calculations inside the preg_quote function, a large input string...9.8 Critical
- facebook hhvmIn the crypt function, we attempt to null terminate a buffer using the size of the input salt...7.5 High
- facebook hhvmIncorrect bounds calculations in substr_compare could lead to an out-of-bounds read when the...7.5 High
- facebook hhvmIn-memory file operations (ie: using fopen on a data URI) did not properly restrict negative...7.5 High
- facebook hhvmxbuf_format_converter, used as part of exif_read_data, was appending a terminating null character...9.8 Critical
- facebook hhvmAn incorrect size calculation in ldap_escape may lead to an integer overflow when overly long...9.8 Critical
- linux kernel, oracle tekelec platform distribution +1 moreA flaw was found in the way memory resources were freed in the unix_stream_recvmsg function in...5.5 Medium
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse...5.3 Medium
- ibm spss modelerA vulnerability exists in IBM SPSS Modeler Subscription Installer that allows a user with create...6.2 Medium
- open5gsA request-validation issue was discovered in Open5GS 2.1.3 through 2.2.0. The WebUI component...9.8 Critical
- janobe baby care systemBaby Care System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the Edit Page...5.4 Medium
- sap netweaver application server java, sap se netweaver application server java (applications based on web dynpro java) +1 moreSAP Netweaver Application Server Java (Applications based on WebDynpro Java) versions 7.00, 7.10,...4.7 Medium
- cszcms csz cmsA stored cross-site scripting (XSS) vulnerability in cszcms 1.2.9 exists in /admin/pages/new via...5.4 Medium
- thedaylightstudio fuel cmsFUEL CMS 1.4.13 contains a cross-site request forgery (CSRF) vulnerability that can delete a page...4.3 Medium
- thedaylightstudio fuel cmsFUEL CMS 1.4.8 allows SQL injection via the 'fuel_replace_id' parameter in pages/replace/1....9.8 Critical
- thedaylightstudio fuel cmsAn issue was discovered in FUEL CMS 1.4.7. There is a escalation of privilege vulnerability to...8.8 High
- thedaylightstudio fuel cmsAn issue was discovered in FUEL CMS V1.4.7. An attacker can use a XSS payload and bypass a filter...5.4 Medium
- web based quiz system project based quiz systemWeb Based Quiz System 1.0 is affected by cross-site scripting (XSS) in register.php through the...6.1 Medium
- Show moreLoading…