CVEs published in March 2021
1,535 vulnerabilities, 180 critical, 24 exploited.
- microsoft internet explorer, edge, internet explorer 11 +2 more +4 moreInternet Explorer Memory Corruption Vulnerability8.8 High
- microsoft hevc video extensions, high efficiency video coding +1 moreHEVC Video Extensions Remote Code Execution Vulnerability7.8 High
- microsoft office, 365 apps, 365 apps for enterprise +4 more +6 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +25 more +27 moreWindows Event Tracing Information Disclosure Vulnerability5.5 Medium
- microsoft sharepoint server, sharepoint enterprise server 2016, sharepoint foundation 2013 service pack 1 +3 more +5 moreMicrosoft SharePoint Server Spoofing Vulnerability4.6 Medium
- microsoft windows 10 version 1803, windows 10 version 1809, windows 10 version 1909 +9 more +11 moreDirectX Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1909, windows 10 version 2004, windows 10 version 20h2 +5 more +7 moreWindows Error Reporting Elevation of Privilege Vulnerability7.8 High
- microsoft hevc video extensions, high efficiency video coding +1 moreHEVC Video Extensions Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1803, windows 10 version 1809, windows 10 version 1909 +9 more +11 moreWindows Update Stack Setup Elevation of Privilege Vulnerability7.1 High
- lucysecurity security awarenessLUCY Security Awareness Software through 4.7.x allows unauthenticated remote code execution...9.8 Critical
- smartbear swagger-codegenGenerator Web Application: Local Privilege Escalation Vulnerability via System Temp Directory5.3 Medium
- smartbear swagger-codegenGenerated Code Contains Local Information Disclosure Vulnerability5.3 Medium
- envoyproxy envoyJWT authentication bypass with unknown issuer token8.2 High
- facebook hhvmWhen unserializing an object with dynamic properties HHVM needs to pre-reserve the full size of...9.8 Critical
- facebook hhvmThe unserialize() function supported a type code, "S", which was meant to be supported only for...7.5 High
- facebook hhvmThe fb_unserialize function did not impose a depth limit for nested deserialization. That meant a...7.5 High
luaOSS-FuzzHeap-buffer-overflow in luaG_getfunclineNo score- clipper project clipperClipper before 1.0.5 allows remote command execution. A remote attacker may send a crafted IPC...9.8 Critical
grokOSS-FuzzHeap-use-after-free in grk_object_unrefNo score- golang go, fedoraproject fedora +1 morearchive/zip in Go 1.16.x before 1.16.1 allows attackers to cause a denial of service (panic) upon...5.5 Medium
phpOSS-FuzzHeap-buffer-overflow in _estrdupNo score- debian linux, flatpak, fedoraproject fedora +2 moreSandbox escape via special tokens in .desktop file7.1 High
- golang goencoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom...7.5 High
- teluu pjsip, debian linux, pjsip pjproject +2 moreCrash in receiving updated SDP answer after initial SDP negotiation failed6.5 Medium
- teluu pjsip, pjsip pjproject +1 moreExisting TLS connections can be reused without checking remote hostname6.8 Medium
- tenable jira cloud, integration-jira-cloud +1 moreExecution of untrusted code through config file5.0 Medium
- octobercms octoberOctober CMS vulnerable to Potential Host Header Poisoning on misconfigured servers6.8 Medium
- netgear gs116e firmware, jgs516pe firmware +1 moreThe TFTP server fails to handle multiple connections on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43...6.5 Medium
- netgear gs116e firmware, jgs516pe firmware +1 moreThe NSDP protocol implementation on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was affected by...8.8 High
- netgear gs116e firmware, jgs516pe firmware +1 moreMultiple integer overflow parameters were found in the web administration panel on NETGEAR...6.8 Medium
- netgear gs116e firmware, jgs516pe firmware +1 moreThe authentication token required to execute NSDP write requests on NETGEAR JGS516PE/GS116Ev2 v2...8.8 High
- palo alto networks cortex xsoarCortex XSOAR: Secrets for SAML single sign-on (SSO) integration may be logged in system logs5.1 Medium
- netgear gs116e firmware, jgs516pe firmware +1 moreA cross-site scripting (XSS) vulnerability in the administration web panel on NETGEAR JGS516PE...4.8 Medium
- netgear gs116e firmware, jgs516pe firmware +1 moreA buffer overflow vulnerability in the access control section on NETGEAR JGS516PE/GS116Ev2 v2.6.0...7.2 High
- netgear gs116e firmware, jgs516pe firmware +1 moreNETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allow unauthenticated users to modify the switch DHCP...7.1 High
- netgear gs116e firmware, jgs516pe firmware +1 moreThe NSDP protocol implementation on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was not properly...6.8 Medium
- netgear gs116e firmware, jgs516pe firmware +1 moreA buffer overflow vulnerability in the NSDP protocol authentication method on NETGEAR JGS516PE...6.5 Medium
- netgear gs116e firmware, jgs516pe firmware +1 moreThe CSRF protection mechanism implemented in the web administration panel on NETGEAR JGS516PE...8.8 High
- netgear gs116e firmware, jgs516pe firmware +1 moreThe hashing algorithm implemented for NSDP password authentication on NETGEAR JGS516PE/GS116Ev2...8.8 High
- emerson smart wireless gateway 1420 firmwareIncorrect Access Control in Emerson Smart Wireless Gateway 1420 4.6.59 allows remote attackers to...7.5 High
- emerson wireless 1420 gateway firmwareEmerson Smart Wireless Gateway 1420 4.6.59 allows non-privileged users (such as the default...8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +25 more +27 moreWindows Print Spooler Elevation of Privilege Vulnerability7.8 High
- libjpeg-turbo, fedoraproject fedora +1 moreLibjpeg-turbo versions 2.0.91 and 2.0.90 is vulnerable to a denial of service vulnerability...6.5 Medium
- google androidIn GenerateFaceMask of face.cc, there is a possible out of bounds write due to an incorrect...7.8 High
- google androidIn sound_trigger_event_alloc of platform.h, there is a possible out of bounds write due to a heap...7.8 High
- google androidIn convertToHidl of convert.cpp, there is a possible out of bounds read due to uninitialized data...5.5 Medium
- google androidIn the NXP NFC firmware, there is a possible insecure firmware update due to a logic error. This...6.7 Medium
- google androidIn iaxxx_core_sensor_change_state of iaxxx-module.c, there is a possible out of bounds write due...6.7 Medium
- google androidIn the FingerTipS touch screen driver, there is a possible out of bounds read due to an integer...4.4 Medium
- google androidIn fts_driver_test_write of fts_proc.c, there is a possible out of bounds read due to a missing...4.4 Medium
- Show moreLoading…