CVEs published in March 2021
1,535 vulnerabilities, 180 critical, 24 exploited.
- windriver vxworks, siemens sgt-100 firmware, sgt-200 firmware +5 more +7 more** UNSUPPORTED WHEN ASSIGNED ** A DNS client stack-based buffer overflow in ipdnsc_decode_name()...9.8 Critical
- camunda modeler** DISPUTED ** Camunda Modeler (aka camunda-modeler) through 4.6.0 allows arbitrary file access....9.1 Critical
- quadbase espressreports esAn issue was discovered in Quadbase EspressReports ES 7 Update 9. It allows CSRF, whereby an...8.8 High
- gnome glib, broadcom brocade fabric operating system firmware, debian linux +4 more +6 moreAn issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with...5.3 Medium
- schneider-electric interactive graphical scada systemA CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...7.8 High
- schneider-electric interactive graphical scada systemA CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...7.8 High
- schneider-electric interactive graphical scada systemA CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...7.8 High
- leptonica, debian linux, fedoraproject fedora +2 moreLeptonica before 1.80.0 allows a denial of service (application crash) via an incorrect left...7.5 High
- schneider-electric interactive graphical scada systemA CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...7.8 High
- schneider-electric ion7650 firmware, powerlogic ion7300 firmware, powerlogic ion7550 firmware +8 more +10 moreA CWE-119:Improper restriction of operations within the bounds of a memory buffer vulnerability...7.5 High
- schneider-electric powerlogic ion7400 firmware, powerlogic ion9000 firmware, powerlogic pm8000 firmware +2 moreA CWE-119:Improper restriction of operations within the bounds of a memory buffer vulnerability...9.8 Critical
- linux kernel, redhat enterprise linux +1 moreA race condition was found in the Linux kernels implementation of the floppy disk drive...6.4 Medium
- fivestarplugins five star restaurant menuThe food-and-drink-menu plugin through 2.2.0 for WordPress allows remote attackers to execute...9.8 Critical
- bloomreach experience managerAn issue was discovered in Bloomreach Experience Manager (brXM) 4.1.0 through 14.2.2. It allows...6.5 Medium
- bloomreach experience managerAn issue was discovered in Bloomreach Experience Manager (brXM) 4.1.0 through 14.2.2. It allows...5.4 Medium
- bloomreach experience managerAn issue was discovered in Bloomreach Experience Manager (brXM) 4.1.0 through 14.2.2. It allows...7.2 High
- ibexa ez platform kernelDuplicate Advisory: User account enumeration in eZ Publish Ibexa Kernel5.3 Medium
ezsystems/ezplatform-restPackagist/user/sessions endpoint allows detecting valid accountsNo score- progress telerik ui for asp.net ajaxAn issue was discovered in Progress Telerik UI for ASP.NET AJAX 2021.1.224. It allows...9.8 Critical
- impresscmsCross-site scripting (XSS)5.4 Medium
- batflatCross-site scripting (XSS) vulnerability in Navigation in Batflat CMS 1.3.6 allows remote...5.4 Medium
- batflatCross-site scripting (XSS) vulnerability in Snippets in Batflat CMS 1.3.6 allows remote attackers...5.4 Medium
- batflatCross-site scripting (XSS) vulnerability in Galleries in Batflat CMS 1.3.6 allows remote...5.4 Medium
- cszcms csz cmsCSZ CMS 1.2.9 is affected by a cross-site scripting (XSS) vulnerability in multiple pages through...5.4 Medium
- dlink dir-3060 firmwareprog.cgi on D-Link DIR-3060 devices before 1.11b04 HF2 allows remote authenticated users to...8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +25 more +27 moreWindows Win32k Elevation of Privilege Vulnerability7.8 High
- microsoft sharepoint server, business productivity servers, business productivity servers 2010 service pack 2 +4 more +6 moreMicrosoft SharePoint Server Remote Code Execution Vulnerability8.8 High
- microsoft azure container instance, azure kubernetes service, azure service fabric +3 more +5 moreAzure Virtual Machine Information Disclosure Vulnerability6.8 Medium
- microsoft azure sphereAzure Sphere Unsigned Code Execution Vulnerability6.2 Medium
- microsoft windows 10, windows 10 version 2004, windows 10 version 20h2 +3 more +5 moreWindows 10 Update Assistant Elevation of Privilege Vulnerability7.3 High
- microsoft windows admin centerWindows Admin Center Security Feature Bypass Vulnerability4.3 Medium
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2008 service pack 2 +13 more +15 moreWindows DNS Server Denial of Service Vulnerability7.5 High
- microsoft hevc video extensions, high efficiency video coding +1 moreHEVC Video Extensions Remote Code Execution Vulnerability7.8 High
- microsoft hevc video extensions, high efficiency video coding +1 moreHEVC Video Extensions Remote Code Execution Vulnerability7.8 High
- microsoft visual studio codeVisual Studio Code Remote Code Execution Vulnerability7.8 High
- microsoft office, office 2010 service pack 2, office 2013 service pack 1 +1 more +3 moreMicrosoft Office Remote Code Execution Vulnerability7.6 High
- microsoft 365 apps, 365 apps for enterprise +1 moreMicrosoft Office ClickToRun Remote Code Execution Vulnerability7.8 High
- microsoft office, 365 apps, excel +12 more +14 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft powerpoint, 365 apps, 365 apps for enterprise +5 more +7 moreMicrosoft PowerPoint Remote Code Execution Vulnerability7.8 High
- microsoft visio, 365 apps, 365 apps for enterprise +5 more +7 moreMicrosoft Visio Security Feature Bypass Vulnerability7.0 High
- microsoft azure sphereAzure Sphere Unsigned Code Execution Vulnerability9.3 Critical
- microsoft eslint, visual studio code eslint extension +1 moreVisual Studio Code ESLint Extension Remote Code Execution Vulnerability7.8 High
- microsoft quantum development kit for visual studio code, quantum development kit +1 moreQuantum Development Kit for Visual Studio Code Remote Code Execution Vulnerability7.8 High
- microsoft remote development, visual studio code remote - containers extension +1 moreRemote Development Extension for Visual Studio Code Remote Code Execution Vulnerability7.8 High
- microsoft maven for java, visual studio code - java extension pack +1 moreVisual Studio Code Java Extension Pack Remote Code Execution Vulnerability7.8 High
- microsoft internet explorer, internet explorer 11 +1 moreInternet Explorer Remote Code Execution Vulnerability8.8 High
- microsoft excel, 365 apps, 365 apps for enterprise +12 more +14 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft excel, 365 apps, 365 apps for enterprise +8 more +10 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft sharepoint server, sharepoint enterprise server 2016, sharepoint server 2019 +1 more +3 moreMicrosoft SharePoint Server Information Disclosure Vulnerability5.3 Medium
- microsoft hevc video extensions, high efficiency video coding +1 moreHEVC Video Extensions Remote Code Execution Vulnerability7.8 High
- Show moreLoading…