CVEs published in March 2021
1,535 vulnerabilities, 180 critical, 24 exploited.
- ssri project ssri, oracle graalvm, siemens sinec infrastructure network services +2 moreRegular Expression Denial of Service (ReDoS)7.5 High
- eclipse theia, the eclipse foundation eclipse theia +1 moreCommand Injection in @theia/messages6.1 Medium
- eclipse theia, the eclipse foundation eclipse theia +1 moreImproper Neutralization of Input in Theia console6.1 Medium
- is-svg project is-svgRegular Expression Denial of Service (ReDoS)7.5 High
- dell supportassist client, supportassist client promanage, supportassist for business pcs +1 more +3 moreDell SupportAssist Client for Consumer PCs versions 3.7.x, 3.6.x, 3.4.x, 3.3.x, Dell...7.8 High
- gnu gnutls, fedoraproject fedora, redhat enterprise linux +3 more +5 moreA flaw was found in gnutls. A use after free issue in client_send_params in lib/ext...9.8 Critical
- gnu gnutls, fedoraproject fedora, netapp active iq unified manager +5 more +7 moreA flaw was found in gnutls. A use after free issue in client sending key_share extension may lead...9.8 Critical
- adobe photoshopAdobe Photoshop Memory Corruption7.8 High
- adobe creative cloud desktop application, creative cloud (desktop component) +1 moreAdobe Creative Cloud Unquoted Service Path in CCXProcess6.5 Medium
- adobe animateAdobe Animate out-of-bounds read vulnerability7.1 High
- adobe framemakerAdobe FrameMaker Out-of-Bounds Read Vulnerability Could Lead To Remote Code Execution7.8 High
- adobe connectAdobe Connect CSV injection via export feature could lead to code execution7.8 High
- adobe animateAdobe Animate memory corruption vulnerability7.8 High
- adobe photoshop, photoshop 2020 +1 moreAdobe Photoshop CoolType arbitrary stack manipulation in Type 1/Multiple Master7.8 High
- adobe animateAdobe Animate out-of-bounds read vulnerability7.1 High
- adobe connectAdobe Connect Reflected Cross-site Scripting via query parameter6.1 Medium
- adobe animateAdobe Animate out-of-bounds read vulnerability7.1 High
- adobe creative cloud desktop application, creative cloud (desktop component) +1 moreAdobe Creative Cloud installer arbitrary file overwrite vulnerability6.1 Medium
- adobe animateAdobe Animate heap-based overflow vulnerability7.8 High
- adobe creative cloud desktop application, creative cloud (desktop component) +1 moreAdobe Creative Cloud Privilege Escalation Vulnerability7.8 High
- adobe animateAdobe Animate out-of-bounds read vulnerability7.1 High
- adobe animateAdobe Animate out-of-bounds read vulnerability7.1 High
- adobe connectAdobe Connect Reflected Cross-site Scripting via archiveOffset parameter6.1 Medium
- zte zxone 19700 firmware, zxone 8700 firmware, zxone 9700 firmware +2 moreSome ZTE products have an input verification vulnerability in the diagnostic function interface....2.3 Low
- xwiki, xwiki xwiki-platform +1 moreIt's possible to execute anything with the rights of the author of a macro which uses the {{wikimacrocontent}} macro7.7 High
- mcollina msgpack5Prototype poisoning6.7 Medium
- suse s390-tools, linux enterprise server 12-sp5, linux enterprise server 15-sp2 +2 moreLocal DoS of VM live migration due to use of static tmp files in detach_disks.sh in s390-tools3.3 Low
- ibm datapower gatewayIBM DataPower Gateway 10.0.0.0 through 10.0.1.0 uses weaker than expected cryptographic...5.9 Medium
- elementary switchboard-plug-bluetooth, switchboard bluetooth plug, fedoraproject fedora +2 moreIncorrect Authorization in switchboard-plug-bluetooth6.1 Medium
- adaltas printfRegular Expression Denial of Service (ReDoS)5.3 Medium
- pupnp project pupnpA stack overflow in pupnp 1.16.1 can cause the denial of service through the Parser_parseDocument...7.5 High
- synology diskstation manager, diskstation manager (dsm) +1 moreUse After Free vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM)...9.8 Critical
- synology diskstation manager, diskstation manager (dsm) +1 moreRace Condition within a Thread vulnerability in iscsi_snapshot_comm_core in Synology DiskStation...9.8 Critical
- synology diskstation manager, diskstation manager (dsm) +1 moreOut-of-bounds Read vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM...9.8 Critical
glib2.0Mageia,mingw-glib2Mageia +1 moreUpdated glib2.0 packages fix security vulnerabilitiesNo score- red hat ansible, redhat ansible engine, debian linux +2 more +4 moreAnsible Exposes Sensitive Information7.5 High
- red hat ansible, oracle virtualization, redhat ansible tower +5 more +7 moreInsertion of Sensitive Information into Log File in ansible5.5 Medium
- red hat ansibleInsertion of Sensitive Information into Log File in ansible5.5 Medium
- red hat ansible, fedoraproject fedora, redhat ansible tower +2 moreInsertion of Sensitive Information into Log File in ansible5.5 Medium
- redhat cephA flaw was found in ceph-dashboard. The JSON Web Token (JWT) used for user authentication is...5.4 Medium
- ntt technocross corporation installer of magicconnect client program, ntt-tx magicconnect +1 moreUntrusted search path vulnerability in Installer of MagicConnect Client program distributed...7.8 High
- rabbitmq jms clientUnsafe Deserialization that can Result in Code Execution9.8 Critical
- leptonica, debian linux, fedoraproject fedora +2 moreLeptonica before 1.80.0 allows a heap-based buffer over-read in pixFewColorsOctcubeQuantMixed in...7.5 High
- leptonica, fedoraproject fedora +1 moreLeptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to...7.5 High
serenityOSS-FuzzUNKNOWN READ in _finiNo score- leptonica, debian linux, fedoraproject fedora +2 moreLeptonica before 1.80.0 allows a heap-based buffer over-read in rasteropGeneralLow, related to...7.5 High
- xmldom, debian linux +1 moreMisinterpretation of malicious XML input4.3 Medium
- leptonica, debian linux, fedoraproject fedora +2 moreLeptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c.7.5 High
- dlink dir-841 firmware/jsonrpc on D-Link DIR-841 3.03 and 3.04 devices allows authenticated command injection via ping,...8.0 High
- quadbase espressreports esAn issue was discovered in Quadbase EspressReports ES 7 Update 9. An unauthenticated attacker can...8.8 High
- Show moreLoading…