CVEs published in March 2021
1,535 vulnerabilities, 180 critical, 24 exploited.
- siemens ruggedcom rm1224, scalance m-800, scalance s615 +5 more +7 moreA vulnerability has been identified in RUGGEDCOM RM1224 (V6.3), SCALANCE M-800 (V6.3), SCALANCE...7.5 High
- siemens simatic s7-plcsim v5.4, simatic s7-plcsim +1 moreA vulnerability has been identified in SIMATIC S7-PLCSIM V5.4 (All versions). An attacker with...5.5 Medium
- siemens simatic s7-plcsim v5.4, simatic s7-plcsim +1 moreA vulnerability has been identified in SIMATIC S7-PLCSIM V5.4 (All versions). An attacker with...5.5 Medium
- siemens simatic s7-plcsim v5.4, simatic s7-plcsim +1 moreA vulnerability has been identified in SIMATIC S7-PLCSIM V5.4 (All versions). An attacker with...5.5 Medium
- mendix forgot password, siemens mendix forgot password appstore module +1 moreA vulnerability has been identified in Mendix Forgot Password Appstore module (All Versions < V3...8.8 High
- siemens ruggedcom rm1224, scalance m-800, scalance s615 +23 more +25 moreA vulnerability has been identified in RUGGEDCOM RM1224 (All versions >= V4.3), SCALANCE M-800 ...8.8 High
- siemens solid edge se2020, solid edge se2021, solid edge +2 moreA vulnerability has been identified in Solid Edge SE2020 (All Versions < SE2020MP13), Solid Edge...5.5 Medium
- siemens solid edge se2020, solid edge se2021, solid edge +2 moreA vulnerability has been identified in Solid Edge SE2020 (All Versions < SE2020MP13), Solid Edge...7.8 High
- siemens simatic mv400 family, simatic mv420 sr-b body firmware, simatic mv420 sr-b firmware +5 more +7 moreA vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6). The...7.5 High
- siemens sinema remote connect serverA vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0)....8.8 High
- siemens sinema remote connect serverA vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0). The...8.8 High
- siemens logo! 12/24rce, logo! 12/24rceo, logo! 230rce +14 more +16 moreA vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions). The...5.5 Medium
- mybbCross-site Scripting (XSS) vulnerability in MyBB before 1.8.26 via Nested Auto URL when parsing messages.6.1 Medium
- tykDirectory Traversal3.3 Low
- shopxoShopXO RCE Vulnerability9.8 Critical
- zzzcms zzzphpA SQL injection vulnerability in zzzphp v1.8.0 through /form/index.php?module=getjson may lead to...9.8 Critical
- ps-kill project ps-killArbitrary Command Injection5.6 Medium
- kill-process-by-name project kill-process-by-nameArbitrary Command Injection5.6 Medium
- openmaintMultiple stored cross-site scripting (XSS) vulnerabilities in openMAINT 2.1-3.3-b allow remote...6.1 Medium
- ibm api connectIBM API Connect 10.0.0.0, and 2018.4.1.0 through 2018.4.1.13 does not restrict member...6.4 Medium
- ibm security guardiumIBM Security Guardium 11.2 performs an operation at a privilege level that is higher than the...5.8 Medium
- cloudera data engineeringIn Cloudera Data Engineering (CDE) 1.3.0, JWT authentication tokens are exposed to administrators...6.5 Medium
- argoproj argo cdAn issue was discovered in Argo CD before 1.8.4. Browser XSS protection is not activated due to the missing XSS protection header.6.1 Medium
- argoproj argo cdAn issue was discovered in Argo CD before 1.8.4. Accessing the endpoint /api/version leaks internal information for the system, and this endpoint is not protected with authentication.7.5 High
- ssh tectia client, tectia connectsecure, tectia server +2 moreSSH Tectia Client and Server before 6.4.19 on Windows allow local privilege escalation....7.8 High
- ssh tectia client, tectia connectsecure, tectia server +2 moreSSH Tectia Client and Server before 6.4.19 on Windows have weak key generation. ConnectSecure on...8.8 High
- ssh tectia client, tectia connectsecure, tectia server +2 moreSSH Tectia Client and Server before 6.4.19 on Windows allow local privilege escalation in...7.0 High
- xilinx zynq-7000 firmware, zynq-7000s firmware +1 moreWhen booting a Zync-7000 SOC device from nand flash memory, the nand driver in the ROM does not...6.8 Medium
- [unknown] pki-core, dogtagpki, fedoraproject fedora +2 more +4 moreA flaw was found in pki-core. An attacker who has successfully compromised a key could use this...8.1 High
- domainmodDomainMOD domainmod-v4.15.0 is affected by an insufficient session expiration vulnerability. On...9.8 Critical
- apache openmeetingsApache OpenMeetings: bandwidth can be overloaded with public web service7.5 High
- myvestacp myvesta, vestacp vesta control panel +1 moreweb/upload/UploadHandler.php in Vesta Control Panel (aka VestaCP) through 0.9.8-27 and myVesta...8.8 High
- giteaCross-site Scripting in Gitea3.7 Low
- debian courier-authlib, linux +1 moreThe Debian courier-authlib package before 0.71.1-2 for Courier Authentication Library creates a ...7.5 High
- linux kernel, fedoraproject fedora, netapp cloud backup +1 more +3 moreAn issue was discovered in the Linux kernel through 5.11.6. fastrpc_internal_invoke in drivers...7.8 High
- linux kernelA flaw was found in the Linux kernel. A denial of service problem is identified if an extent tree...5.5 Medium
- python urllib3, fedoraproject fedora, oracle peoplesoft enterprise peopletools +3 more +5 moreUsing default SSLContext for HTTPS requests in an HTTPS proxy doesn't verify certificate hostname for proxy connection6.5 Medium
flatbuffersOSS-FuzzHeap-buffer-overflow in flatbuffers::EscapeStringNo scoreca-certificatesDebianca-certificates - whitelist Symantec CANo scoremupdfDebianmupdf - regression updateNo score- tt-rss tiny tiny rssThe auth_internal plugin in Tiny Tiny RSS (aka tt-rss) before 2021-03-12 allows an attacker to...7.5 High
- spdk storage performance development kitAn issue was discovered in Storage Performance Development Kit (SPDK) before 20.01.01. If a PDU...7.5 High
- zohocorp manageengine servicedesk plusZoho ManageEngine ServiceDesk Plus before 11134 allows an Authentication Bypass (only during SAML...8.8 High
- sonicwall sma100, sma100 firmware +1 moreA post-authenticated vulnerability in SonicWall SMA100 allows an attacker to export the...4.9 Medium
- sonicwall sma100, sma100 firmware +1 moreA post-authenticated command injection vulnerability in SonicWall SMA100 allows an authenticated...8.8 High
shopware/platformPackagistAuthenticated remote code executionNo score- runzero platform, shopware +1 morePotential Session Hijacking in Shopware5.9 Medium
highcharts-export-servernpmVulnerability allowing for reading internal HTTP resourcesNo scorenobelprizeparsernpmCode injection in nobelprizeparserNo score@solid/identity-token-verifiernpmVerification flaw in Solid identity-token-verifierNo score- Show moreLoading…