CVEs published in March 2021
1,535 vulnerabilities, 180 critical, 24 exploited.
- zyxel lte4506-m606 firmware, lte7460-m608 firmware, wah7706 firmware +2 moreThe Web CGI Script on ZyXEL LTE4506-M606 V1.00(ABDO.2)C0 devices does not require authentication,...9.1 Critical
- symbiote silverstripe queued jobsXSS in CreateQueuedJobTask6.1 Medium
- patchmerge project patchmergePrototype pollution vulnerability in 'patchmerge'9.8 Critical
- pulsesecure psa-5000 firmware, psa-7000 firmware, supermicro x10sl7-f firmware +9 more +11 moreA vulnerability in the BIOS of Pulse Secure (PSA-Series Hardware) models PSA5000 and PSA7000...2.3 Low
- varnish-cache varnish-modules, fedoraproject fedora, varnish-cache varnish-modules klarlack +2 moreVarnish varnish-modules before 0.17.1 allows remote attackers to cause a denial of service ...4.0 Medium
- portainerPortainer 1.24.1 and earlier is affected by incorrect access control that may lead to remote...9.8 Critical
- portainerPortainer 1.24.1 and earlier is affected by an insecure permissions vulnerability that may lead...8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreUse after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in tab groups in Google Chrome prior to 89.0.4389.90 allowed a remote...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in WebRTC in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to...8.8 High
- ibm spectrum scaleIBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 uses an inadequate account...6.2 Medium
- ibm spectrum scaleIBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 could allow a local user with...4.4 Medium
- ibm spectrum scaleIBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 could allow a local user to...4.0 Medium
- apache hiveTiming attack in Cookie signature verification5.9 Medium
c-blosc2OSS-FuzzHeap-use-after-free in ZSTD_freeDDictNo scorekimageformatsOSS-FuzzUse-of-uninitialized-value in void edge_filtering_chroma_internal<unsigned char>No score- tianocore edk ii, edk2 +1 moreA heap overflow in LzmaUefiDecompressGetInfo function in EDK II.6.7 Medium
- tianocore edk ii, edk2 +1 moreAn unlimited recursion in DxeCore in EDK II.7.8 High
- torproject tor, fedoraproject fedora +1 moreTor before 0.4.5.7 allows a remote attacker to cause Tor directory authorities to exit with an...5.3 Medium
- torproject tor, fedoraproject fedora +1 moreTor before 0.4.5.7 allows a remote participant in the Tor directory protocol to exhaust CPU...7.5 High
- expressionengineExpressionEngine before 5.4.2 and 6.x before 6.0.3 allows PHP Code Injection by certain...8.8 High
- moodle, fedoraproject fedora +1 moreMissing permission check in Moodle4.3 Medium
- moodle, fedoraproject fedora +1 moreMoodle Bypass email verification secret when confirming account registration5.3 Medium
- moodle, fedoraproject fedora +1 moreMoodle allowed some users without permission to view other users' full names5.3 Medium
- moodle, fedoraproject fedora +1 moreCross-site scripting (XSS) and Server side request forgery (SSRF) in moodle5.4 Medium
- moodle, fedoraproject fedora +1 moreMoodle contains Stored XSS via ID number user profile field5.4 Medium
- netapp element plug-in for vcenter server, management services for element software and netapp hci, solidfire \& hci management node +1 more +3 moreElement Plug-in for vCenter Server incorporates SpringBoot Framework. SpringBoot Framework...9.8 Critical
- lynx project lynx, debian linux, fedoraproject fedora +2 moreLynx through 2.8.9 mishandles the userinfo subcomponent of a URI, which allows remote attackers...5.3 Medium
- hamilton-medical hamilton-t1 firmwareIn Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, an information disclosure...4.3 Medium
- hamilton-medical hamilton-t1 firmwareIn Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, an XML validation vulnerability...4.3 Medium
- hamilton-medical hamilton-t1 firmwareIn Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, hard-coded credentials in the...5.2 Medium
- gnu grub2If certificates that signed grub are installed into db, grub can be booted directly. It will then...6.4 Medium
- facebook mvfst, proxygen +1 moreA packet of death scenario is possible in mvfst via a specially crafted message during a QUIC...7.5 High
- cryptshare serverA cross-site scripting (XSS) vulnerability on the Delete Personal Data page in Cryptshare Server...6.1 Medium
- mcafee endpoint product removal toolUnquoted service path vulnerability in McAfee Endpoint Product Removal (EPR) Tool prior to 21.2 allows local administrators to execute arbitrary code, with higher-level privileges, via execution from…6.7 Medium
- getgrav grav cmsGrav CMS Cross-Site Request Forgery (CSRF)8.8 High
- getgrav grav cmsGrav CMS Arbitrary File Deletion8.1 High
- getgrav grav cmsGrav CMS Local File Injection5.5 Medium
- quadbase espressdashboardAn issue was discovered in Quadbase EspressReports ES 7 Update 9. An authenticated user is able...8.1 High
- the wireshark foundation wireshark, debian linux, oracle zfs storage appliance +2 moreImproper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code...6.3 Medium
- quadbase espressdashboardAn issue was discovered in Quadbase ExpressDashboard (EDAB) 7 Update 9. It allows CSRF. An...4.3 Medium
- red hat libnbd, redhat enterprise linux +1 moreA flaw was found in libnbd 1.7.3. An assertion failure in nbd_unlocked_opt_go in ilb/opt.c may...2.7 Low
- mydbrmyDBR 5.8.3/4262 is affected by: Cross Site Scripting (XSS). The impact is: execute arbitrary...9.6 Critical
- mybbCross-site Scripting vulnerability in MyBB before 1.8.26 via Custom moderator tools.6.1 Medium
- mybbSQL Injection vulnerability in MyBB before 1.8.26 via User Groups. (issue 3 of 3).7.2 High
- mybbSQL Injection vulnerability in MyBB before 1.8.26 via the Copy Forum feature in Forum Management. (issue 2 of 3).7.2 High
- mybbSQL Injection vulnerability in MyBB before 1.8.26 via poll vote count. (issue 1 of 3).8.8 High
- mybbSQL Injection vulnerablity in MyBB before 1.8.26 via theme properties included in theme XML files.8.8 High
- siemens solid edge se2020, solid edge se2021, solid edge +2 moreA vulnerability has been identified in Solid Edge SE2020 (All Versions < SE2020MP13), Solid Edge...7.8 High
- siemens solid edge se2020, solid edge se2021, solid edge +2 moreA vulnerability has been identified in Solid Edge SE2020 (All Versions < SE2020MP13), Solid Edge...7.8 High
- Show moreLoading…