CVEs published in March 2021
1,535 vulnerabilities, 180 critical, 24 exploited.
- cybozu office, cybozu, inc. cybozu office +1 moreImproper access control vulnerability in Bulletin Board of Cybozu Office 10.0.0 to 10.8.4 allows...4.3 Medium
- cybozu office, cybozu, inc. cybozu office +1 moreImproper access control vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.4 allows an...6.5 Medium
qemuOSS-FuzzUNKNOWN READ in address_space_lookup_regionNo scorefwupdOSS-FuzzUNKNOWN WRITE in g_array_append_valsNo score- shibboleth service provider, debian linux +1 moreShibboleth Service Provider before 3.2.1 allows content injection because template generation...5.3 Medium
- linux kernel, netapp cloud backup, h300e firmware +8 more +10 moreAn out-of-bounds (OOB) memory access flaw was found in x25_bind in net/x25/af_x25.c in the Linux...7.8 High
drupal/facPackagistThe Fast Autocomplete module provides fast IMDB-like suggestions below a text input field. Suggestions are stored as JSON files in the public files folder so that they can be provided to the browser r…No score- advantech spectre rt ert351 firmwareAdvantech Spectre RT ERT351 Versions 5.1.3 and prior has insufficient login authentication...9.8 Critical
- advantech spectre rt ert351 firmwareAdvantech Spectre RT ERT351 Versions 5.1.3 and prior logins and passwords are transmitted in...7.5 High
- advantech spectre rt ert351 firmwareIn Advantech Spectre RT Industrial Routers ERT351 5.1.3 and prior, the affected product does not...6.1 Medium
- fujitsu serverview remote managementFujitsu ServerView Suite iRMC before 9.62F allows XSS. An authenticated attacker can store an XSS...5.4 Medium
- taidii diibearThe Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to obtain...6.8 Medium
- taidii diibearThe Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to obtain...7.8 High
- taidii diibearThe Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to view...5.5 Medium
- ua-parser-js project ua-parser-jsRegular Expression Denial of Service (ReDoS) in ua-parser-js7.5 High
- fluxbbFluxbb 1.5.11 is affected by a denial of service (DoS) vulnerability by sending an extremely long...7.5 High
- pygments, debian linux, fedoraproject fedora +2 morePygments vulnerable to Regular Expression Denial of Service (ReDoS)7.5 High
- eic e-document systemEIC e-document system - Broken Authentication9.8 Critical
- eic e-document systemEIC e-document system - SQL Injection9.8 Critical
- apache ambariIn Apache Ambari versions 2.6.2.2 and earlier, malicious users can construct file names for...7.5 High
- qualcomm, inc. snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, qualcomm apq8009 firmware, apq8053 firmware +18 more +20 moreInteger overflow in boot due to improper length check on arguments received in Snapdragon...6.8 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +379 more +381 moreBuffer overflow can occur in video while playing the non-standard clip in Snapdragon Auto,...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, fsm10055 firmware +178 more +180 morePotential arbitrary memory corruption when the qseecom driver updates ion physical addresses in...6.4 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +129 more +131 morePart of RPM region was not protected from xblSec itself due to improper policy and leads to...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 moreOut of bound write while parsing RTT/TTY packet parsing due to lack of check of buffer size...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 moreOut of bound memory read in Data modem while unpacking data due to lack of offset length check in...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, qualcomm apq8017 firmware, apq8053 firmware +272 more +274 moreBuffer over read while processing MT SMS with maximum length due to improper length check in...9.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 moreUsage of syscall by non-secure entity can allow extraction of secure QTEE diagnostic information...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +129 more +131 moreWhile processing storage SCM commands there is a time of check or time of use window where a...6.4 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8017 firmware, apq8053 firmware +272 more +274 moreDenial of service in baseband when NW configures LTE betaOffset-RI-Index due to lack of data...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 moreHLOS to access EL3 stack canary by just mapping imem region due to Improper access control and...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +367 more +369 moreOut of bound write while parsing SDP string due to missing check on null termination in...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 moreBuffer over-read can happen while parsing received SDP values due to lack of NULL termination...9.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 moreBuffer over-read can happen while parsing received SDP values due to lack of NULL termination...9.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +396 more +398 moreBuffer over-read can happen while parsing received SDP values due to lack of NULL termination...9.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon mobile, qualcomm csrb31024 firmware, pm3003a firmware +111 more +113 moreModem will enter into busy mode in an infinite loop while parsing histogram dimension due to...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +383 more +385 moreBuffer over-read can happen while parsing received SDP values due to lack of NULL termination...9.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +406 more +408 morePotential out of bound read exception when UE receives unusually large number of padding octets...9.1 Critical
- gnome gnome-autoar, fedoraproject fedora +1 moreautoar-extractor.c in GNOME gnome-autoar before 0.3.1, as used by GNOME Shell, Nautilus, and...5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +9 more +11 morertw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c in the Linux kernel through 5...8.8 High
- debian shadow, linux +1 moreThe Debian shadow package before 4.5-1 for Shadow incorrectly lists pts/0 and pts/1 as physical...7.8 High
- redhat openshift builder, openshift container platform +1 moreA privilege escalation flaw was found in OpenShift builder. During build time, credentials outside the build context are automatically mounted into the container image under construction. An OpenShift…8.8 High
- [unknown] redhat-certification, redhat certification +1 moreIt has been discovered in redhat-certification that any unauthorized user may download any file...5.3 Medium
- redhat kubernetes-client, a-mq online, build of quarkus +6 more +8 moreImproper Limitation of a Pathname to a Restricted Directory in Fabric8 Kubernetes Client7.4 High
- nats jwt library, linuxfoundation nats-server +1 morenats-io/jwt not enforcing checking of Import token permissions7.5 High
- online ordering system project ordering systemOnline Ordering System 1.0 is vulnerable to unauthenticated SQL injection through /onlineordering...7.5 High
- online ordering system project ordering systemOnline Ordering System 1.0 is vulnerable to arbitrary file upload through /onlineordering/GPST...9.8 Critical
- vhs project vhsSQL injection in vhs (aka VHS: Fluid ViewHelpers)9.8 Critical
- aimeos project aimeosAimeos Typo3 extension contains Cross-site Scripting vulnerability5.4 Medium
freeradius-serveropenSUSESecurity update for freeradius-serverNo score- Show moreLoading…