CVEs published in March 2021
1,535 vulnerabilities, 180 critical, 24 exploited.
- axelerant testimonials widgetTestimonials Widget < 4.0.0 - Multiple Authenticated Stored XSS5.4 Medium
- bompus wp customer reviewsWP Customer Reviews < 3.4.3 - Multiple Unauthenticated and Low Priv Authenticated Stored XSS6.1 Medium
- constant contact forms, constantcontact constant contact forms +1 moreConstant Contact Forms < 1.8.8 - Multiple Authenticated Stored XSS4.8 Medium
- activecampaignActiveCampaign < 8.0.2 - Cross-Site Request Forgery in Settings4.3 Medium
- 10web slider, unknown slider by 10web +1 moreSlider by 10Web < 1.2.36 - Multiple Authenticated SQL Injection8.8 High
- cleantalk anti-spam, drupal anti-spam by cleantalk +1 moreAnti-Spam by CleanTalk < 5.149 - Multiple Authenticated SQL Injections7.2 High
- akbrohi wp google map plugin, weplugins wp maps +1 moreWP Google Map Plugin < 4.1.5 - Authenticated SQL Injection7.2 High
- themify portfolio post, themifyme themify portfolio post +1 moreThemify Portfolio Post < 1.1.6 - Authenticated Stored Cross-Site Scripting5.4 Medium
- spwebguy team membersTeam Members < 5.0.4 - Authenticated Stored Cross-Site Scripting (XSS)5.4 Medium
- blair williams thirstyaffiliates, caseproof thirstyaffiliates affiliate link manager +1 moreThirstyAffiliates < 3.9.3 - Authenticated Stored XSS5.4 Medium
- enviragallery envira gallery, unknown envira gallery lite +1 moreEnvira Gallery Lite < 1.8.3.3 - Authenticated Stored Cross-Site Scripting5.4 Medium
- contact form submissions project form submissions, unknown contact form submissions +1 moreContact Form Submissions < 1.7.1 - Authenticated SQL Injection7.2 High
- terryl wp shieldonWP Shieldon 1.6.3 - Unauthenticated Cross-Site Scripting (XSS)6.1 Medium
- blubrry powerpressPowerPress < 8.3.8 - Authenticated Arbitrary File Upload leading to RCE7.2 High
- wowonderIn WoWonder < 3.1, remote attackers can gain access to the database by exploiting a requests.php...7.5 High
- konghq kong gatewayAn improper access control vulnerability in the JWT plugin in Kong Gateway prior to 2.3.0.0...7.5 High
- zoomZoom through 5.5.4 sometimes allows attackers to read private information on a participant's...4.3 Medium
- faststone image viewerFastStone Image Viewer <= 7.5 is affected by a user mode write access violation at 0x00402d7d,...7.8 High
- faststone image viewerFastStone Image Viewer <= 7.5 is affected by a user mode write access violation near NULL at...7.8 High
- faststone image viewerFastStone Image Viewer <= 7.5 is affected by a user mode write access violation at 0x00402d8a,...7.8 High
- faststone image viewerFastStone Image Viewer <= 7.5 is affected by a user mode write access violation near NULL at...7.8 High
- jenkins libvirt agents, jenkins project libvirt agents plugin +1 moreCSRF vulnerability in Jenkins Libvirt Agents Plugin8.8 High
- jenkins warnings next generation, jenkins project warnings next generation plugin +1 moreMissing permission checks in Jenkins Warnings Next Generation Plugin allow listing workspace contents4.3 Medium
- jenkins cloudbees aws credentials, jenkins project cloudbees aws credentials plugin +1 moreMissing permission checks in Jenkins CloudBees AWS Credentials Plugin allows enumerating credentials IDs4.3 Medium
- jenkins role-based authorization strategy, jenkins project role-based authorization strategy plugin +1 moreIncorrect permission checks in Jenkins Role-based Authorization Strategy Plugin may allow accessing some items4.3 Medium
- jenkins matrix authorization strategy, jenkins project matrix authorization strategy plugin +1 moreIncorrect permission checks in Jenkins Matrix Authorization Strategy Plugin may allow accessing some items6.5 Medium
- faststone image viewerFastStone Image Viewer v.<= 7.5 is affected by a Stack-based Buffer Overflow at 0x005BDF49,...7.8 High
- port-killer project port-killerArbitrary Command Injection7.5 High
- parse duration project durationUncontrolled Resource Consumption in parse_duration7.5 High
- seopanel seo panelA cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject...4.8 Medium
- seopanel seo panelThe "order_col" parameter in archive.php of SEO Panel 4.8.0 is vulnerable to time-based blind SQL...7.2 High
- seopanel seo panelA cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject...4.8 Medium
- seopanel seo panelA cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject...4.8 Medium
- kde discoverlibdiscover/backends/KNSBackend/KNSResource.cpp in KDE Discover before 5.21.3 automatically...7.5 High
- hgiga mailsherlock msr45/ssr45, msr45 isherlock-antispam, msr45 isherlock-user +2 more +4 moreHGiga MailSherlock - SQL Injection-27.0 High
- unisys stealthIn Unisys Stealth (core) before 6.0.025.0, the Keycloak password is stored in a recoverable...7.8 High
- webrtc project webrtcIn github.com/pion/webrtc, failed DTLS certificate verification doesn't stop data channel communication5.3 Medium
- stackstormStackStorm st2 Infinite Loop Condition7.5 High
- stranger studios paid memberships proSQL injection vulnerability in the Paid Memberships Pro versions prior to 2.5.6 allows remote...8.8 High
- m-system co., ltd. dl8 series, m-system dl8-a firmware, dl8-b firmware +3 more +5 moreM-System DL8 series (type A (DL8-A) versions prior to Ver3.0, type B (DL8-B) versions prior to...4.3 Medium
- m-system co., ltd. dl8 series, m-system dl8-a firmware, dl8-b firmware +3 more +5 moreM-System DL8 series (type A (DL8-A) versions prior to Ver3.0, type B (DL8-B) versions prior to...6.5 Medium
- cybozu office, cybozu, inc. cybozu office +1 moreImproper access control vulnerability in Custom App of Cybozu Office 10.0.0 to 10.8.4 allows...4.3 Medium
- cybozu office, cybozu, inc. cybozu office +1 moreImproper access control vulnerability in Cabinet of Cybozu Office 10.0.0 to 10.8.4 allows...4.3 Medium
- cybozu office, cybozu, inc. cybozu office +1 moreImproper access control vulnerability in Bulletin Board of Cybozu Office 10.0.0 to 10.8.4 allows...4.3 Medium
- cybozu office, cybozu, inc. cybozu office +1 moreImproper input validation vulnerability in Custom App of Cybozu Office 10.0.0 to 10.8.4 allows...6.5 Medium
- cybozu office, cybozu, inc. cybozu office +1 moreImproper access control vulnerability in Phone Messages of Cybozu Office 10.0.0 to 10.8.4 allows...4.3 Medium
- cybozu office, cybozu, inc. cybozu office +1 moreCross-site scripting vulnerability in E-mail of Cybozu Office 10.0.0 to 10.8.4 allows remote...6.1 Medium
- cybozu office, cybozu, inc. cybozu office +1 moreCross-site scripting vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.4 allows...6.1 Medium
- cybozu office, cybozu, inc. cybozu office +1 moreCross-site scripting vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.4 allows...6.1 Medium
- cybozu office, cybozu, inc. cybozu office +1 moreImproper access control vulnerability in Workflow of Cybozu Office 10.0.0 to 10.8.4 allows...6.5 Medium
- Show moreLoading…