CVEs published in March 2021
1,535 vulnerabilities, 180 critical, 24 exploited.
selinuxOSS-FuzzHeap-use-after-free in cil_reset_classpermissionNo scorelibredwgOSS-FuzzHeap-buffer-overflow in encode_3dsolidNo scoretesseract-ocrOSS-FuzzContainer-overflow in tesseract::ExtractResults16No score- squid-cache squid, debian linux, fedoraproject fedora +1 more +3 moreImportant: squid:4 security update8.6 High
- ericcornelissen shescapeNull characters not escaped in shescape6.3 Medium
- westerndigital armorlockThe iOS and macOS apps before 1.4.1 for the Western Digital G-Technology ArmorLock NVMe SSD store...6.5 Medium
- eslint-fixer project eslint-fixerCommand injection in eslint-fixer9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreAn issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c has an off-by...6.0 Medium
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreAn issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c performs...4.7 Medium
- advantech webaccess\/scadaWebAccess/SCADA Versions 9.0 and prior is vulnerable to cross-site scripting, which may allow an...6.1 Medium
- qemu, debian linux, fedoraproject fedora +1 more +3 moreA potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in...6.0 Medium
- grafana, netapp e-series performance analyzer +1 moreDenial of service in Grafana7.5 High
- redashRedash 8.0.0 is affected by LDAP Injection. There is an authentication bypass and information...5.3 Medium
- zohocorp manageengine desktop centralThe MPS Agent in Zoho ManageEngine Desktop Central MSP build MSP build 10.0.486 is vulnerable to...7.8 High
- softaculousSoftaculous before 5.5.7 is affected by a code execution vulnerability because of External...7.8 High
- jetbrains phpstormIn JetBrains PhpStorm before 2020.3, source code could be added to debug logs.5.3 Medium
- mediaarea mediainfo, fedoraproject fedora +1 moreMediainfo before version 20.08 has a heap buffer overflow vulnerability via MediaInfoLib:...7.5 High
- redhat 3scale api managementA flaw was found in 3scale’s APIcast gateway that enabled the TLS 1.0 protocol. An attacker could...7.5 High
- microsoft nbdkitA denial of service vulnerability was discovered in nbdkit. A client issuing a certain sequence...6.5 Medium
- microsoft nbdkit, redhat enterprise linux, enterprise linux server +1 more +3 moreA denial of service vulnerability was discovered in nbdkit 1.12.7, 1.14.1 and 1.15.1. An attacker...3.7 Low
- acexy wireless-n wifi repeater project wireless-n wifi repeater firmwareStored XSS on Acexy (BoyaMicro) Wireless-N WiFi Repeater 28.08.06.1 version 1.0 devices can occur...6.1 Medium
- cisco small business rv series router firmware, rv132w firmware, rv134w firmware +2 moreCisco Small Business RV132W and RV134W Routers Management Interface Remote Command Execution and Denial of Service Vulnerability7.2 High
- project quay quayA vulnerability was found in the Quay web application. Sessions in the Quay web application never...4.1 Medium
- johnsoncontrols exacqvision web service, johnson controls exacqvision web service version 20.12.2.0 and prior +1 moreexacqVision Web Services - Information Exposure5.3 Medium
- rockwellautomation factorytalk services platformIn Rockwell Automation FactoryTalk Services Platform Versions 6.10.00 and 6.11.00, there is an...10.0 Critical
- requarks wiki, wiki.js +1 moreXSS in Wiki.js7.6 High
- rockwellautomation drivetools sp, drivetools add-on profiles +1 moreRockwell Automation DriveTools SP v5.13 and below and Drives AOP v4.12 and below both contain a...7.8 High
- utimaco block-safe firmware, cryptoserver cp5 firmware, cryptoserver cp5 vs-nfd firmware +3 more +5 moreMultiple files and folders in Utimaco SecurityServer 4.20.0.4 and 4.31.1.0. are installed with...7.8 High
- seeddmsSeedDMS 5.1.x is affected by cross-site request forgery (CSRF) in out.EditFolder.php.4.3 Medium
- seeddmsSeedDMS 5.1.x is affected by cross-site request forgery (CSRF) in out.EditDocument.php.4.3 Medium
- concretecms concrete cmsConcrete CMS Cross-site Scripting via Survey Blocks5.4 Medium
- swiftformat project swiftformatThe unofficial SwiftFormat extension before 1.3.7 for Visual Studio Code allows remote attackers...7.8 High
- apple-swift-format project apple-swift-formatThe unofficial apple/swift-format extension before 1.1.2 for Visual Studio Code allows remote...7.8 High
- increments qiita\Cross-Site Scripting in Qiita-Markdown6.1 Medium
- shellcheck project shellcheckThe unofficial ShellCheck extension before 0.13.4 for Visual Studio Code mishandles shellcheck...9.8 Critical
- swift development environment project development environmentThe unofficial Swift Development Environment extension before 2.12.1 for Visual Studio Code...7.8 High
- swiftlint project swiftlintThe unofficial SwiftLint extension before 1.4.5 for Visual Studio Code allows remote attackers to...7.8 High
- unknown modern events calendar liteModern Events Calendar Lite < 5.16.6 - Authenticated SQL Injection8.8 High
- inspireui mstore api, mstore api +1 moreMStore API < 3.2.0 - Authentication Bypass With Sign In With Apple9.8 Critical
- unknown modern events calendar liteModern Events Calendar Lite < 5.16.5 - Authenticated Stored Cross-Site Scripting (XSS)5.4 Medium
- unknown modern events calendar liteModern Events Calendar Lite < 5.16.5 - Unauthenticated Events Export7.5 High
- unknown modern events calendar liteModern Events Calendar Lite < 5.16.5 - Authenticated Arbitrary File Upload leading to RCE7.2 High
- ciphercoin contact form 7 database addonContact Form 7 Database Addon < 1.2.5.6 - CSV Injection7.8 High
- accesspressthemes accesspress social iconsAccessPress Social Icons < 1.8.1 - Authenticated SQL Injection8.8 High
- unknown 301 redirects - easy redirect manager, webfactoryltd 301 redirects +1 more301 Redirects - Easy Redirect Manager < 2.51 - Authenticated SQL Injection7.2 High
- sigmaplugin advanced database cleanerAdvanced Database Cleaner < 3.0.2 - Authenticated SQL injection7.2 High
- connekthq ajax load moreAjax Load More < 5.3.2 - Authenticated SQL Injection7.2 High
- 10web photo gallery by 10web, photo gallery +1 morePhoto Gallery by 10Web < 1.5.55 - Unauthenticated SQL Injection9.8 Critical
- ajdg adrotateAdRotate < 5.8.4 - Authenticated SQL Injection5.5 Medium
- adenion blog2social, pr-gateway blog2social: social media auto post & scheduler +1 moreBlog2Social: Social Media Auto Post & Scheduler < 6.3.1 - Authenticated SQL Injection8.8 High
- Show moreLoading…