CVEs published in March 2021
1,535 vulnerabilities, 180 critical, 24 exploited.
- openwrtapplications/luci-app-ddns/luasrc/model/cbi/ddns/detail.lua in the DDNS package for OpenWrt 19.07...8.8 High
- lxml, debian linux, fedoraproject fedora +2 more +4 morelxml vulnerable to Cross-Site Scripting6.1 Medium
- c\/c\+\+ advanced lint project advanced lintThe unofficial C/C++ Advanced Lint extension before 1.9.0 for Visual Studio Code allows attackers...7.8 High
- bit project bitIn Chris Walz bit before 1.0.5 on Windows, attackers can run arbitrary code via a .exe file in a...7.8 High
libredwgOSS-FuzzHeap-use-after-free in dxf_objects_readNo scoreluaOSS-FuzzHeap-buffer-overflow in luaG_getfunclineNo scoreflatbuffersOSS-FuzzHeap-buffer-overflow in flatbuffers::Table* flatbuffers::GetMutableRoot<flatbuffers::Table>No scorefwupdOSS-FuzzHeap-buffer-overflow in g_array_append_valsNo scorextermDebianxterm - regression updateNo score- linux kernel, fedoraproject fedora, netapp a250 firmware +4 more +6 moreAn issue was discovered in the Linux kernel through 5.11.8. The sound/soc/qcom/sdm845.c soundwire...7.8 High
- debian linux, linux kernel, fedoraproject fedora +2 moreAn issue was discovered in fs/fuse/fuse_i.h in the Linux kernel before 5.11.8. A "stall on CPU"...5.5 Medium
- linux kernel, fedoraproject fedora, netapp a250 firmware +4 more +6 moreAn issue was discovered in fs/io_uring.c in the Linux kernel through 5.11.8. It allows attackers...5.5 Medium
openscOSS-FuzzHeap-buffer-overflow in sc_pkcs15emu_oberthur_add_pubkeyNo score- canonical cloud-initsensitive data exposure in cloud-init logs5.5 Medium
- red hat openshift container platformA flaw was discovered in OpenShift Container Platform 4 where, by default, users with access to...7.2 High
- moodleA vulnerability was found in Moodle 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier...6.1 Medium
- moodleA vulnerability was found in Moodle 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier...6.1 Medium
- schema-inspector, netapp e-series performance analyzer, oncommand insight +2 moreRegular Expression Denial-of-Service in npm schema-inspector7.5 High
- moodleA vulnerability was found in Moodle affection 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and...4.3 Medium
- moodleA vulnerability was found in Moodle affecting 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and...4.3 Medium
- red hat atomic-openshift, redhat openshift, openshift container platform +2 moreA flaw was found in atomic-openshift of openshift-4.2 where the basic-user RABC role in OpenShift...6.3 Medium
- ibexa ez platform kernelDuplicate Advisory: Cross Site Scripting in eZ Platform Ibexa Kernel6.1 Medium
- http-proxy-agent project http-proxy-agent, fedoraproject fedora, redhat enterprise linux +1 more +3 moreResource Exhaustion Denial of Service in http-proxy-agent9.8 Critical
- postgresqlA vulnerability was found in postgresql versions 11.x prior to 11.3. The Windows installer for...7.8 High
- fudforumA cross-site scripting (XSS) issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript...6.1 Medium
- fudforumA cross-site scripting (XSS) issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript...6.1 Medium
- postgresqlA vulnerability was found in postgresql versions 11.x prior to 11.3. The Windows installer for...8.8 High
- tenable nessus agentNessus Agent versions 7.2.0 through 8.2.2 were found to inadvertently capture the IAM role...6.7 Medium
- netapp cloud managerCloud Manager versions prior to 3.9.4 are susceptible to a vulnerability that could allow a...9.1 Critical
- netapp cloud managerCloud Manager versions prior to 3.9.4 are susceptible to a vulnerability which could allow a...7.5 High
- netapp cloud managerCloud Manager versions prior to 3.9.4 contain an insecure Cross-Origin Resource Sharing (CORS)...7.5 High
- ftapiFTAPI 4.0 through 4.10 allows XSS via an SVG document to the Background Image upload feature in...4.8 Medium
- ftapiFTAPI 4.0 - 4.10 allows XSS via a crafted filename to the alternative text hover box in the file...6.1 Medium
- apache pdfbox, fedoraproject fedora, oracle banking corporate lending process management +16 more +18 moreA carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file5.5 Medium
- apache pdfbox, fedoraproject fedora, oracle banking trade finance process management +12 more +14 moreA carefully crafted PDF file can trigger an infinite loop while loading the file5.5 Medium
- minioMITM modification of request bodies in MinIO6.5 Medium
- birb-digital wrongthinkPartial secret key disclosure, improper safety number calculation, & inadequate encryption strength8.1 High
- ibm resilient, soar +1 moreIBM Resilient SOAR 40 and earlier could disclose sensitive information by allowing a user to...3.7 Low
- clamav, netasq project netasq, stormshield network security +2 moreIn Stormshield Network Security (SNS) 1.0 through 4.2.0, the parsing of some malformed files can...5.5 Medium
- kramdown project kramdown, debian linux, fedoraproject fedora +2 moreRemote code execution in Kramdown9.8 Critical
- busybox, debian linux, fedoraproject fedora +2 moredecompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result...7.5 High
- zen-cart zen cartReflected XSS in Zen Cart before 1.5.7a6.1 Medium
- it-recht-kanzleiThe IT-Recht Kanzlei plugin in Zen Cart 1.5.6c (German edition) allows itrk-api.php...9.8 Critical
- compassplus tranzware e-commerce payment gatewayindex.jsp in TranzWare e-Commerce Payment Gateway (TWEC PG) before 3.1.27.5 had a Stored cross...6.1 Medium
- compassplus tranzware e-commerce payment gateway/exec in TranzWare e-Commerce Payment Gateway (TWEC PG) before 3.1.27.5 had a vulnerability in...7.5 High
- compassplus tranzware fimiTranzWare (POI) FIMI before 4.2.20.4.2 allows login_tw.php reflected Cross-Site Scripting (XSS).6.1 Medium
- ovation dynamic contentOvation Dynamic Content 1.10.1 for Elementor allows XSS via the post_title parameter.5.4 Medium
- galeracluster wsrep, mariadb, percona server +1 more +3 moreA remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28,...7.2 High
- mikrotik routeros** DISPUTED ** MikroTik RouterOS 6.47.9 allows remote authenticated ftp users to create or...8.1 High
openscOSS-FuzzHeap-buffer-overflow in sc_pkcs15emu_oberthur_add_pubkeyNo score- Show moreLoading…