CVEs published in March 2021
1,535 vulnerabilities, 180 critical, 24 exploited.
- x-stream xstream, apache activemq, jmeter +14 more +16 moreA Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host6.1 Medium
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos)5.3 Medium
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to an Arbitrary Code Execution attack6.1 Medium
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to an Arbitrary Code Execution attack6.1 Medium
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to a Remote Command Execution attack5.8 Medium
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to an Arbitrary Code Execution attack5.3 Medium
- x-stream xstream, apache activemq, jmeter +12 more +14 moreXStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights5.3 Medium
- x-stream xstream, apache activemq, jmeter +12 more +14 moreA Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host5.3 Medium
- x-stream xstream, apache activemq, jmeter +10 more +12 moreXStream can cause a Denial of Service7.5 High
- open-emr openemrIn OpenEMR, versions 4.2.0 to 6.0.0 are vulnerable to Reflected Cross-Site-Scripting (XSS) due to...6.1 Medium
- open-emr openemrIn OpenEMR, versions 5.0.2 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to...4.8 Medium
- open-emr openemrIn OpenEMR, versions 5.0.2 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to...4.8 Medium
- open-emr openemrIn OpenEMR, versions v2.7.2-rc1 to 6.0.0 are vulnerable to Improper Access Control when creating...6.5 Medium
- open-emr openemrIn OpenEMR, versions 2.7.3-rc1 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due...5.4 Medium
- open-emr openemrIn OpenEMR, versions 5.0.2 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to...4.8 Medium
- huawei manageoneThere is a local privilege escalation vulnerability in some versions of ManageOne. A local...7.8 High
- huawei nip6300 firmware, nip6600 firmware, nip6800 firmware +11 more +13 moreThere is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific...5.3 Medium
- huawei manageoneThere is an improper permission assignment vulnerability in Huawei ManageOne product. Due to...7.2 High
- huawei ips module firmware, ngfw module firmware, nip6600 firmware +4 more +6 moreThere is a denial of service vulnerability in Huawei products. A module cannot deal with specific...7.5 High
- huawei nip6300 firmware, nip6600 firmware, secospace usg6300 firmware +3 more +5 moreThere is an information leakage vulnerability in some huawei products. Due to the properly...4.4 Medium
- huawei usg9500 firmware, usg9520 firmware, usg9560 firmware +1 more +3 moreThere is insecure algorithm vulnerability in Huawei products. A module uses less random input in...7.5 High
- huawei ngfw module firmware, nip6300 firmware, nip6600 firmware +5 more +7 moreThere is a denial of service vulnerability in some huawei products. In specific scenarios, due to...7.5 High
- huawei eudc660 firmwareThe eUDC660 product has a resource management vulnerability. An attacker with high privilege...6.7 Medium
- huawei usg9500, usg9500 firmware +1 moreThere is a vulnerability in some version of USG9500 that the device improperly handles the...6.5 Medium
- sophos connect, connect client +1 moreA malicious website could execute code remotely in Sophos Connect Client before version 2.1.8.8 High
- hpe network orchestratorA potential security vulnerability has been identified in HPE Network Orchestrator (NetO) version...7.5 High
- ibm planning analyticsIBM Planning Analytics 2.0 could be vulnerable to a Server-Side Request Forgery (SSRF) attack by...6.1 Medium
- sap 3d visual enterprise viewerWhen a user opens manipulated Windows Bitmap (.BMP) files received from untrusted sources in SAP...4.3 Medium
- sap 3d visual enterprise viewerWhen a user opens manipulated Autodesk 3D Studio for MS-DOS (.3DS) files received from untrusted...4.3 Medium
- sap 3d visual enterprise viewerWhen a user opens manipulated Portable Document Format (.PDF) files received from untrusted...4.3 Medium
- sap 3d visual enterprise viewerWhen a user opens manipulated Graphics Interchange Format (.GIF) files received from untrusted...4.3 Medium
- debian linux, linux kernel, fedoraproject fedora +4 more +6 moreIn intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c in the Linux kernel through 5.11.8 on...5.5 Medium
- linux kernel, fedoraproject fedora, netapp cloud backup +2 more +4 moreIn drivers/pci/hotplug/rpadlpar_sysfs.c in the Linux kernel through 5.11.8, the RPA PCI Hotplug...6.7 Medium
- gnu punbbAn issue was discovered in PunBB before 1.4.6. An XSS vulnerability in the [email] BBcode tag...5.4 Medium
- 4homepages 4imagesA cross-site scripting (XSS) vulnerability in the admin login panel in 4images version 1.8 allows...4.8 Medium
- grafanaOne of the usage insights HTTP API endpoints in Grafana Enterprise 6.x before 6.7.6, 7.x before 7...7.5 High
- grafanaThe team sync HTTP API in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x...6.5 Medium
- grafanaThe team sync HTTP API in Grafana Enterprise 7.4.x before 7.4.5 has an Incorrect Access Control...6.5 Medium
- grafanaGrafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4.5 allows a dashboard editor...7.1 High
- crawlerdetect project crawlerdetectRegular Expression Denial of Service (ReDoS)5.3 Medium
- apache ofbizRCE vulnerability in latest Apache OFBiz due to Java serialisation using RMI9.8 Critical
- otrs faq, otrs +1 moreFAQ articles are shown to users without permission3.5 Low
- otrs itsmconfigurationmanagement, otrscisincustomerfrontend +1 moreConfig Items are shown to users without permission3.5 Low
- debian linux, linux kernel, fedoraproject fedora +4 more +6 moreA race condition was discovered in get_old_root in fs/btrfs/ctree.c in the Linux kernel through 5...4.7 Medium
- git-bug project git-bugArbitrary code execution due to an uncontrolled search path for the git binary9.8 Critical
- sass lint project lint** UNSUPPORTED WHEN ASSIGNED ** The unofficial vscode-sass-lint (aka Sass Lint) extension through...8.8 High
- atlassian data center, jira, jira server +1 more +3 moreAffected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers...5.3 Medium
- atlassian data center, jira, jira server +1 more +3 moreAffected versions of Atlassian Jira Server and Data Center allow remote attackers to evade behind...7.2 High
- soplanningSOPlanning before 1.47 has Incorrect Access Control because certain secret key information, and...9.8 Critical
- killport project killportArbitrary Command Injection7.5 High
- Show moreLoading…