CVEs published in March 2021
1,535 vulnerabilities, 180 critical, 24 exploited.
- qemu, debian linux, fedoraproject fedora +2 moreA use-after-free flaw was found in the MegaRAID emulator of QEMU. This issue occurs while...3.2 Low
- nanopbInvalid free() call in Nanopb7.1 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreLinux kernel bpf verifier incorrect mod32 truncation7.8 High
- tibco api exchange gateway, api exchange gateway distribution, tibco software inc. api exchange gateway distribution for tibco silver fabric +2 moreTIBCO API Exchange Gateway Clickjack Vulnerability9.8 Critical
- keycloakCode injection in keycloak7.5 High
- linux kernelA denial of service vulnerability was found in n_tty_receive_char_special in drivers/tty/n_tty.c...5.5 Medium
- npmjs hosted-git-info, siemens sinec infrastructure network services +1 moreRegular Expression Denial of Service (ReDoS)5.3 Medium
- vivo appstoreAppStore Remote Download and Installation Vulnerability8.2 High
- mcafee data loss prevention, mcafee,llc mcafee data loss prevention (dlp) endpoint for windows +1 morePrivilege escalation in McAfee DLP Endpoint for Windows7.8 High
- openmicroscopy omero.web, ome omero-web +1 moreOpen Redirect in OMERO.web4.8 Medium
- openmicroscopy omero.web, ome omero-web +1 moreInformation Exposure in OMERO.web6.4 Medium
- csphere clansphereClansphere CMS 2011.4 allows unauthenticated reflected XSS via "module" parameter.6.1 Medium
- csphere clansphereClansphere CMS 2011.4 allows unauthenticated reflected XSS via "language" parameter.6.1 Medium
- boonex dolphinDolphin CMS 7.4.2 is vulnerable to stored XSS via the Page Builder "width" parameter.4.8 Medium
- dynpgA cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allows remote attackers to...4.8 Medium
- dynpgA cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allows remote attackers to...4.8 Medium
- dynpgA cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allow remote attacker to inject...4.8 Medium
- dynpgA cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allows remote attackers to...4.8 Medium
- dynpgA cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allows remote attackers to...4.8 Medium
- dynpgA cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allows remote attackers to...4.8 Medium
- gulpjs copy-propsPrototype Pollution7.3 High
- netgear rbr850 firmwareNETGEAR RBR850 devices before 3.2.10.11 are affected by authentication bypass.9.6 Critical
- netgear rbk852 firmware, rbk853 firmware, rbk854 firmware +2 more +4 moreCertain NETGEAR devices are affected by authentication bypass. This affects RBK852 before 3.2.17...9.6 Critical
- netgear rbk752 firmware, rbk753 firmware, rbk753s firmware +10 more +12 moreCertain NETGEAR devices are affected by authentication bypass. This affects RBW30 before 2.6.2.2,...9.6 Critical
- netgear wnr2000v5 firmware, xr450 firmware, xr500 firmware +2 moreCertain NETGEAR devices are affected by command injection by an authenticated user. This affects...7.3 High
- netgear rbk852 firmware, rbk853 firmware, rbk854 firmware +2 more +4 moreCertain NETGEAR devices are affected by command injection by an authenticated user. This affects...8.4 High
- netgear rbk852 firmware, rbk853 firmware, rbk854 firmware +8 more +10 moreCertain NETGEAR devices are affected by command injection by an authenticated user. This affects...9.6 Critical
- netgear rbk852 firmware, rbk853 firmware, rbk854 firmware +2 more +4 moreCertain NETGEAR devices are affected by command injection by an authenticated user. This affects...8.4 High
- netgear mk62 firmware, mr60 firmware, ms60 firmware +10 more +12 moreCertain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user....7.6 High
- netgear rbk752 firmware, rbk753 firmware, rbk753s firmware +9 more +11 moreCertain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user....8.4 High
- netgear rbk752 firmware, rbk753 firmware, rbk753s firmware +9 more +11 moreCertain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user....8.4 High
- netgear rbk852 firmware, rbk853 firmware, rbk854 firmware +2 more +4 moreCertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This...9.6 Critical
- netgear rbk752 firmware, rbk753 firmware, rbk753s firmware +10 more +12 moreCertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This...9.6 Critical
- netgear rbk752 firmware, rbk753 firmware, rbk753s firmware +8 more +10 moreCertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This...9.6 Critical
- netgear rbk852 firmware, rbk853 firmware, rbk854 firmware +2 more +4 moreCertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This...9.6 Critical
- netgear cbr40 firmware, r6900p firmware, r7000 firmware +13 more +15 moreCertain NETGEAR devices are affected by password reset by an unauthenticated attacker. This...8.1 High
- netgear rbk752 firmware, rbk753 firmware, rbk753s firmware +9 more +11 moreCertain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated...8.4 High
- netgear rbk752 firmware, rbk753 firmware, rbk753s firmware +10 more +12 moreCertain NETGEAR devices are affected by disclosure of sensitive information. This affects RBW30...9.6 Critical
- netgear ac2100 firmware, ac2400 firmware, ac2600 firmware +77 more +79 moreCertain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects...9.9 Critical
- typo3, typo3 typo3.cms +1 moreCross-Site Scripting in Content Preview (CType menu)5.4 Medium
- typo3, typo3 typo3.cms +1 moreDenial of Service in Page Error Handling5.9 Medium
- typo3, typo3 typo3.cms +1 moreCleartext storage of session identifier5.9 Medium
- typo3, typo3 typo3.cms +1 moreCross-Site Scripting in Content Preview5.4 Medium
- typo3, typo3 typo3.cms +1 moreUnrestricted File Upload in Form Framework8.6 High
- typo3, typo3 typo3.cms +1 moreBroken Access Control in Form Framework8.3 High
- typo3, typo3 typo3.cms +1 moreImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in typo3/cms-form5.4 Medium
- typo3, typo3 typo3.cms +1 moreOpen Redirection in Login Handling4.7 Medium
- sqlite, oracle communications network charging and control, enterprise manager for oracle database +7 more +9 moreA flaw was found in SQLite's SELECT query functionality (src/select.c). This flaw allows an...5.5 Medium
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to an Arbitrary Code Execution attack5.4 Medium
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to an Arbitrary Code Execution attack5.3 Medium
- Show moreLoading…