CVEs published in March 2021
1,535 vulnerabilities, 180 critical, 24 exploited.
- ibm elastic storage server, elastic storage system +1 moreIBM Elastic Storage System 6.0.0 through 6.0.1.2 and IBM Elastic Storage Server 5.3.0 through 5.3...7.5 High
- contiki-os contikiAn issue was discovered in Contiki through 3.0. When sending an ICMPv6 error message because of...7.5 High
- doctor appointment system project appointment systemBlind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated...7.5 High
- doctor appointment system project appointment systemBlind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated...7.5 High
- doctor appointment system project appointment systemBlind SQL injection in contactus.php in doctor appointment system 1.0 allows an unauthenticated...7.5 High
- doctor appointment system project appointment systemBlind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated...7.5 High
- bitweaverA cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to...4.8 Medium
- bitweaverA cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to...4.8 Medium
- bitweaverA cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to...4.8 Medium
- bitweaverA cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to...4.8 Medium
- bitweaverA cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to...4.8 Medium
- bitweaverA cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to...4.8 Medium
- bitweaverA cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to...4.8 Medium
- bitweaverA cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to...4.8 Medium
- bitweaverA cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to...4.8 Medium
- suse hawk2, linux enterprise high availability 12-sp3, linux enterprise high availability 12-sp5 +1 more +3 morehawk: Insecure file permissions7.8 High
- haserl project haserlLack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9...5.5 Medium
- gimly matlabThe unofficial MATLAB extension before 2.0.1 for Visual Studio Code allows attackers to execute...9.8 Critical
- mozilla firefox esr, thunderbird +1 moreAn out of date graphics library (Angle) likely contained vulnerabilities that could potentially...9.8 Critical
- mozilla firefox, firefox esr +1 moreA transient execution vulnerability, named Floating Point Value Injection (FPVI) allowed an...5.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers and community members reported memory safety bugs present in Firefox 86 and...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreA malicious extension could have opened a popup window lacking an address bar. The title of the...6.5 Medium
- mozilla firefoxBy causing a transition on a parent node by removing a CSS rule, an invalid property for a marker...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreUsing techniques that built on the slipstream research, a malicious webpage could have scanned...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the...8.1 High
- debian linux, linux kernel, fedoraproject fedora +1 more +3 moreThere is a flaw reported in the Linux kernel in versions before 5.9 in drivers/gpu/drm/nouveau...6.7 Medium
- samba, debian linux, fedoraproject fedora +2 moreA flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can...7.5 High
- apple ipados, macos, ios and ipados +5 more +7 moreA logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2...9.8 Critical
- apple macos, tvos, watchos +5 more +7 moreThis issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS...6.5 Medium
- apple macos, safari, tvos +6 more +8 moreA port redirection issue was addressed with additional port validation. This issue is fixed in...6.5 Medium
- apple ipados, macos, tvos +7 more +9 moreA type confusion issue was addressed with improved state handling. This issue is fixed in macOS...8.8 High
- apple macos, mac os x, fedoraproject fedora +1 more +3 moreThis issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS...6.5 Medium
- samba, debian linux, fedoraproject fedora +2 moreA flaw was found in samba. Spaces used in a string around a domain name (DN), while supposed to...7.5 High
- xwiki, xwiki xwiki-platform +1 moreRating Script Service expose XWiki to SQL injection7.7 High
- github enterprise serverUnsafe configuration options in GitHub Pages leading to remote code execution on GitHub Enterprise Server8.8 High
- netflix hollowInsecure temporary file in Netflix OSS Hollow4.4 Medium
- netflix priamNetflix/Priam: Temporary Directory Information Disclosure5.5 Medium
- red hat undertow, redhat jboss-remoting, netapp active iq unified manager +1 more +3 moreA flaw was found in Undertow when using Remoting as shipped in Red Hat Jboss EAP before version 7...7.5 High
- qemu, debian linux, fedoraproject fedora +1 more +3 moreThe patch for CVE-2020-17380/CVE-2020-25085 was found to be ineffective, thus making QEMU...5.7 Medium
- tibco activespaces, tibco software inc. activespaces - community edition, activespaces - developer edition +1 more +3 moreTIBCO ActiveSpaces Windows Platform Installation vulnerability8.8 High
- tibco eftl, tibco software inc. eftl - community edition, eftl - developer edition +1 more +3 moreTIBCO eFTL Windows Platform Installation vulnerability8.8 High
- tibco enterprise message service, tibco software inc. enterprise message service - community edition, enterprise message service - developer edition +2 moreTIBCO Enterprise Message Service Windows Platform Artifact Search vulnerability8.8 High
- tibco enterprise message service, tibco software inc. enterprise message service - community edition, enterprise message service - developer edition +2 moreTIBCO Enterprise Message Service Windows Platform Installation vulnerability8.8 High
- tibco ftl, tibco software inc. ftl - community edition, ftl - developer edition +1 more +3 moreTIBCO FTL Windows Platform Artifact Search vulnerability8.8 High
- tibco ftl, tibco software inc. ftl - community edition, ftl - developer edition +1 more +3 moreTIBCO FTL Windows Platform Installation vulnerability8.8 High
- tibco rendezvous, tibco software inc. rendezvous developer edition +1 moreTIBCO Rendezvous Windows Platform Artifact Search vulnerability8.8 High
- tibco rendezvous, tibco software inc. rendezvous developer edition +1 moreTIBCO Rendezvous Windows Platform Installation vulnerability8.8 High
- jellyfinUnauthenticated Arbitrary File Access in Jellyfin7.7 High
- libass project libassStack overflow in the parse_tag function in libass/ass_parse.c in libass before 0.14.0 allows...8.8 High
- acquia mauticMautic vulnerable to secret data exfiltration via symfony parameters5.8 Medium
- Show moreLoading…