CVEs published in March 2021
1,535 vulnerabilities, 180 critical, 24 exploited.
- samsung accountImproper Access Control in EmailValidationView in Samsung Account prior to version 10.7.0.7 and...3.2 Low
- samsung accountInformation Exposure vulnerability in Samsung Account prior to version 12.1.1.3 allows physically...2.0 Low
- samsung slow motion editorUsing unsafe PendingIntent in Slow Motion Editor prior to version 3.5.18.5 allows local attackers...5.5 Medium
- genivia gsoap, oracle communications diameter signaling router, communications eagle application processor +3 more +5 moreA code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP...9.8 Critical
- rockwellautomation micrologix 1400 firmwareRockwell Automation MicroLogix 1400 Version 21.6 and below may allow a remote unauthenticated...8.6 High
- microfocus access managerAuthentication Bypass Vulnerability in Micro Focus Access Manager Product, affects all version...7.5 High
- bosch video streaming gatewayUncontrolled Search Path Element in Bosch Video Streaming Gateway Installer7.8 High
- bosch monitor wallUncontrolled Search Path Element in Bosch Monitor Wall Installer7.8 High
- bosch configuration managerUncontrolled Search Path Element in Bosch Configuration Manager Installer7.8 High
- bosch video clientUncontrolled Search Path Element in Bosch Video Client installer7.8 High
- bosch video recording managerUncontrolled Search Path Element in Bosch Video Recording Manager Installer7.8 High
- bosch bvms, bvms viewer, divar ip 7000 r2 +4 more +6 moreUncontrolled Search Path Element in Bosch BVMS and BVMS Viewer7.8 High
- bosch ip helperUncontrolled Search Path Element in Bosch IP Helper7.8 High
- cisco duo authentication proxy, duo authentication proxy +1 moreDuo Authentication Proxy Installer Denial of Service Vulnerability6.6 Medium
- forgerock openamForgeRock OpenAM before 13.5.1 allows LDAP injection via the Webfinger protocol. For example, an...7.5 High
- mitreid connectServer Side Request Forgery (SSRF) in org.mitre:openid-connect-server9.1 Critical
- fuji xerox co.,ltd. xerox multifunction devices and printers, fujixerox apeosport-vii 4021 firmware, apeosport-vii 5021 firmware +73 more +75 moreFuji Xerox multifunction devices and printers (DocuCentre-VII C7773/C6673/C5573/C4473/C3373/C3372...7.5 High
jackson-coreOSS-FuzzUncaught exception in java.base/java.nio.CharBuffer.wrapNo scorejackson-coreOSS-FuzzUncaught exception in java.base/java.nio.Buffer.<init>No scorelibarchiveOSS-FuzzHeap-use-after-free in copy_stringNo scorejackson-coreOSS-FuzzUncaught exception in java.base/java.util.Arrays.copyOfNo scorejackson-coreOSS-FuzzUncaught exception in java.base/java.util.concurrent.ConcurrentHashMap.putValNo scorefreetype2OSS-FuzzHeap-buffer-overflow in read_color_lineNo scorejackson-dataformats-binaryOSS-FuzzUncaught exception in java.base/java.lang.ClassLoader.defineClass0No score- gnu libmicrohttpd, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in libmicrohttpd in versions before 0.9.71. A missing bounds check in the...9.8 Critical
- openssl, fedoraproject fedora, freebsd +30 more +32 moreCA certificate check bypass with X509_V_FLAG_X509_STRICT7.4 High
- openssl, checkpoint multi-domain management firmware, quantum security gateway firmware +103 more +105 moreNULL pointer deref in signature_algorithms processing5.9 Medium
- mozilla thunderbirdThunderbird unprotects a secret OpenPGP key prior to using it for a decryption, signing or key...7.5 High
- mozilla firefoxMozilla developers reported memory safety bugs present in Firefox 86. Some of these bugs showed...8.8 High
- mozilla firefoxA malicious extension with the 'search' permission could have installed a new search engine whose...6.5 Medium
- mozilla firefoxIf an attacker is able to alter specific about:config values (for example malware running on the...6.5 Medium
- hmtalk daviewindyDaviewIndy Heap Overflow Vulnerabilities7.8 High
- tobesoft xplatformTOBESOFT XPLATFORM Out-of-Bounds Read/Write Vulnerabilities5.5 Medium
- apkleaks project apkleaksImproper Neutralization of Argument Delimiters in a Decompiling Package Process9.3 Critical
- mifos mifos-mobileDisabled hostname verification and accepting self-signed certificates8.8 High
- ipfs go-ipfsControl character injection in console output6.8 Medium
- cisco aironet access point software, catalyst 9800 firmware, wireless lan controller software +2 moreCisco Aironet Access Points Arbitrary File Overwrite Vulnerability4.4 Medium
- cisco jabberCisco Jabber Desktop and Mobile Client Software Vulnerabilities9.9 Critical
- cisco jabberCisco Jabber Desktop and Mobile Client Software Vulnerabilities9.9 Critical
- cisco jabberCisco Jabber Desktop and Mobile Client Software Vulnerabilities9.9 Critical
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software Active Debug Code Vulnerability6.1 Medium
- ipfs go-ipfsPath traversal7.7 High
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software Web UI Denial of Service Vulnerabilities4.3 Medium
- cisco ios xe, ios xe software +1 moreCisco IOS XE SD-WAN Software Privilege Escalation Vulnerability5.1 Medium
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software DECnet Phase IV/OSI Denial of Service Vulnerability7.4 High
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software Web UI Denial of Service Vulnerabilities4.3 Medium
- cisco ios xe sd-wan, ios xe software +1 moreCisco IOS XE SD-WAN Software Console Privilege Escalation Vulnerability6.6 Medium
- cisco ios xe, ios xe software +1 moreCisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerability8.6 High
- cisco ios xe, ios xe software +1 moreCisco IOS XE Wireless Controller Software for the Catalyst 9000 Family Stored Cross-Site Scripting Vulnerability4.8 Medium
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software Fast Reload Vulnerabilities6.7 Medium
- Show moreLoading…