CVEs published in March 2021
1,535 vulnerabilities, 180 critical, 24 exploited.
- broadcom ca ehealth performance manager, ehealth +1 more** UNSUPPORTED WHEN ASSIGNED ** CA eHealth Performance Manager through 6.3.2.12 is affected by...7.8 High
- projectacrn acrnACRN through 2.2 has a devicemodel/hw/pci/virtio/virtio.c NULL Pointer Dereference.7.5 High
- hashicorp terraform enterpriseHashiCorp Terraform Enterprise up to v202102-2 failed to enforce an organization-level setting...6.5 Medium
- librit passhportapp/views_mod/user/user.py in LibrIT PaSSHport through 2.5 is affected by LDAP Injection. There...6.5 Medium
- aryanic high cmsCross Site Scripting (XSS) vulnerability in Aryanic HighMail (High CMS) versions 2020 and before...6.1 Medium
serenityOSS-FuzzHeap-use-after-free in AK::NonnullOwnPtr<JS::IndexedPropertyStorage>::operator->No scorew3mOSS-FuzzSegv on unknown address in GC_generic_malloc_manyNo scorewuffsOSS-FuzzUNKNOWN WRITE in wuffs_base__pixel_swizzler__bgr__bgra_premul__srcNo score- red hat, inc. rpm, fedoraproject fedora, redhat enterprise linux +1 more +3 moreA flaw was found in RPM's signature check functionality when reading a package file. This flaw...7.0 High
- zetetic sqlcipherZetetic SQLCipher 4.x before 4.4.3 has a NULL pointer dereferencing issue related to...7.5 High
- realtek xpon rtl9601d software development kitRealtek xPON RTL9601D SDK 1.9 stores passwords in plaintext which may allow attackers to possibly...9.8 Critical
- esri arcgis desktop, arcgis engine, arcgis pro +3 more +5 moreArcGIS general raster security update: uninitialized pointer7.8 High
- esri arcgis desktop, arcgis engine, arcgis pro +3 more +5 moreArcGIS general raster security update: buffer overflow7.8 High
- esri arcgis serverArcGIS Server image service and raster analytics security update: uninitialized pointer6.4 Medium
- esri arcgis serverArcGIS Server image service and raster analytics security update: buffer overflow6.4 Medium
- esri arcgis serverArcGIS Server image service and raster analytics security update: use-after-free6.4 Medium
- invigo automatic device managementA directory traversal on the /admin/sysmon.php script of Invigo Automatic Device Management (ADM)...7.5 High
- invigo automatic device managementA command injection on the /admin/broadcast.php script of Invigo Automatic Device Management (ADM...8.8 High
- invigo automatic device managementMultiple session validity check issues in several administration functionalities of Invigo...7.5 High
- invigo automatic device managementA SQL injection on the /admin/display_errors.php script of Invigo Automatic Device Management ...9.8 Critical
- invigo automatic device managementThe /admin/admapi.php script of Invigo Automatic Device Management (ADM) through 5.0 allows...8.8 High
- invigo automatic device managementA directory traversal on the /admin/search_by.php script of Invigo Automatic Device Management ...7.5 High
- revive-adserver revive adserverRevive Adserver before v5.2.0 is vulnerable to a reflected XSS vulnerability in the ...6.1 Medium
- revive-adserver revive adserverRevive Adserver before v5.2.0 is vulnerable to a reflected XSS vulnerability in the `status`...6.1 Medium
- ge mu320e firmwareA miscommunication in the file system allows adversaries with access to the MU320E to escalate...7.8 High
- ge reason dr60 firmwareThe software performs an operation at a privilege level higher than the minimum level required,...7.8 High
- ge mu320e firmwareSSH server configuration file does not implement some best practices. This could lead to a...7.8 High
- ge reason dr60 firmwareThe software contains a hard-coded password it uses for its own inbound authentication or for...9.8 Critical
- ge reason dr60 firmwareThe software contains a hard-coded password it uses for its own inbound authentication or for...8.8 High
- ge mu320e firmwareThe software contains a hard-coded password that could allow an attacker to take control of the...7.8 High
- seopanel seo panelA cross-site scripting (XSS) issue in SEO Panel 4.8.0 allows remote attackers to inject...4.8 Medium
- seopanel seo panelA cross-site scripting (XSS) issue in SEO Panel 4.8.0 allows remote attackers to inject...4.8 Medium
- seopanel seo panelA cross-site scripting (XSS) issue in SEO Panel 4.8.0 allows remote attackers to inject...4.8 Medium
- nokia netactAn issue was discovered in Nokia NetAct 18A. A malicious user can change a filename of an...5.4 Medium
- nokia netactAn issue was discovered in Nokia NetAct 18A. A remote user, authenticated to the NOKIA NetAct Web...6.5 Medium
- jasper project jasper, fedoraproject fedora +1 moreA NULL pointer dereference flaw was found in the way Jasper versions before 2.0.26 handled...5.5 Medium
- libtpms project libtpms, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in libtpms in versions before 0.8.2. The commonly used integration of libtpms...5.5 Medium
- jasper project jasper, fedoraproject fedora, redhat enterprise linux +2 moreA NULL pointer dereference flaw was found in the way Jasper versions before 2.0.27 handled...5.5 Medium
- esri arcgis desktop, arcgis engine, arcgis pro +4 more +6 moreArcGIS general raster security update: use-after-free7.8 High
- netop vision proImproper Authorization vulnerability in Netop Vision Pro up to and including to 9.7.1 allows an...5.9 Medium
- netop vision proCleartext transmission of sensitive information in Netop Vision Pro up to and including 9.7.1...8.8 High
- netop vision proIncorrect default permissions vulnerability in the API of Netop Vision Pro up to and including 9...9.8 Critical
- netop vision proLocal privilege escalation vulnerability in Windows clients of Netop Vision Pro up to and...7.8 High
- samsung cloudHijacking vulnerability in Samsung Cloud prior to version 4.7.0.3 allows attackers to intercept...3.3 Low
- samsung notesPath Traversal vulnerability in Samsung Notes prior to version 4.2.00.22 allows attackers to...3.7 Low
- samsung internetImproper access control in Samsung Internet prior to version 13.2.1.70 allows physically...3.2 Low
- samsung notesUsing unsafe PendingIntent in Samsung Notes prior to version 4.2.00.22 allows local attackers...5.5 Medium
- samsung internetImproper input check in Samsung Internet prior to version 13.2.1.46 allows attackers to launch...3.3 Low
- samsung galaxy themesUsing empty PendingIntent in Galaxy Themes prior to version 5.2.00.1215 allows local attackers to...5.5 Medium
- samsung bixby voiceUsing PendingIntent with implicit intent in Bixby Voice prior to version 3.0.52.14 allows...5.5 Medium
- Show moreLoading…