CVEs published in March 2021
1,535 vulnerabilities, 180 critical, 24 exploited.
- freebsdIn FreeBSD 12.2-STABLE before r368969, 11.4-STABLE before r369047, 12.2-RELEASE before p3, 12.1...5.3 Medium
- freebsdIn FreeBSD 12.2-STABLE before r368969, 11.4-STABLE before r369047, 12.2-RELEASE before p3, 12.1...5.3 Medium
- freebsdIn FreeBSD 12.2-STABLE before r369334, 11.4-STABLE before r369335, 12.2-RELEASE before p4 and 11...8.7 High
- freebsdIn FreeBSD 12.2-STABLE before r369312, 11.4-STABLE before r369313, 12.2-RELEASE before p4 and 11...7.5 High
- freebsdIn FreeBSD 12.2-STABLE before r369346, 11.4-STABLE before r369345, 12.2-RELEASE before p4 and 11...5.3 Medium
- freebsdIn FreeBSD 12.2-STABLE before r365772, 11.4-STABLE before r365773, 12.1-RELEASE before p10, 11.4...8.8 High
- freebsdIn FreeBSD 12.2-STABLE before r365767, 11.4-STABLE before r365769, 12.1-RELEASE before p10, 11.4...7.6 High
- buddypressBuddyPress privilege escalation via REST API8.1 High
- element-hq synapse, fedoraproject fedora +1 moreHTML injection in email and account expiry notifications6.1 Medium
- element-hq synapse, fedoraproject fedora +1 moreCross-site scripting (XSS) vulnerability in the password reset endpoint6.9 Medium
- gitlabAn information disclosure issue in GitLab starting from version 12.8 allowed a user with access...6.2 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 13.4. Improper access...4.3 Medium
- gitlabIn all versions of GitLab starting from 13.7, marshalled session keys were being stored in Redis.5.7 Medium
- gitlabImproper authorization in GitLab 12.8+ allows a guest user in a private project to view tag data...4.3 Medium
- samsung android, mobile devices, samsung mobile devices +2 moreAn improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds...6.1 Medium
- samsung android, mobile devices, samsung mobile devices +2 moreA vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF...6.1 Medium
- samsung android, mobile devices, samsung mobile devices +2 moreAn incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release...6.1 Medium
- samsung android, mobile devices, samsung mobile devices +2 moreAn improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes...6.2 Medium
- rocket.chatRocket.Chat before 3.11, 3.10.5, 3.9.7, 3.8.8 is vulnerable to persistent cross-site scripting ...6.1 Medium
- microseven mym71080i-b firmwareMicroSeven MYM71080i-B 2.0.5 through 2.0.20 devices send admin credentials in cleartext to pnp...7.5 High
- devolutions server, kongchuanhujiao project kongchuanhujiao +1 moreAuthentication Bypass by Primary Weakness in github.com/kongchuanhujiao/server7.5 High
- askey rtf3505vw-n1 br sv g000 r3505vwn1001 s32 7 firmwareAskey Fiber Router RTF3505VW-N1 BR_SV_g000_R3505VWN1001_s32_7 devices allow Remote Code Execution...8.8 High
- imagemagickA heap based buffer overflow in coders/tiff.c may result in program crash and denial of service...5.5 Medium
- gnu binutils, broadcom brocade fabric operating system firmware, netapp cloud backup +3 more +5 moreThere is an open race window when writing output in the following utilities in GNU binutils...6.3 Medium
- gnu tar, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreOut-of-bounds Read and Missing Release of Memory after Effective Lifetime in tar3.3 Low
- gnu binutils, netapp cloud backup, ontap select deploy administration utility +2 moreA flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in...5.5 Medium
- upxA flaw was found in upx canPack in p_lx_elf.cpp in UPX 3.96. This flaw allows attackers to cause...6.6 Medium
- red hat resteasy, netapp oncommand insight, oracle communications cloud native core console +1 more +3 moreExposure of class information in RESTEasy5.3 Medium
- tableau serverTableau Server fails to validate certain URLs that are embedded in emails sent to Tableau Server...6.1 Medium
- salesforce mule, salesforce, inc. mulesoft +1 moreMuleSoft is aware of a XML External Entity (XXE) vulnerability affecting certain versions of a...9.8 Critical
- salesforce mule, salesforce, inc. mulesoft +1 moreMuleSoft is aware of a Server Side Request Forgery vulnerability affecting certain versions of a...9.8 Critical
- salesforce mule, salesforce, inc. mulesoft +1 moreMuleSoft is aware of a Remote Code Execution vulnerability affecting certain versions of a Mule...9.8 Critical
- solarwinds orion platformSolarWinds Orion Platform before 2020.2.5 allows stored XSS attacks by an administrator on the...4.8 Medium
- solarwinds orion platformThe custom menu item options page in SolarWinds Orion Platform before 2020.2.5 allows Reverse...4.8 Medium
- gridx project gridxRemote Code Execution Vulnerability in tests/support/stores/test_grid_filter.php in oria gridx 1...9.8 Critical
- craftcms craft cmsCraft CMS Cross-site Scripting Vulnerability5.4 Medium
- microfocus access managerCross-Site scripting vulnerability in Micro Focus Access Manager product, affects all version...6.1 Medium
- micro focus access managerAdvance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager...7.5 High
- tp-link archer-c3150 firmware, td-w9977 firmware, tl-wa801n firmware +2 more +4 moreUnauthenticated stored cross-site scripting (XSS) exists in multiple TP-Link products including...6.1 Medium
- mcafee epolicy orchestrator, mcafee,llc mcafee epolicy orchestrator (epo) +1 moreMcAfee ePO Information Leak vulnerability6.5 Medium
- mcafee epolicy orchestrator, mcafee,llc mcafee epolicy orchestrator (epo) +1 moreMcAfee ePO unvalidated URL redirect vulnerability6.3 Medium
- mcafee epolicy orchestrator, mcafee,llc mcafee epolicy orchestrator (epo) +1 moreMcAfee ePO Cross-site Scripting vulnerability3.5 Low
- basercmsCross-site Scripting (XSS) in baserCMS5.4 Medium
- basercmsOS Command Injection in baserCMS7.2 High
- basercmsCross-site Scripting (XSS) in baserCMS5.4 Medium
- nec platforms, ltd. univerge aspire series pbx, necplatforms sl2100 firmware, univerge aspire ux firmware +2 more +4 moreUNIVERGE Aspire series PBX (UNIVERGE Aspire WX from 1.00 to 3.51, UNIVERGE Aspire UX from 1.00 to...3.1 Low
- ca ehealth performance manager** UNSUPPORTED WHEN ASSIGNED ** CA eHealth Performance Manager through 6.3.2.12 is affected by...7.8 High
- broadcom ehealth** UNSUPPORTED WHEN ASSIGNED ** CA eHealth Performance Manager through 6.3.2.12 is affected by...7.5 High
- ca ehealth performance manager** UNSUPPORTED WHEN ASSIGNED ** CA eHealth Performance Manager through 6.3.2.12 is affected by...8.8 High
- ca ehealth performance manager** UNSUPPORTED WHEN ASSIGNED ** CA eHealth Performance Manager through 6.3.2.12 is affected by...5.4 Medium
- Show moreLoading…