CVEs published in March 2021
1,535 vulnerabilities, 180 critical, 24 exploited.
- xerox phaser 6510 firmware, versalink b400 firmware, versalink b405 firmware +21 more +23 moreXerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51 and 65...9.8 Critical
- xerox phaser 6510 firmware, versalink b400 firmware, versalink b405 firmware +21 more +23 moreXerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51 and 65...9.8 Critical
- freebsdIn FreeBSD 12.2-STABLE before r368250, 11.4-STABLE before r368253, 12.2-RELEASE before p1, 12.1...9.8 Critical
- freebsdIn FreeBSD 12.2-STABLE before r368250, 11.4-STABLE before r368253, 12.2-RELEASE before p1, 12.1...9.8 Critical
- mobileiron mobile\@workMobileIron Mobile@Work through 2021-03-22 allows attackers to distinguish among valid, disabled,...5.3 Medium
- mobileiron mobile\@workThe MobileIron agents through 2021-03-22 for Android and iOS contain a hardcoded encryption key,...9.8 Critical
- xerox altalink b8045 firmware, altalink b8055 firmware, altalink b8065 firmware +7 more +9 moreXerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055...9.8 Critical
- xerox altalink b8045 firmware, altalink b8055 firmware, altalink b8065 firmware +7 more +9 moreXerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055...7.5 High
- mitel micontact center enterpriseThe Enterprise License Manager portal in Mitel MiContact Center Enterprise before 9.4 could allow...9.8 Critical
- arubanetworks instant, siemens scalance w1750d firmware +1 moreA remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant...9.8 Critical
- arubanetworks instant, siemens scalance w1750d firmware +1 moreA remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP)...8.8 High
- arubanetworks instant, siemens scalance w1750d firmware +1 moreA remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant...7.2 High
- arubanetworks instant, siemens scalance w1750d firmware +1 moreA remote denial of service (dos) vulnerability was discovered in some Aruba Instant Access Point ...7.5 High
- xerox phaser 6510 firmware, versalink b400 firmware, versalink b405 firmware +20 more +22 moreXerox Phaser 6510 before 64.61.23 and 64.59.11 (Bridge), WorkCentre 6515 before 65.61.23 and 65...9.8 Critical
- gitjacker project gitjackergitjacker arbitrary code execution9.8 Critical
- portswigger burp suiteAn issue was discovered in PortSwigger Burp Suite before 2021.2. During viewing of a malicious...6.5 Medium
- xerox altalink b8045 firmware, altalink b8055 firmware, altalink b8065 firmware +7 more +9 moreXerox AltaLink B8045/B8090 before 103.008.030.32000, C8030/C8035 before 103.001.030.32000, C8045...9.1 Critical
- grandstream grp2612 firmware, grp2612p firmware, grp2612w firmware +4 more +6 moreGrandstream GRP261x VoIP phone running firmware version 1.0.3.6 (Base) allows Command Injection...7.2 High
- grandstream grp2612 firmware, grp2612p firmware, grp2612w firmware +4 more +6 moreGrandstream GRP261x VoIP phone running firmware version 1.0.3.6 (Base) allow Authentication...9.8 Critical
- arubanetworks instant, siemens scalance w1750d firmware +1 moreA local authentication bypass vulnerability was discovered in some Aruba Instant Access Point ...6.8 Medium
- douzone nbbdownloader.ocxDouzone ActiveX File Download and Execution Vulnerability7.8 High
- zte zxhn f623 firmwareA ZTE product has a DoS vulnerability. A remote attacker can amplify traffic by sending carefully...7.5 High
- ilch cmsAn open redirect vulnerability in Ilch CMS version 2.1.42 allows attackers to redirect users to...5.4 Medium
- sherlockimSherlock SherlockIM through 2021-03-29 allows Cross Site Scripting (XSS) by leveraging the api...6.1 Medium
- jashkenas underscore, debian linux, fedoraproject fedora +1 more +3 moreArbitrary Code Injection3.3 Low
- acexy wireless-n wifi repeater firmwareThe Acexy Wireless-N WiFi Repeater REV 1.0 (28.08.06.1) Web management administrator password can...7.5 High
- acexy wireless-n wifi repeater firmwareThe /password.html page of the Web management interface of the Acexy Wireless-N WiFi Repeater REV...7.5 High
envoyOSS-FuzzASSERT: bufferRemainingSize() >= length.No score- redmineRedmine 4.1.x before 4.1.2 allows XSS because an issue's subject is mishandled in the auto...6.1 Medium
libredwgOSS-FuzzSegv on unknown address in dwg_free_MTEXTATTRIBUTEOBJECTCONTEXTDATA_privateNo score- mobileiron mobile\@workThe MobileIron agents through 2021-03-22 for Android and iOS contain a hardcoded API key, used to...7.5 High
harfbuzzOSS-FuzzHeap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned shortNo score- microco bluemondayCross-site scripting in bluemonday6.1 Medium
- remark42remark42 before 1.6.1 allows XSS, as demonstrated by "Locator: Locator{URL:" followed by an XSS payload. This is related to backend/app/store/comment.go and backend/app/store/service/service.go.6.1 Medium
jackson-coreOSS-FuzzUncaught exception in com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer.deserializeArrayNo score- webkit, webkitgtk +1 moreAn exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.3 x64. A...8.8 High
- btcpayserver btcpay serverBTCPay Server before 1.0.6.0, when the payment button is used, has a privacy vulnerability.7.5 High
- wire server, wireapp wire-server +1 moreBulk list client endpoint exposes too much metadata about a client6.5 Medium
- debian linux, linux kernel +1 moreAn issue was discovered in the Linux kernel through 5.11.10. drivers/net/ethernet/freescale...5.5 Medium
- debian linux, linux kernel +1 moreAn issue was discovered in the Linux kernel before 5.11.7. usbip_sockfd_store in drivers/usb...4.7 Medium
- linux kernelAn issue was discovered in the Linux kernel before 5.11.9. drivers/vhost/vdpa.c has a use-after...7.8 High
- linuxfoundation container network interfacecontainernetworking/cni improper limitation of path name7.2 High
- nim-lang nim, embysupport security +1 moreNimble falls back to insecure http url when fetching packages7.5 High
- nim-lang nim, embysupport security +1 moreNimble fails to validate certificates due to insecure httpClient defaults8.1 High
- nim-lang nim, embysupport security +1 moreNimble arbitrary code execution for specially crafted package metadata8.3 High
- freebsdIn FreeBSD 12.2-STABLE before r365730, 11.4-STABLE before r365738, 12.1-RELEASE before p10, 11.4...5.3 Medium
- oauth2-proxy, oauth2 proxy project proxy +1 moreIncorrect authorization in OAuth2-Proxy5.5 Medium
- freebsd, siemens simatic rf350m firmware, simatic rf650m firmware +2 moreIn FreeBSD 12.1-STABLE before r365010, 11.4-STABLE before r365011, 12.1-RELEASE before p9, 11.4...7.3 High
- freebsd, apple icloud, ipados +6 more +8 moreIn FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r364651, 12.1-RELEASE before p9, 11.4...5.5 Medium
- freebsdIn 11.4-PRERELEASE before r360733 and 11.3-RELEASE before p13, improper mbuf handling in the...5.5 Medium
- Show moreLoading…