CVEs published in March 2021
1,535 vulnerabilities, 180 critical, 24 exploited.
- isolated-vm project isolated-vmMisuse of `Reference` and other transferable APIs may lead to access to nodejs isolate8.0 High
- ffmpegBuffer overflow vulnerability in sniff_channel_order function in aacdec_template.c in ffmpeg 3.1...7.8 High
- mongo-express project mongo-expressRemote code execution in mongo-express9.8 Critical
- linux kernel, fedoraproject fedora +1 moreAn issue was discovered in the Linux kernel before 5.11.11. tipc_nl_retrieve_key in net/tipc/node...5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +2 moreAn issue was discovered in the Linux kernel before 5.11.11. qrtr_recvmsg in net/qrtr/qrtr.c...5.5 Medium
- linux kernel, fedoraproject fedora +1 moreAn issue was discovered in the Linux kernel before 5.11.11. The BPF subsystem does not properly...5.5 Medium
- linux kernel, fedoraproject fedora +1 moreAn issue was discovered in the Linux kernel before 5.11.11. The user mode driver (UMD) has a...5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +2 moreAn issue was discovered in the Linux kernel before 5.11.11. The netfilter subsystem allows...5.5 Medium
cppzmqMageia,zeromqMageia +1 moreUpdated zeromq packages fix security vulnerabilitiesNo score- gistpad project gistpadGistPad before 0.2.7 allows a crafted workspace folder to change the URL for the Gist API, which...5.3 Medium
- thi-ng egf, \@thi.ng\/egf project \@thi.ng\/egf +1 more[thi.ng/egf] Potential arbitrary code execution of `#gpg`-tagged property values6.4 Medium
- hpe unified data managementA security vulnerability in HPE Unified Data Management (UDM) could allow the local disclosure of...5.5 Medium
- ibm engineering lifecycle optimization, engineering workflow management, engineering insights +4 more +6 moreIBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ibm engineering lifecycle optimization, engineering workflow management, engineering insights +4 more +6 moreIBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ibm engineering lifecycle optimization, engineering workflow management, engineering insights +4 more +6 moreIBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ibm engineering lifecycle optimization, engineering workflow management, engineering insights +4 more +6 moreIBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ibm engineering lifecycle optimization, engineering workflow management, engineering insights +4 more +6 moreIBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ibm engineering lifecycle optimization, engineering workflow management, engineering insights +4 more +6 moreIBM Jazz Foundation Products are vulnerable to an XML External Entity Injection (XXE) attack when...7.1 High
- ibm engineering lifecycle optimization, engineering workflow management, engineering insights +4 more +6 moreIBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ibm engineering lifecycle optimization, engineering workflow management, engineering insights +4 more +6 moreIBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ibm cloud pak for automationIBM Cloud Pak for Automation 20.0.2 and 20.0.3 IF002 are vulnerable to an XML External Entity...7.1 High
- ibm urbancode deployIBM UrbanCode Deploy (UCD) 7.0.3.0, 7.0.4.0, 7.0.5.3, 7.0.5.4, 7.1.0.0, 7.1.1.0, 7.1.1.1, and 7.1...5.1 Medium
- ibm urbancode deployIBM UrbanCode Deploy (UCD) 6.2.7.9, 7.0.5.4, and 7.1.1.1 stores user credentials in plain in...6.2 Medium
- ibm urbancode deployIBM UrbanCode Deploy (UCD) 6.2.7.9, 7.0.5.4, and 7.1.1.1 could allow an authenticated user to...5.4 Medium
- prestashopPossible XSS injection through DataColumn Grid class5.4 Medium
- netty, debian linux, netapp oncommand api services +15 more +17 morePossible request smuggling in HTTP/2 due missing validation of content-length5.9 Medium
- kill-by-port project kill-by-portArbitrary Command Injection6.3 Medium
- foxit phantompdf, foxitsoftware foxit reader +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit phantompdf, foxitsoftware foxit reader +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit phantompdf, foxitsoftware foxit reader +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit phantompdf, foxitsoftware foxit reader +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit phantompdf, foxitsoftware foxit reader +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit phantompdf, foxitsoftware foxit reader +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...3.3 Low
- foxit phantompdf, foxitsoftware foxit reader +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...3.3 Low
- foxit phantompdf, foxitsoftware foxit reader +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...3.3 Low
- foxit phantompdf, foxitsoftware foxit reader +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...3.3 Low
- foxit phantompdf, foxitsoftware foxit reader +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...3.3 Low
- foxit phantompdf, foxitsoftware foxit reader +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- openvpn connectOpenVPN Connect installer for macOS version 3.2.6 and older may corrupt system critical files it...7.1 High
- dlink dir-816 firmwareD-link DIR-816 A2 v1.10 is affected by a remote code injection vulnerability. An HTTP request...9.8 Critical
- cmsmadesimple cms made simpleCMS Made Simple (CMSMS) 2.2.15 allows authenticated XSS via the /admin/addbookmark.php script...5.4 Medium
- ovidentiaOvidentia CMS 6.x contains a SQL injection vulnerability in the "id" parameter of index.php. The ...5.4 Medium
- jenkins team foundation server, jenkins project team foundation server plugin +1 moreCSRF vulnerability in Jenkins Team Foundation Server Plugin allow capturing credentials8.8 High
- jenkins team foundation server, jenkins project team foundation server plugin +1 moreMissing permission check in Jenkins Team Foundation Server Plugin allow capturing credentials6.5 Medium
- jenkins team foundation server, jenkins project team foundation server plugin +1 moreMissing permission check in Jenkins Team Foundation Server Plugin allows enumerating credentials IDs4.3 Medium
- jenkins rest list parameter, jenkins project rest list parameter plugin +1 moreStored XSS vulnerability in Jenkins REST List Parameter Plugin5.4 Medium
- jenkins project jabber (xmpp) notifier and control plugin, jenkins jabber \(xmpp\) notifier and control +1 morePasswords stored in plain text by Jenkins Jabber (XMPP) notifier and control Plugin6.5 Medium
- jenkins owasp dependency-track, jenkins project owasp dependency-track plugin +1 moreCSRF vulnerability and in Jenkins OWASP Dependency-Track Plugin allow capturing credentials8.8 High
- jenkins owasp dependency-track, jenkins project owasp dependency-track plugin +1 moreMissing permission checks in Jenkins OWASP Dependency-Track Plugin allow capturing credentials6.5 Medium
- jenkins cloud statistics, jenkins project cloud statistics plugin +1 moreMissing permission check in Jenkins Cloud Statistics Plugin4.3 Medium
- Show moreLoading…