CVEs published in April 2021
1,956 vulnerabilities, 217 critical, 16 exploited.
- salesagility suitecrm XSS in the client account page in SuiteCRM before 7.11.19 allows an attacker to inject JavaScript... 5.4 Medium
- open-xchange appsuite OX App Suite 7.10.4 and earlier allows XSS via a crafted contact object (payload in the position... 6.1 Medium
- open-xchange appsuite OX App Suite 7.10.4 and earlier allows XSS via a crafted distribution list (payload in the common... 6.1 Medium
- dell unity, unity operating environment, unity xt operating environment +1 more +3 more Dell EMC Unity, UnityVSA, and Unity XT versions prior to 5.0.7.0.5.008 contain a plain-text... 6.4 Medium
- dell unisphere for powermax, powermax os, solutions enabler +2 more +4 more Dell Unisphere for PowerMax versions prior to 9.2.1.6 contain an Authorization Bypass... 8.1 High
- dell openmanage enterprise, openmanage enterprise-modular +1 more Dell OpenManage Enterprise-Modular (OME-M) versions prior to 1.30.00 contain a security bypass... 8.3 High
- dell r1-2210 firmware, r1-2401 firmware, vrtx switch modules +9 more +11 more Dell EMC Networking X-Series firmware versions prior to 3.0.1.8 and Dell EMC PowerEdge VRTX... 8.8 High
- open-xchange ox guard OX Guard 2.10.4 and earlier allows a Denial of Service via a WKS server that responds slowly or... 7.5 High
- open-xchange appsuite OX App Suite 7.10.4 and earlier allows SSRF via a snippet. 6.5 Medium
- dell idrac9 firmware, integrated dell remote access controller (idrac) +1 more Dell EMC iDRAC9 versions prior to 4.40.00.00 contain an improper authentication vulnerability. A... 2.7 Low
- dell idrac9 firmware, integrated dell remote access controller (idrac) +1 more Dell EMC iDRAC9 versions prior to 4.40.00.00 contain multiple stored cross-site scripting... 4.8 Medium
- dell idrac9 firmware, integrated dell remote access controller (idrac) +1 more Dell EMC iDRAC9 versions prior to 4.40.10.00 contain multiple stored cross-site scripting... 4.8 Medium
- dell idrac9 firmware, integrated dell remote access controller (idrac) +1 more Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a DOM-based cross-site scripting... 6.1 Medium
- dell idrac9 firmware, integrated dell remote access controller (idrac) +1 more Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a stack-based overflow vulnerability. A... 5.9 Medium
- dell idrac9 firmware, integrated dell remote access controller (idrac) +1 more Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a Time-of-check Time-of-use (TOCTOU) race... 5.9 Medium
- chamilo A remote code execution vulnerability exists in Chamilo through 1.11.14 due to improper input... 7.2 High
- yzmcms Cross Site Scripting (XSS) in yzmCMS v5.2 allows remote attackers to execute arbitrary code by... 6.1 Medium
- cubecoders amp AMP Application Deployment Service in CubeCoders AMP 2.1.x before 2.1.1.2 allows a remote,... 6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more Heap buffer overflow in ANGLE in Google Chrome on Windows prior to 90.0.4430.93 allowed a remote... 8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more Use after free in Dev Tools in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to... 8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more Insufficient data validation in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote... 8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more Type confusion in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to... 8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more Incorrect security UI in downloads in Google Chrome on Android prior to 90.0.4430.93 allowed a... 6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more Insufficient policy enforcement in extensions in Google Chrome prior to 90.0.4430.93 allowed an... 4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more Insufficient data validation in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote... 8.8 High
- dell hybrid client, hybrid client (dhc) +1 more Dell Hybrid Client versions prior to 1.5 contain an information exposure vulnerability. A local... 6.2 Medium
- dell hybrid client, hybrid client (dhc) +1 more Dell Hybrid Client versions prior to 1.5 contain an information exposure vulnerability. A local... 6.2 Medium
- dell hybrid client, hybrid client (dhc) +1 more Dell Hybrid Client versions prior to 1.5 contain a missing authentication for a critical function... 7.4 High
- dell hybrid client, hybrid client (dhc) +1 more Dell Hybrid Client versions prior to 1.5 contain an information exposure vulnerability. A local... 4.0 Medium
- cumulative-distribution-function project cumulative-distribution-function Improper Input Validation and Loop with Unreachable Exit Condition ('Infinite Loop') in cumulative-distribution-function 7.5 High
- ibm informix dynamic server IBM Informix Dynamic Server 14.10 is vulnerable to a stack based buffer overflow, caused by... 6.7 Medium
- fossasia susi.ai, susi server +1 more Directory Traversal Vulnerability in SUSI.AI Server 8.6 High
- ampache Unauthenticated SQL injection in Ampache 8.2 High
- pritunl pritunl-client-electron Pritunl Client v1.2.2550.20 contains a local privilege escalation vulnerability in the pritunl... 7.8 High
- linuxfoundation cortex Improper input validation in CNCF Cortex 5.5 Medium
- grafana enterprise metrics The Alertmanager in Grafana Enterprise Metrics before 1.2.1 and Metrics Enterprise 1.2.1 has a... 5.5 Medium
- zohocorp manageengine eventlog analyzer Zoho ManageEngine Eventlog Analyzer through 12147 is vulnerable to unauthenticated directory... 9.8 Critical
- ambarella oryx rtsp server A buffer overflow in the RTSP service of the Ambarella Oryx RTSP Server 2020-01-07 allows an... 9.8 Critical
- gog galaxy GalaxyClient version 2.0.28.9 loads unsigned DLLs such as zlib1.dll, libgcc_s_dw2-1.dll and... 7.8 High
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 more Specially crafted query may result in a denial of service of mongod 6.5 Medium
- opensuse factory, leap 15.2, suse cups +4 more +6 more cups: ownership of /var/log/cups allows the lp user to create files as root 3.3 Low
- klibc project klibc, debian linux +1 more An issue was discovered in klibc before 2.0.9. Multiplication in the calloc() function may result... 9.8 Critical
- klibc project klibc, debian linux +1 more An issue was discovered in klibc before 2.0.9. Multiple possible integer overflows in the cpio... 9.8 Critical
- klibc project klibc, debian linux +1 more An issue was discovered in klibc before 2.0.9. An integer overflow in the cpio command may result... 7.5 High
- lz4 project lz4, netapp active iq unified manager, cloud backup +7 more +9 more There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4... 9.8 Critical
- djvulibre project djvulibre, debian linux +1 more A flaw was found in djvulibre-3.5.28 and earlier. A Stack overflow in function DJVU::DjVuDocument... 7.8 High
- debian linux, linux kernel, redhat enterprise linux +2 more An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in... 6.7 Medium
- klibc project klibc, debian linux +1 more An issue was discovered in klibc before 2.0.9. Additions in the malloc() function may result in... 9.8 Critical
- exiv2, fedoraproject fedora +1 more Heap buffer overflow in Exiv2::Jp2Image::encodeJp2Header 3.3 Low
- exiv2, fedoraproject fedora +1 more Out-of-bounds read in Exiv2::WebPImage::doWriteMetadata 3.3 Low
- Show olderLoading…