CVEs published in April 2021
1,956 vulnerabilities, 217 critical, 16 exploited.
- apple ipados, macos, tvos +3 more +5 moreA logic issue was addressed with improved validation. This issue is fixed in watchOS 7.0, tvOS 14...7.8 High
- apple ipados, macos, tvos +4 more +6 moreMultiple memory corruption issues were addressed with improved input validation. This issue is...7.8 High
- apple ipados, macos, tvos +4 more +6 moreA buffer overflow was addressed with improved size validation. This issue is fixed in macOS Big...7.8 High
- apple ipados, macos, tvos +3 more +5 moreAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in...7.8 High
- apple ipados, macos, tvos +4 more +6 moreAn out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS...7.8 High
- apple macos, mac os x +1 moreAn out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS...7.1 High
- gitlabAn issue has been discovered in GitLab CE/EE affecting all previous versions. If the victim is an...2.4 Low
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting with 12.6. Under a...5.9 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 10.6 where an...3.5 Low
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions from 13.8 and above allowing...4.3 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 13.9. A...9.6 Critical
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting with 13.7.9. A...7.5 High
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4. It was...6.3 Medium
- wizconnected a60 colors firmwareAn issue was discovered in WiZ Colors A60 1.14.0. The device sends unnecessary information to the...4.3 Medium
- luvion grand elite 3 connect, grand elite 3 connect firmware +1 moreAn issue was discovered in Luvion Grand Elite 3 Connect through 2020-02-25. Authentication to the...8.8 High
- sannce smart hd wifi security camera ean 2 950004 595317 firmwareAn issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. A...7.8 High
- sannce smart hd wifi security camera ean 2 950004 595317 firmwareAn issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. It...7.5 High
- sannce smart hd wifi security camera ean 2 950004 595317 firmwareAn issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. By...7.5 High
- sannce smart hd wifi security camera ean 2 950004 595317 firmwareAn issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. A...7.5 High
- cohesity dataplatformA man-in-the-middle vulnerability in Cohesity DataPlatform support channel in version 6.3 up to 6...5.9 Medium
- wire wire-webappEntering code in App Lock modal sends input to conversation7.1 High
- cohesity dataplatformUndocumented Default Cryptographic Key Vulnerability in Cohesity DataPlatform version 6.3 prior 6...9.8 Critical
- okta access gatewayA command injection vulnerability in the cookieDomain and relayDomain parameters of Okta Access...6.7 Medium
- pomeriumpomerium_signature is not verified in middleware in github.com/pomerium/pomerium6.1 Medium
- pomeriumJWT leak via Open Redirect in Programmatic access6.1 Medium
- dmasoftlab dma radius managerDMA Softlab Radius Manager 4.4.0 is affected by Cross Site Scripting (XSS) via the description,...6.1 Medium
- dmasoftlab dma radius managerDMA Softlab Radius Manager 4.4.0 assigns the same session cookie to every admin session. The...9.8 Critical
- magnolia-cms magnolia cmsMagnolia CMS contains a stored cross-site scripting (XSS) vulnerability in the /magnoliaPublic...6.1 Medium
- magnolia-cms magnolia cmsMagnolia CMS From 6.1.3 to 6.2.3 contains a stored cross-site scripting (XSS) vulnerability in...5.4 Medium
privoxyMageiaUpdated privoxy packages fix security vulnerabilitiesNo score- red hat, inc. rpm, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in the RPM package in the read functionality. This flaw allows an attacker who...5.5 Medium
- red hat, inc. rpm, fedoraproject fedora +1 moreA flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can...4.9 Medium
- apache cxf, oracle business intelligence, communications diameter intelligence hub +3 more +5 moreOAuth 2 authorization service vulnerable to DDos attacks7.5 High
- latrix project latrixAn issue was discovered in LATRIX 0.6.0. SQL injection in the txtaccesscode parameter of inandout...9.8 Critical
- nokia g-120w-f firmwareAn issue was discovered on Nokia G-120W-F 3FE46606AGAB91 devices. There is Stored XSS in the...4.8 Medium
- debian linux, linux kernel +1 moreAn issue was discovered in the Linux kernel before 5.11.3 when a webcam device exists....6.2 Medium
skcmsOSS-FuzzSegv on unknown addressNo score- w1.fi hostapd, wpa supplicant +1 moreIn wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier...5.3 Medium
- creharmony node-etsy-clientApiKey secret could be revelated on network issue8.1 High
- devolutions remote desktop managerAn issue was discovered in Devolutions Remote Desktop Manager before 2020.2.12. There is a cross...5.4 Medium
- devolutions serverAn issue was discovered in Devolutions Server before 2020.3. There is a cross-site scripting (XSS...6.1 Medium
- devolutions serverAn issue was discovered in Devolutions Server before 2020.3. There is an exposure of sensitive...7.5 High
- devolutions serverAn issue was discovered in Devolutions Server before 2020.3. There is broken access control on...9.1 Critical
- devolutions serverAn issue was discovered in Devolutions Server before 2020.3. There is Broken Authentication with...8.1 High
- stripe, stripe vscode-stripe +1 moreVulnerability in Stripe for Visual Studio Code < 1.7.37.5 High
- django-registration project django-registrationPotential sensitive information disclosed in error reports3.7 Low
- devolutions remote desktop managerCross-Site Scripting (XSS) in Administrative Reports in Devolutions Remote Desktop Manager before...5.4 Medium
- fireeye email malware protection systemeMPS 9.0.1.923211 on the Central Management of FireEye EX 3500 devices allows remote...6.5 Medium
- fireeye email malware protection systemeMPS 9.0.1.923211 on FireEye EX 3500 devices allows remote authenticated users to conduct SQL...6.5 Medium
- mblog project mblogCross Site Scripting (XSS) vulnerability in mblog 3.5 via the signature field to /settings/profile.5.4 Medium
- Show moreLoading…