CVEs published in April 2021
1,956 vulnerabilities, 217 critical, 16 exploited.
- svelteThe unofficial Svelte extension before 104.8.0 for Visual Studio Code allows attackers to execute...7.8 High
- vim project vimVSCodeVim before 1.19.0 allows attackers to execute arbitrary code via a crafted workspace...7.8 High
- python, debian linux, fedoraproject fedora +10 more +12 moreThere's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to...5.7 Medium
- wso2 api manager, api manager analytics, api microgateway +5 more +7 moreWSO2 Management Console through 5.10 allows XSS via the carbon/admin/login.jsp msgId parameter.6.1 Medium
OpenIPMIopenSUSESecurity update for OpenIPMINo scorelibvipsOSS-FuzzHeap-buffer-overflow in gif_internal_decode_frameNo scoreskcmsOSS-FuzzStack-buffer-overflow in read_mft_commonNo score- terra-master f2-210 firmwareTerraMaster F2-210 devices through 2021-04-03 use UPnP to make the admin web server accessible...7.3 High
- debian linux, linux kernel +1 moreThe fix for XSA-365 includes initialization of pointers such that subsequent cleanup code wouldn...6.5 Medium
libheifOSS-FuzzGlobal-buffer-overflow in read_coding_unitNo scoreassimpOSS-FuzzHeap-use-after-free in std::__1::vector<char, std::__1::allocator<char> >::sizeNo score- qtA flaw was found in Qt. An out-of-bounds read vulnerability was found in QRadialFetchSimd in qt...7.1 High
- linux kernelarch/x86/kvm/svm/nested.c in the Linux kernel before 5.11.12 has a use-after-free in which an AMD...7.4 High
- dell wyse management suiteWyse Management Suite versions up to 3.2 contains a vulnerability wherein a malicious...4.3 Medium
- dell wyse thinos, wyse proprietary os (thinos) +1 moreDell Wyse ThinOS 8.6 MR9 contains remediation for an improper management server validation...5.0 Medium
- dell system update, dellemc system update - dsu +1 moreDell System Update (DSU) 1.9 and earlier versions contain a denial of service vulnerability. A...3.8 Low
- docsifyjs docsifyDocsify vulnerable to cross-site scripting due to mishandled encoding6.1 Medium
- dlink dir-846 firmwareHNAP1/control/SetMasterWLanSettings.php in D-Link D-Link Router DIR-846 DIR-846 A1_100.26 allows...9.8 Critical
- wuzhicmsDirectory traversal in coreframe/app/template/admin/index.php in WUZHI CMS 4.1.0 allows attackers...4.3 Medium
- coreftp core ftpBuffer overflow in Core FTP LE v2.2 allows local attackers to cause a denial or service (crash)...5.5 Medium
- emlogVulnerability in emlog v6.0.0 allows user to upload webshells via zip plugin module.9.8 Critical
- dlink dir-878 firmwareAn issue was discovered in prog.cgi on D-Link DIR-878 1.30B08 devices. Because strcat is misused,...9.8 Critical
- lightmeter controlcenterLightmeter ControlCenter 1.1.0 through 1.5.x before 1.5.1 allows anyone who knows the URL of a...6.5 Medium
- jamfJamf Pro before 10.28.0 allows XSS related to inventory history, aka PI-009376.6.1 Medium
- magpierss project magpierssBecause of no validation on a curl command in MagpieRSS 0.72 in the /extlib/Snoopy.class.inc file...5.3 Medium
- magpierss project magpierssBecause of a incorrect escaped exec command in MagpieRSS in 0.72 in the /extlib/Snoopy.class.inc...9.8 Critical
- softing opc toolboxSofting AG OPC Toolbox through 4.10.1.13035 allows /en/diag_values.html Stored XSS via the...5.4 Medium
- softing opc toolboxA Cross-Site Request Forgery (CSRF) vulnerability in en/cfg_setpwd.html in Softing AG OPC Toolbox...8.8 High
- apple macos, ios and ipados, ipad os +2 more +4 moreAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS...7.8 High
- piwigoSQL injection exists in Piwigo before 11.4.0 via the language parameter to admin.php?page=languages.7.2 High
- apple macos, tvos, watchos +4 more +6 moreThis issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2,...7.5 High
- rstudio shiny serverDirectory traversal in RStudio Shiny Server before 1.5.16 allows attackers to read the...5.3 Medium
- wizconnected colors a60 firmwareAn issue was discovered in WiZ Colors A60 1.14.0. Wi-Fi credentials are stored in cleartext in...5.5 Medium
- apple macos, tvos, watchos +4 more +6 moreA logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur...9.8 Critical
- wizconnected wizAn issue was discovered in WiZ Colors A60 1.14.0. API credentials are locally logged.5.5 Medium
- apple ios, ipados, watchos +3 more +5 moreThis issue was addressed by improved management of object lifetimes. This issue is fixed in iOS...6.1 Medium
- apple ipados, macos, safari +5 more +7 moreA memory corruption issue was addressed with improved validation. This issue is fixed in iOS 14.4...8.8 High
- apple ipados, macos, ios and ipados +5 more +7 moreA logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2...9.8 Critical
- apple macos, mac os x +1 moreAn out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS...7.8 High
- apple macos, mac os x +1 moreA race condition was addressed with additional validation. This issue is fixed in macOS Big Sur...7.0 High
- apple macosThe issue was addressed with improved permissions logic. This issue is fixed in macOS Big Sur 11...3.3 Low
- apple macos, mac os x +1 moreA logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur...7.8 High
- apple xcodeA path handling issue was addressed with improved validation. This issue is fixed in Xcode 12.4....5.5 Medium
- apple macos, tvos, watchos +4 more +6 moreThe issue was addressed with improved permissions logic. This issue is fixed in macOS Big Sur 11...5.5 Medium
- apple ios and ipados, ipad os, iphone os +2 moreAn out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS...9.8 Critical
- apple macos, tvos, watchos +4 more +6 moreThis issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2,...7.8 High
- apple ios and ipados, ipad os, iphone os +2 moreAn out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS...9.8 Critical
- apple ios and ipados, ipad os, iphone os +2 moreAn out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14...9.8 Critical
- apple macos, mac os x +1 moreAn out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS...7.8 High
- apple ipados, macos, tvos +4 more +6 moreAn out-of-bounds read issue existed that led to the disclosure of kernel memory. This was...5.5 Medium
- Show moreLoading…