CVEs published in April 2021
1,956 vulnerabilities, 217 critical, 16 exploited.
- xenHVM soft-reset crashes toolstack libxl requires all data structures passed across its public...5.5 Medium
- seafileSeafile 7.0.5 (2019) allows Persistent XSS via the "share of library functionality."5.4 Medium
- liquidfilesLiquidFiles 3.4.15 has stored XSS through the "send email" functionality when sending a file via...5.4 Medium
- timelybillsCleartext Storage in a File or on Disk in TimelyBills <= 1.7.0 for iOS and versions <= 1.21.115...5.9 Medium
- unionpayintl union payUnion Pay up to 3.3.12, for iOS mobile apps, contains a CWE-347: Improper Verification of...7.5 High
- unionpayintl union payUnion Pay up to 3.4.93.4.9, for android, contains a CWE-347: Improper Verification of...7.5 High
- unionpayintl union payUnion Pay up to 1.2.0, for web based versions contains a CWE-347: Improper Verification of...7.5 High
- citsmartCITSmart before 9.1.2.28 mishandles the "filtro de autocomplete."8.8 High
NetworkManager-libnm-develAlmaLinuxNetworkManager bug fix and enhancement updateNo scorezlib-staticAlmaLinuxzlib bug fix and enhancement updateNo scorefile-develAlmaLinuxfile bug fix and enhancement updateNo scoresanlock-develAlmaLinuxsanlock bug fix and enhancement updateNo scorepacemakerAlmaLinux,pacemaker-cliAlmaLinux,pacemaker-ctsAlmaLinux +4 more +6 morepacemaker bug fix and enhancement updateNo scorecustodiaAlmaLinux,python3-custodiaAlmaLinux,python3-jwcryptoAlmaLinux +5 more +7 moreidm:DL1 bug fix updateNo scoreresource-agentsAlmaLinux,resource-agents-aliyunAlmaLinux,resource-agents-gcpAlmaLinux +2 moreresource-agents bug fix and enhancement updateNo scorepcsAlmaLinux,pcs-snmpAlmaLinux +1 morepcs bug fix and enhancement updateNo score- vigra computer vision library project computer vision libraryVIGRA Computer Vision Library Version-1-11-1 contains a segmentation fault vulnerability in the...6.5 Medium
- serenityosSerenityOS 2021-03-27 contains a buffer overflow vulnerability in the EndOfCentralDirectory::read...9.1 Critical
- serenityosSerenityOS fixed as of c9f25bca048443e317f1994ba9b106f2386688c3 contains a buffer overflow...7.8 High
- ikuai8 ikuaiosiKuaiOS 3.4.8 Build 202012291059 has an arbitrary file download vulnerability, which can be...7.5 High
- riot-os riotRIOT-OS 2021.01 contains a buffer overflow vulnerability in /sys/net/gnrc/routing/rpl...9.8 Critical
- riot-os riotRIOT-OS 2021.01 contains a buffer overflow vulnerability in sys/net/gnrc/routing/rpl...9.8 Critical
- riot-os riotRIOT-OS 2020.01 contains a buffer overflow vulnerability in /sys/net/gnrc/routing/rpl...9.8 Critical
- serenityosSerenityOS Unspecified is affected by: Buffer Overflow. The impact is: obtain sensitive...7.5 High
- deltaflow project deltaflow, vangene deltaflow e-platform +1 moreVangene deltaFlow E-platform - Arbitrary File Upload9.8 Critical
- deltaflow project deltaflow, vangene deltaflow e-platform +1 moreVangene deltaFlow E-platform - Path Traversal7.5 High
- deltaflow project deltaflow, vangene deltaflow e-platform +1 moreVangene deltaFlow E-platform - Broken Authentication9.8 Critical
- djangoproject django, debian linux, fedoraproject fedora +2 moreDirectory Traversal in Django5.3 Medium
- redmine, debian linux +1 moreRedmine before 4.0.8 and 4.1.x before 4.1.2 allows attackers to discover the names of private...7.5 High
- redmine, debian linux +1 moreRedmine before 4.0.7 and 4.1.x before 4.1.1 has XSS via the back_url field.6.1 Medium
- redmine, debian linux +1 moreRedmine before 4.0.7 and 4.1.x before 4.1.1 has stored XSS via textile inline links.6.1 Medium
- redmine, debian linux +1 moreRedmine before 4.0.7 and 4.1.x before 4.1.1 allows attackers to discover the subject of a non...5.3 Medium
- redmine, debian linux +1 moreRedmine before 3.4.13 and 4.x before 4.0.6 mishandles markup data during Textile formatting.5.3 Medium
- redmine, debian linux +1 moreRedmine before 4.0.8 and 4.1.x before 4.1.2 allows attackers to bypass the add_issue_notes...9.8 Critical
- google androidAn issue was discovered on LG mobile devices with Android OS 11 software. Attackers can bypass...5.5 Medium
- google androidAn issue was discovered on LG mobile devices with Android OS 4.4 through 11 software. Attackers...7.1 High
- mediawiki, debian linux, fedoraproject fedora +2 moreAn issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. On...6.1 Medium
- mediawiki, debian linux, fedoraproject fedora +2 moreAn issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. On...6.1 Medium
- mediawiki, debian linux, fedoraproject fedora +2 moreAn issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2....5.3 Medium
- ocproducts composrComposr 10.0.36 allows upload and execution of PHP files.9.8 Critical
- ocproducts composrComposr 10.0.36 allows XSS in an XML script.6.1 Medium
- asus asmb9-ikvm firmware, bmc firmware for asmb9-ikvm, bmc firmware for e700 g4 +85 more +87 moreASUS BMC's firmware: path traversal - Delete video file function4.9 Medium
- asus asmb9-ikvm firmware, bmc firmware for asmb9-ikvm, bmc firmware for e700 g4 +85 more +87 moreASUS BMC's firmware: path traversal - Get video file function4.9 Medium
- asus asmb9-ikvm firmware, bmc firmware for asmb9-ikvm, bmc firmware for e700 g4 +85 more +87 moreASUS BMC's firmware: path traversal - Get Help file function4.9 Medium
- asus asmb9-ikvm firmware, bmc firmware for asmb9-ikvm, bmc firmware for e700 g4 +85 more +87 moreASUS BMC's firmware: path traversal - Record video file function4.9 Medium
- asus asmb8-ikvm firmware, bmc firmware for asmb8-ikvm, bmc firmware for z10pe-d16 ws +3 more +5 moreASUS BMC's firmware: path traversal - Delete SOL video file function4.9 Medium
- asus asmb8-ikvm firmware, bmc firmware for asmb8-ikvm, bmc firmware for z10pe-d16 ws +3 more +5 moreASUS BMC's firmware: command injection - Modify user’s information function7.2 High
- asus asmb8-ikvm firmware, bmc firmware for asmb8-ikvm, bmc firmware for z10pe-d16 ws +3 more +5 moreASUS BMC's firmware: command injection - Web Set Media Image function7.2 High
- asus asmb9-ikvm firmware, bmc firmware for asmb9-ikvm, bmc firmware for e700 g4 +85 more +87 moreASUS BMC's firmware: buffer overflow - Service configuration-2 function4.9 Medium
- asus asmb9-ikvm firmware, bmc firmware for asmb9-ikvm, bmc firmware for e700 g4 +85 more +87 moreASUS BMC's firmware: buffer overflow - Service configuration-1 function4.9 Medium
- Show moreLoading…