CVEs published in April 2021
1,956 vulnerabilities, 217 critical, 16 exploited.
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 moreOut-of-bounds read vulnerability while accessing DTMF payload due to lack of check of buffer...8.2 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +317 more +319 moreOut of bound memory read while unpacking data due to lack of offset length check in Snapdragon...8.2 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8017 firmware, apq8037 firmware +315 more +317 moreA double free condition can occur when the device moves to suspend mode during secure playback in...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +200 more +202 moreUnintended reads and writes by NS EL2 in access control driver due to lack of check of input...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon mobile, qualcomm aqt1000 firmware, ar8035 firmware +135 more +137 moreRRC sends a connection establishment success to NAS even though connection setup validation...7.5 High
- qualcomm, inc. snapdragon industrial iot, snapdragon mobile, qualcomm pm660 firmware, pm660a firmware +36 more +38 moreUser could gain access to secure memory due to incorrect argument into address range validation...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon mobile, qualcomm csrb31024 firmware, pm3003a firmware +163 more +165 moreMemory crash when accessing histogram type KPI input received due to lack of check of histogram...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon mobile, qualcomm csrb31024 firmware, pm3003a firmware +168 more +170 moreMemory corruption due to invalid value of total dimension in the non-histogram type KPI could...8.4 High
- qualcomm, inc. snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm ar8035 firmware, pm4125 firmware +65 more +67 morePossible memory corruption in RPM region due to improper XPU configuration in Snapdragon...9.3 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +474 more +476 moreOut of bound read occurs while processing crafted SDP due to lack of check of null string in...8.2 High
- eikisoft archive collectively operation utilityDirectory traversal vulnerability in Archive collectively operation utility Ver.2.10.1.0 and...7.1 High
- wonderlink yomi-searchCross-site scripting vulnerability in Yomi-Search Ver4.22 allows remote attackers to inject an...6.1 Medium
- wonderlink yomi-searchCross-site scripting vulnerability in Yomi-Search Ver4.22 allows remote attackers to inject an...6.1 Medium
- wonderlink yomi-searchCross-site scripting vulnerability in Yomi-Search Ver4.22 allows remote attackers to inject an...6.1 Medium
- click-ranker click rankerCross-site scripting vulnerability in Click Ranker Ver.3.5 allows remote attackers to inject an...6.1 Medium
- daifukuya kagemaiCross-site request forgery (CSRF) vulnerability in Kagemai 0.8.8 allows remote attackers to...8.8 High
- daifukuya kagemaiCross-site scripting vulnerability in Kagemai 0.8.8 allows remote attackers to inject an...6.1 Medium
- daifukuya kagemaiCross-site scripting vulnerability in Kagemai 0.8.8 allows remote attackers to inject an...6.1 Medium
- cgi script market magazinegerzCross-site scripting vulnerability in MagazinegerZ v.1.01 allows remote attackers to inject an...6.1 Medium
- dmasoftlab radius managerDMA Softlab Radius Manager 4.4.0 allows CSRF with impacts such as adding new manager accounts via...8.8 High
libjpeg-turboOSS-FuzzHeap-buffer-overflow in get_word_rgb_rowNo scorepopplerOSS-FuzzHeap-buffer-overflow in TextPool::getPoolNo score- debian linux, linux kernel, netapp cloud backup +8 more +10 moreA flaw was found in the Nosy driver in the Linux kernel. This issue allows a device to be...7.8 High
- debian linux, linux kernel +1 moreAn issue was discovered in the Linux kernel before 5.8. arch/x86/kvm/svm/svm.c allows a...5.5 Medium
- linux kernel, fedoraproject fedora +1 moreAn issue was discovered in the Linux kernel through 5.11.11. synic_get in arch/x86/kvm/hyperv.c...5.5 Medium
- debian linux, linux kernel +1 moreAn issue was discovered in the Linux kernel before 5.9. arch/x86/kvm/svm/sev.c allows attackers...5.5 Medium
- linux kernelAn issue was discovered in the Linux kernel before 5.8.10. virt/kvm/kvm_main.c has a...5.5 Medium
- linux kernelAn issue was discovered in the Linux kernel before 5.7. The KVM subsystem allows out-of-range...7.8 High
- proofpoint insider threat managementThe Proofpoint Insider Threat Management Server (formerly ObserveIT Server) is missing an...8.1 High
- proofpoint insider threat managementThe Proofpoint Insider Threat Management Server (formerly ObserveIT Server) is vulnerable to XML...7.2 High
- proofpoint insider threat managementThe Proofpoint Insider Threat Management Agents (formerly ObserveIT Agent) for MacOS and Linux...7.4 High
- proofpoint insider threat managementProofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.11.1 allows...6.1 Medium
- openiamOpenIAM before 4.2.0.3 does not verify if a user has permissions to perform /webconsole/rest/api/...8.1 High
- openiamOpenIAM before 4.2.0.3 has Incorrect Access Control for the Create User, Modify User Permissions,...9.8 Critical
- openiamOpenIAM before 4.2.0.3 allows Directory Traversal in the Batch task.5.3 Medium
- openiamOpenIAM before 4.2.0.3 allows XSS in the Add New User feature.6.1 Medium
- openiamOpenIAM before 4.2.0.3 allows remote attackers to execute arbitrary code via Groovy Script.9.8 Critical
- syncthingCrash due to malformed relay protocol message7.5 High
- teradici pcoip connection manager and security gatewaySensitive smart card data is logged in default INFO logs by Teradici's PCoIP Connection Manager...4.6 Medium
- projenExposure of Version-Control Repository to an Unauthorized Control Sphere in projen6.8 Medium
- openresty lua-nginx-modulengx_http_lua_module (aka lua-nginx-module) before 0.10.16 in OpenResty allows unsafe characters...5.3 Medium
natsnpmClient TLS credentials sent raw to server in npm package natsNo score- sebhildebrandt systeminformationCommand Injection Vulnerability in systeminformation8.9 High
- ckeditor ckeditor5, ckeditor5-engine, ckeditor5-font +6 more +8 moreRegular expression Denial of Service in multiple packages6.5 Medium
- axiomthemes prismaCommand injection vulnerability in @prisma/sdk in getPackedPackage function7.7 High
- consensys discoveryConsensys Discovery Nonce Reuse5.3 Medium
- mongodb compassLocal privilege escalation in MongoDB Compass for Windows4.8 Medium
- facebook whatsapp business for android, whatsapp for android, whatsapp +1 more +3 moreA cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for...7.5 High
- facebook whatsapp business for android, whatsapp business for ios, whatsapp for android +3 more +5 moreA missing bounds check within the audio decoding pipeline for WhatsApp calls in WhatsApp for...9.8 Critical
- linuxfoundation umoci, sylabs singularity +1 moreImproper input validation in umoci5.5 Medium
- Show moreLoading…