CVEs published in April 2021
1,956 vulnerabilities, 217 critical, 16 exploited.
- cisco small business rv series router firmware, rv340 firmware, rv340w firmware +2 more +4 moreCisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Authenticated Remote Code Execution Vulnerabilities6.3 Medium
- cisco small business rv series router firmware, rv340 firmware, rv340w firmware +2 more +4 moreCisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Authenticated Remote Code Execution Vulnerabilities6.3 Medium
- cisco unity connection, unified communications manager, unified communications manager im \& presence service +2 moreCisco Unified Communications Products Cross-Site Scripting Vulnerabilities6.1 Medium
- cisco unity connection, unified communications manager +1 moreCisco Unified Communications Products Cross-Site Scripting Vulnerabilities6.1 Medium
- cisco unity connection, unified communications manager +1 moreCisco Unified Communications Products Cross-Site Scripting Vulnerabilities6.1 Medium
- cisco unified communications managerCisco Unified Communications Manager Information Disclosure Vulnerability4.9 Medium
- cisco unified communications managerCisco Unified Communications Manager Self Care Portal Authorization Bypass Vulnerability4.3 Medium
- cisco advanced malware protection for endpoints, clamav, immunet +1 more +3 moreCisco Advanced Malware Protection for Endpoints Windows Connector, ClamAV for Windows, and Immunet DLL Hijacking Vulnerability7.0 High
- cisco unity connection, unified communications manager, unified communications manager im \& presence service +2 moreCisco Unified Communications Products Cross-Site Scripting Vulnerabilities6.1 Medium
- cisco unity connection, prime license manager, unified communications manager +1 more +3 moreCisco Unified Communications Products Remote Code Execution Vulnerability8.8 High
- cisco small business rv series router firmware, rv132w firmware, rv134w firmware +9 more +11 moreCisco Small Business RV Series Routers Link Layer Discovery Protocol Vulnerabilities7.4 High
- cisco small business rv series router firmware, rv132w firmware, rv134w firmware +9 more +11 moreCisco Small Business RV Series Routers Link Layer Discovery Protocol Vulnerabilities7.4 High
- cisco small business rv series router firmware, rv132w firmware, rv134w firmware +9 more +11 moreCisco Small Business RV Series Routers Link Layer Discovery Protocol Vulnerabilities7.4 High
- cisco sd-wan vmanage, catalyst sd-wan manager, sd-wan solution +2 moreCisco SD-WAN vManage Software Vulnerabilities7.8 High
- mitake smart stock selection system, smart stock selection +1 moreMitake Smart Stock Selection System - Broken Authentication6.5 Medium
- debian linux, linux kernel, fedoraproject fedora +10 more +12 moreIncorrect computation of branch displacements in BPF JIT compilers the Linux kernel can be abused...7.8 High
- rangerstudio directusDirectus 8 before 8.8.2 allows remote authenticated users to execute arbitrary code because file...8.8 High
- litespeedtech openlitespeedPrivilege Escalation in LiteSpeed Technologies OpenLiteSpeed web server version 1.7.8 allows...8.8 High
- kjur jsrsasignRSA signature validation vulnerability on maleable encoded message in jsrsasign9.1 Critical
- relic project relicIn RELIC before 2020-08-01, RSA PKCS#1 v1.5 signature forgery can occur because certain checks of...5.3 Medium
- relic project relicIn RELIC before 2021-04-03, there is a buffer overflow in PKCS#1 v1.5 signature verification...5.5 Medium
- canonical libunity-webapps, unity-firefox-extension, ubuntu linux +2 morePotential DoS through abuse of rate limit in libunity-webapps for Firefox4.3 Medium
- canonical unity-firefox-extension, ubuntu linux +1 morePossible remote DOS in WebApps4.3 Medium
- ffmpegFFmpeg <=4.3 contains a buffer overflow vulnerability in libavcodec through a crafted file that...8.8 High
- eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 moreIn Eclipse Mosquitto version 2.0.0 to 2.0.9, if an authenticated client that had connected with...6.5 Medium
- getgrav grav-plugin-adminUnauthenticated Arbitrary YAML Write/Update leads to Code Execution9.3 Critical
- wcmsDirectory traversal vulnerability in Wcms 0.3.2 allows an attacker to read arbitrary files on the...5.3 Medium
- wcmsServer-side request forgery in Wcms 0.3.2 let an attacker send crafted requests from the back-end...8.3 High
- wcmsServer-side request forgery in Wcms 0.3.2 lets an attacker send crafted requests from the back...8.3 High
- wcmsA Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Wcms 0.3.2, which allows...6.1 Medium
- wcmsDirectory traversal in Wcms 0.3.2 allows an attacker to read arbitrary files on the server that...8.6 High
- wcmsCross Site Scripting (XSS) vulnerability in wcms 0.3.2 allows remote attackers to inject...6.1 Medium
- freebsdIn FreeBSD 13.0-STABLE before n245117, 12.2-STABLE before r369551, 11.4-STABLE before r369559, 13...5.5 Medium
- freebsdIn FreeBSD 13.0-STABLE before n245050, 12.2-STABLE before r369525, 13.0-RC4 before p0, and 12.2...7.8 High
- freebsdIn FreeBSD 13.0-STABLE before n245118, 12.2-STABLE before r369552, 11.4-STABLE before r369560, 13...7.5 High
- libretro retroarchThe text-to-speech engine in libretro RetroArch for Windows 0.11 passes unsanitized input to...7.8 High
- jenkins promoted builds, jenkins project promoted builds plugin +1 moreCSRF vulnerability in Jenkins promoted builds Plugin4.3 Medium
- jenkinsView name validation bypass in Jenkins4.3 Medium
- jenkinsLack of type validation in agent related REST API in Jenkins4.3 Medium
- cern indicoIndico Tampering with links (e.g. password reset) in sent emails7.5 High
sass-rscrates.io`sass-rs` has been deprecatedNo score- metrics-util project metrics-utilAtomicBucket<T> unconditionally implements Send/Sync8.1 High
- gnu chess, fedoraproject fedora +1 moreGNU Chess 6.2.7 allows attackers to execute arbitrary code via crafted PGN (Portable Game...7.8 High
- gnome file-roller, fedoraproject fedora +1 morefr-archive-libarchive.c in GNOME file-roller through 3.38.0, as used by GNOME Shell and other...3.9 Low
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +2 more +4 morejackson-databind vulnerable to unsafe deserialization8.1 High
- phpnuke php-nukeThere is a SQL Injection vulnerability in PHP-Nuke 8.3.3 in the User Registration section,...9.8 Critical
- d-link dsl-320b-d1** UNSUPPORTED WHEN ASSIGNED ** D-Link DSL-320B-D1 devices through EU_1.25 are prone to multiple...9.8 Critical
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, pm8005 firmware +52 more +54 moreMemory corruption due to improper input validation while processing IO control which is...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +342 more +344 moreDenial of service while processing RTCP packets containing multiple SDES reports due to memory...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +308 more +310 moreTrustzone initialization code will disable xPU`s when memory dumps are enabled and lead to...7.2 High
- Show moreLoading…