CVEs published in April 2021
1,956 vulnerabilities, 217 critical, 16 exploited.
- forcepoint web security content gateway, data loss prevention, email security +2 moreForcepoint Web Security Content Gateway versions prior to 8.5.4 improperly process XML input,...7.5 High
- microfocus application automation toolsCSRF vulnerability in Jenkins Micro Focus Application Automation Tools Plugin6.5 Medium
- microfocus application automation toolsSSL/TLS certificate validation unconditionally disabled by Jenkins Micro Focus Application Automation Tools Plugin6.5 Medium
- microfocus application automation toolsReflected XSS vulnerability in Jenkins Micro Focus Application Automation Tools Plugin6.1 Medium
- microfocus application automation toolsMissing permission checks in Micro Focus Application Automation Tools Plugin6.5 Medium
- mi miuiThe application in the mobile phone can unauthorized access to the list of running processes in...5.5 Medium
- mi miuiThe application in the mobile phone can read the SNO information of the device, Xiaomi 10 MIUI <...5.5 Medium
- dolby audio x2The Dolby Audio X2 (DAX2) API service before 0.8.8.90 on Windows allows local users to gain...7.8 High
- huawei ips6000e firmware, ips module firmware, ngfw module firmware +9 more +11 moreThere is a memory leak vulnerability in some Huawei products. An authenticated remote attacker...6.5 Medium
- mi ax1800 firmware, rm1800 firmware +1 moreOn Xiaomi router AX1800 rom version < 1.0.336 and RM1800 root version < 1.0.26, the encryption...7.5 High
- mi ax3600 firmwareA RACE CONDITION on XQBACKUP causes a decompression path error on Xiaomi router AX3600 with ROM...8.1 High
- microfocus operations bridge managerAuthentication bypass vulnerability in Micro Focus Operations Bridge Manager affects versions...9.8 Critical
- cloudfoundry capi-release, cf-deployment +1 moreCloud Controller API versions prior to 1.106.0 logs service broker credentials if the default...6.5 Medium
- aprelium abyss web server x1An issue was discovered in Aprelium Abyss Web Server X1 2.12.1 and 2.14. A crafted HTTP request...7.5 High
- squirroThe Squirro Insights Engine was affected by a Reflected Cross-Site Scripting (XSS) vulnerability...6.1 Medium
flask-security-tooPyPICSRF Vuln can expose user's QRcodeNo score- realtek rtl8723de firmwareAn issue was discovered in Realtek rtl8723de BLE Stack <= 4.1 that allows remote attackers to...7.5 High
tpm2-tss-engineSUSESecurity update for tpm2-tss-engineNo scorefwupdateSUSESecurity update for fwupdateNo score- learnsite project learnsiteLearnsite 1.2.5.0 contains a remote privilege escalation vulnerability in /Manager/index.aspx...8.8 High
- zzcmszzcms 201910 contains an access control vulnerability through escalation of privileges in /user...9.8 Critical
- vestacp vesta control panelVestaCP through 0.9.8-24 allows the admin user to escalate privileges to root because the Sudo...7.2 High
- vestacp control panelVestaCP through 0.9.8-24 allows attackers to gain privileges by creating symlinks to files for...7.8 High
- nagios network analyzerSelf Authenticated XSS in Nagios Network Analyzer before 2.4.2 via the nagiosna/groups/queries page.6.1 Medium
- nagios network analyzerSQL injection vulnerability in Nagios Network Analyzer before 2.4.3 via the o[col] parameter to...9.8 Critical
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, and 8.5 is vulnerable to server-side request forgery ...4.3 Medium
- web-school enterprise resource planningA stored XSS vulnerability exists in Web-School ERP V 5.0 via (Add Events) in the event name and...5.4 Medium
- web-school enterprise resource planningWeb-School ERP V 5.0 contains a cross-site request forgery (CSRF) vulnerability that allows a...6.5 Medium
- web-school enterprise resource planningA blind XSS vulnerability exists in Web-School ERP V 5.0 via (Add Events) in event name and...6.1 Medium
- web-school enterprise resource planningWeb-School ERP V 5.0 contains a cross-site request forgery (CSRF) vulnerability that allows a...6.5 Medium
- asus gputweak iiAsIO2_64.sys and AsIO2_32.sys in ASUS GPUTweak II before 2.3.0.3 allow low-privileged users to...5.5 Medium
- asus gputweak iiAsIO2_64.sys and AsIO2_32.sys in ASUS GPUTweak II before 2.3.0.3 allow low-privileged users to...7.8 High
- esri arcgis enterpriseA cross-site scripting (XSS) vulnerability in the Document Link of documents in ESRI ArcGIS...5.4 Medium
fwupdateSUSESecurity update for fwupdateNo scorefwupdateSUSESecurity update for fwupdateNo score- cisco clamavClam AntiVirus (ClamAV) Email Parser Denial of Service Vulnerability7.5 High
- cisco clamav, debian linux +1 moreClam AntiVirus (ClamAV) PDF Parser Denial of Service Vulnerability7.5 High
- cisco clamavClam AntiVirus (ClamAV) Excel XLM Parser Denial of Service Vulnerability7.5 High
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software Command Injection Vulnerability6.6 Medium
- cisco sd-wan vmanage, catalyst sd-wan manager, sd-wan solution +2 moreCisco SD-WAN vManage Software Vulnerabilities7.8 High
- cisco sd-wan vmanage, catalyst sd-wan manager, sd-wan solution +2 moreCisco SD-WAN vManage Software Vulnerabilities7.8 High
- cisco umbrella, umbrella insights virtual appliance +1 moreCisco Umbrella Link and CSV Formula Injection Vulnerabilities6.5 Medium
- cisco umbrella, umbrella insights virtual appliance +1 moreCisco Umbrella Link and CSV Formula Injection Vulnerabilities6.5 Medium
- cisco small business rv series router firmware, rv340 firmware, rv340w firmware +2 more +4 moreCisco Small Business RV Series Routers Vulnerabilities5.3 Medium
- cisco small business rv series router firmware, rv160 firmware, rv160w firmware +7 more +9 moreCisco Small Business RV Series Routers Vulnerabilities5.3 Medium
- cisco webex meetingsCisco Webex Meetings for Android Avatar Modification Vulnerability4.3 Medium
- cisco unified intelligence center, unified contact center express +1 moreCisco Unified Intelligence Center Reflected Cross-Site Scripting Vulnerability6.1 Medium
- cisco small business rv series router firmware, rv110w firmware, rv130 firmware +2 more +4 moreCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution Vulnerability9.8 Critical
- cisco webex meetingsCisco Webex Meetings HTML Injection Vulnerability4.7 Medium
- cisco small business rv series router firmware, rv340 firmware, rv340w firmware +2 more +4 moreCisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Authenticated Remote Code Execution Vulnerabilities6.3 Medium
- Show moreLoading…