CVEs published in April 2021
1,956 vulnerabilities, 217 critical, 16 exploited.
- intelliants subrionsubrion CMS Cross Site Scripting (XSS) vulnerability6.1 Medium
- rukovoditelAn exploitable SQL injection vulnerability exists in "global_lists/choices" page of the...5.4 Medium
- rukovoditelAn exploitable SQL injection vulnerability exists in the "forms_fields_rules/rules" page of the...5.4 Medium
- rukovoditelAn exploitable SQL injection vulnerability exists in the "access_rules/rules_form" page of the...5.4 Medium
- samsung accountUsing unsafe PendingIntent in Samsung Account in versions 10.8.0.4 in Android P(9.0) and below,...5.5 Medium
- samsung bixbyImproper handling of exceptional conditions in Bixby prior to version 3.0.53.02 allows attacker...5.8 Medium
- notfound galleryIntent redirection vulnerability in Gallery prior to version 5.4.16.1 allows attacker to execute...4.0 Medium
- samsung smartthingsImproper access control of certain port in SmartThings prior to version 1.7.63.6 allows remote...4.3 Medium
- samsung experience serviceIntent redirection in Samsung Experience Service versions 10.8.0.4 in Android P(9.0) below, and...3.3 Low
- samsung emailAn improper synchronization logic in Samsung Email prior to version 6.1.41.0 can leak messages in...3.1 Low
- samsung emailUsing predictable index for attachments in Samsung Email prior to version 6.1.41.0 allows remote...6.5 Medium
- samsung membersAn improper authorization vulnerability in Samsung Members "samsungrewards" scheme for deeplink...8.6 High
- samsung customization serviceUsing unsafe PendingIntent in Customization Service prior to version 2.2.02.1 in Android O(8.x),...5.5 Medium
- google android, samsung mobile devices +1 moreAn improper exception control in softsimd prior to SMR APR-2021 Release 1 allows unprivileged...5.9 Medium
- google android, samsung mobile devices +1 moreA pendingIntent hijacking vulnerability in Secure Folder prior to SMR APR-2021 Release 1 allows...4.0 Medium
- google android, samsung mobile devices +1 moreAn improper access control in ActivityManagerService prior to SMR APR-2021 Release 1 allows...6.8 Medium
- google android, samsung mobile devices +1 moreAn improper permission management in CertInstaller prior to SMR APR-2021 Release 1 allows...6.8 Medium
- google android, samsung mobile devices +1 moreAn improper access control vulnerability in stickerCenter prior to SMR APR-2021 Release 1 allows...7.9 High
- google android, samsung mobile devices +1 moreAn improper input validation vulnerability in libswmfextractor library prior to SMR APR-2021...9.0 Critical
- google android, samsung mobile devices +1 moreAn improper SELinux policy prior to SMR APR-2021 Release 1 allows local attackers to access AP...4.0 Medium
- google android, samsung mobile devices +1 moreA vulnerability that stores IMSI values in an improper path prior to SMR APR-2021 Release 1...4.0 Medium
- google android, samsung mobile devices +1 moreA pendingIntent hijacking vulnerability in Create Movie prior to SMR APR-2021 Release 1 in...5.6 Medium
- google android, samsung mobile devices +1 moreAn improper caller check vulnerability in Managed Provisioning prior to SMR APR-2021 Release 1...7.1 High
- zte zxa10 c300m firmwareA ZTE product has a configuration error vulnerability. Because a certain port is open by default,...5.3 Medium
- zoho manageengine servicedesk plusInsufficient output sanitization in ManageEngine ServiceDesk Plus before version 11200 and...6.1 Medium
- ibm spectrum scaleIBM Spectrum Scale 5.1.0.1 could allow a local attacker to bypass the filesystem audit logging...4.0 Medium
- mirahezebots channelmgnt, sopel-channelmgnt +1 moreImproper Input Validation in sopel-plugins.channelmgnt7.6 High
fwupdateSUSESecurity update for fwupdateNo score- erlang project erlang/otp, erlang erlang\/otp +1 moreA local privilege escalation vulnerability was discovered in Erlang/OTP prior to version 23.2.3....7.0 High
- skyworthdigital rn510 firmwareSkyworth Digital Technology RN510 V.3.1.0.4 RN510 V.3.1.0.4 contains a buffer overflow...8.8 High
- skyworthdigital rn510 firmwareSkyworth Digital Technology RN510 V.3.1.0.4 contains a cross-site request forgery (CSRF)...6.5 Medium
- skyworthdigital rn510 firmwareSkyworth Digital Technology RN510 V.3.1.0.4 is affected by an incorrect access control...5.4 Medium
- indionetworks unibox u1000 firmware, unibox u2500 firmware, unibox u5000 firmware +2 more +4 moreUnibox SMB 2.4 and UniBox Enterprise Series 2.4 and UniBox Campus Series 2.4 contain a cross-site...8.8 High
- indionetworks unibox u1000 firmware, unibox u2500 firmware, unibox u5000 firmware +2 more +4 moreUnibox U-50 2.4 and UniBox Enterprise Series 2.4 and UniBox Campus Series 2.4 contain a OS...8.8 High
- mediawiki, debian linux, fedoraproject fedora +2 moreAn issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2....4.3 Medium
- mediawiki, fedoraproject fedora +1 moreAn issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2....4.3 Medium
- mediawiki, debian linux, fedoraproject fedora +2 moreAn issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2....4.3 Medium
- mediawiki, debian linux, fedoraproject fedora +2 moreAn issue was discovered in MediaWiki before 1.31.13 and 1.32.x through 1.35.x before 1.35.2. When...4.3 Medium
- wikimedia parsoidWikimedia Parsoid vulnerable to Cross-site Scripting (XSS)6.1 Medium
- atlassian data center, jira, jira data center +1 more +3 moreThe dashboard gadgets preference resource of the Atlassian gadgets plugin used in Jira Server and...5.3 Medium
unicornOSS-FuzzUNKNOWN READ in helper_uc_tracecodeNo scoreharfbuzzOSS-FuzzHeap-buffer-overflow in OT::AnchorFormat1* hb_serialize_context_t::embed<OT::AnchorFormat1>No scoreqemuOSS-FuzzStack-use-after-return in v9fs_setattrNo scorecryptofuzzOSS-FuzzHeap-buffer-overflow in Camellia_EkeygenNo scorecryptofuzzOSS-FuzzUse-of-uninitialized-value in DES_set_key_uncheckedNo scorecryptofuzzOSS-FuzzHeap-buffer-overflow in ossl_aria_set_encrypt_keyNo scorefwupdateopenSUSESecurity update for fwupdateNo score- [unknown] satellite, theforeman foreman azurerm +1 moreA flaw was found in Red Hat Satellite in tfm-rubygem-foreman_azure_rm in versions before 2.2.0. A...6.3 Medium
- dnsmasq, fedoraproject fedora, oracle communications cloud native core network function cloud native environment +1 more +3 moreA flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for...4.0 Medium
- exiv2, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in Exiv2 in versions before and including 0.27.4-RC1. Improper input validation...6.5 Medium
- Show moreLoading…