CVEs published in April 2021
1,956 vulnerabilities, 217 critical, 16 exploited.
- expresstech quiz and survey master – best quiz, exam and survey plugin for wordpress, quiz and survey master +1 moreQuiz And Survey Master < 7.1.12 - Authenticated SQL injection via shortcode8.8 High
- thrive themes focusblog by thrive themes, ignition by thrive themes, luxe by thrive themes +16 more +18 moreAll Thrive Themes Legacy Themes < 2.0.0 - Unauthenticated Arbitrary File Upload and Option Deletion9.1 Critical
- thrive themes focusblog by thrive themes, ignition by thrive themes, luxe by thrive themes +38 more +40 moreAll Thrive Themes and Plugins - Unauthenticated Option Update5.3 Medium
- facebook, unknown facebook for wordpress +1 moreFacebook for WordPress 3.0.0-3.0.3 - CSRF to Stored XSS and Settings Deletion8.8 High
- facebook, unknown facebook for wordpress +1 moreFacebook for WordPress < 3.0.0 - PHP Object Injection with POP Chain8.1 High
- unknown controlled admin accessControlled Admin Access < 1.5.2 - Improper Access Control & Privilege Escalation9.8 Critical
- givewp, givewp – donation plugin and fundraising platform, stellarwp givewp – donation plugin and fundraising platform +2 moreGiveWP < 2.10.0 - Reflected Cross Site Scripting (XSS)6.1 Medium
- tms-outsource wpdatatables, wpdatatables – tables & table charts +1 morewpDataTables < 3.4.2 - Blind SQL Injection via length Parameter6.5 Medium
- tms-outsource wpdatatables, wpdatatables – tables & table charts +1 morewpDataTables < 3.4.2 - Blind SQL Injection via start Parameter6.5 Medium
- tms-outsource wpdatatables, wpdatatables – tables & table charts +1 morewpDataTables < 3.4.2 - Improper Access Control leading to Table Data Deletion8.1 High
- tms-outsource wpdatatables, wpdatatables – tables & table charts +1 morewpDataTables < 3.4.2 - Improper Access Control leading to Table Permission Takeover8.1 High
- postcssRegular Expression Denial of Service (ReDoS)5.3 Medium
- sickrageCross-site scripting in SiCKRAGE5.4 Medium
- sickrageCross-site scripting in sickrage6.1 Medium
- monitorrAn authorization bypass vulnerability in Monitorr v1.7.6m in Monitorr/assets/config/_installation...9.8 Critical
- nolimits4web swiperPrototype Pollution7.5 High
- chrono-node project chrono-nodeRegular Expression Denial of Service (ReDoS)7.5 High
- intelbras tip200 firmware, tip200lite firmware +1 moreINTELBRAS TELEFONE IP TIP200 version 60.61.75.22 allows an attacker to obtain sensitive...7.5 High
- dlink dir-802 firmware** UNSUPPORTED WHEN ASSIGNED ** An issue was discovered on D-Link DIR-802 A1 devices through 1...8.8 High
- apache subversion, apple macos, debian linux +1 more +3 moreApache Subversion mod_dav_svn is vulnerable to memory corruption7.5 High
- ruby-lang rexml, ruby, fedoraproject fedora +2 moreREXML round-trip instability7.5 High
- apache subversion, apple macos, debian linux +1 more +3 moreApache Subversion SVN authz protected copyfrom paths regression4.3 Medium
tpm2-tss-engineopenSUSESecurity update for tpm2-tss-engineNo score- rust-lang rustIn the standard library in Rust before 1.2.0, BinaryHeap is not panic-safe. The binary heap is...7.5 High
- rust-lang rustIn the standard library in Rust before 1.49.0, String::retain() function has a panic safety...7.5 High
- rust-lang rustIn the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the...9.8 Critical
- ezxml project ezxml, debian linux +1 moreAn issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_internal_dtd(), while...6.5 Medium
bbswitchopenSUSE,crashopenSUSE,dpdkopenSUSE +12 more +14 moreSecurity update for openSUSE KMPsNo score- rust-lang rust, fedoraproject fedora +1 moreIn the standard library in Rust before 1.52.0, the Zip implementation can report an incorrect...9.8 Critical
- rust-lang rust, fedoraproject fedora +1 moreIn the standard library in Rust before 1.52.0, the Zip implementation calls...7.5 High
- rust-lang rustIn the standard library in Rust before 1.51.0, the Zip implementation calls...7.5 High
- rust-lang rust, fedoraproject fedora +1 moreIn the standard library in Rust before 1.52.0, the Zip implementation has a panic safety issue....5.3 Medium
- rust-lang rustIn the standard library in Rust before 1.50.0, read_to_end() does not validate the return value...7.5 High
bccopenSUSESecurity update for bccNo score- valvesoftware steam clientValve Steam through 2021-04-10, when a Source engine game is installed, allows remote...8.0 High
- sonicwall global management system (gms), global management system +1 moreA command execution vulnerability in SonicWall GMS 9.3 allows a remote unauthenticated attacker...9.8 Critical
cryptofuzzOSS-FuzzHeap-buffer-overflow in load_u32_beNo scorecryptofuzzOSS-FuzzNull-dereference READNo scorec-blosc2OSS-FuzzHeap-buffer-overflow in frame_get_vlmetalayersNo scorelibredwgOSS-FuzzSegv on unknown address in dwg_free_summaryinfoNo score- zoom chatZoom Chat through 2021-04-09 on Windows and macOS allows certain remote authenticated attackers...8.5 High
- go-vela vela, devolutions server +1 moreReject unauthorized access with GitHub PATs7.5 High
- demon1a discord-reconRemote code execution on discord-recon .dirsearch and .arjun commands due to improper input validation9.9 Critical
- online book store project book storeSQL injection in admin.php in Online Book Store 1.0 allows remote attackers to execute arbitrary...9.8 Critical
- sonicwall email security, email security appliance 3300 firmware, email security appliance 4300 firmware +8 more +10 moreSonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post...7.2 High
- sonicwall email security, email security appliance 3300 firmware, email security appliance 4300 firmware +8 more +10 moreA vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an...9.8 Critical
- dreamreport dream reportA privilege escalation vulnerability exists in Dream Report 5 R20-2. In the default configuration...9.3 Critical
- larsens calendar project calendarCross Site Scripting (XSS) vulnerability in the Larsens Calender plugin Version <= 1.2 for...5.4 Medium
- dreamreport dream reportA privilege escalation vulnerability exists in Dream Report 5 R20-2. IIn the default...9.3 Critical
- dreamreport dream reportA privilege escalation vulnerability exists in Dream Report 5 R20-2. COM Class Identifiers (CLSID...9.3 Critical
- Show moreLoading…