CVEs published in April 2021
1,956 vulnerabilities, 217 critical, 16 exploited.
- genexis platinum 4410 firmwareGenexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute arbitrary code...9.8 Critical
- papooCertain Papoo products are affected by: Cross Site Request Forgery (CSRF) in the admin interface....8.8 High
- htmlyhtmly 2.8.0 allows stored XSS via the blog title, Tagline, or Description to config.html.php.5.4 Medium
- glsl linting project lintingThe unofficial GLSL Linting extension before 1.4.0 for Visual Studio Code allows remote code...9.8 Critical
libavcOSS-FuzzHeap-buffer-overflow in ih264d_decode_slice_threadNo score- mozilla thunderbirdAn attacker may perform a DoS attack to prevent a user from sending encrypted email to a...6.5 Medium
- mozilla thunderbirdThunderbird did not check if the user ID associated with an OpenPGP key has a valid self...4.3 Medium
- mozilla thunderbirdIf a Thunderbird user has previously imported Alice's OpenPGP key, and Alice has extended the...6.8 Medium
- remoteclinic remote clinicCross Site Scripting (XSS) in Remote Clinic v2.0 via the Full Name field on register-patient.php.5.4 Medium
- remoteclinic remote clinicCross Site Scripting (XSS) in Remote Clinic v2.0 via the Symptons field on patients/register...5.4 Medium
- remoteclinic remote clinicCross Site Scripting (XSS) in Remote Clinic v2.0 via the First Name or Last Name field on staff...5.4 Medium
- remoteclinic remote clinicCross Site Scripting (XSS) in Remote Clinic v2.0 via the "Clinic Name", "Clinic Address", "Clinic...5.4 Medium
- remoteclinic remote clinicCross Site Scripting (XSS) in Remote Clinic v2.0 via the "Fever" or "Blood Pressure" field on the...5.4 Medium
- element-hq synapse, fedoraproject fedora +1 moreOpen redirect via transitional IPv6 addresses on dual-stack networks6.3 Medium
- element-hq synapse, fedoraproject fedora +1 moreDenial of service (via resource exhaustion) due to improper input validation on groups/communities endpoints5.3 Medium
- gradle, quarkus +1 moreInformation disclosure through temporary directory permissions4.0 Medium
- micro focus advanced authentication, microfocus netiq advanced authentication +1 moreAdvanced Authentication Improper Session Management3.8 Low
- element-hq synapse, fedoraproject fedora +1 moreDenial of service (via resource exhaustion) due to improper input validation on third-party identifier endpoints5.3 Medium
- slab quillCross-site Scripting in quill6.1 Medium
rygelMageiaUpdated rygel packages fix a security vulnerabilityNo score- dell peripheral managerDell Peripheral Manager 1.3.1 or greater contains remediation for a local privilege escalation...7.8 High
- dell emc storage monitoring and reporting, storage monitoring and reporting, storage resource manager +2 moreDell SRM versions prior to 4.5.0.1 and Dell SMR versions prior to 4.5.0.1 contain an Untrusted...9.8 Critical
- lispbx project lispbxIn Liberty lisPBX 2.0-4, configuration backup files can be retrieved remotely from /backup/lispbx...7.5 High
- outsystems lifetime management console, outsystems, outsystems platform server +2 moreThe ECT Provider component in OutSystems Platform Server 10 before 10.0.1104.0 and 11 before 11.9...8.6 High
- pega platformpyActivity in Pega Platform 8.4.0.237 has a security misconfiguration that leads to an improper...9.8 Critical
- ibm collaborative lifecycle management, doors next, engineering lifecycle optimization +13 more +15 moreIBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ibm collaborative lifecycle management, doors next, engineering lifecycle optimization +13 more +15 moreIBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow...5.9 Medium
- ibm collaborative lifecycle management, doors next, engineering lifecycle optimization +13 more +15 moreIBM Jazz Team Server products contain an undisclosed vulnerability that could allow an...4.3 Medium
- ibm collaborative lifecycle management, doors next, engineering lifecycle optimization +13 more +15 moreIBM Jazz Team Server products are vulnerable to stored cross-site scripting. This vulnerability...6.4 Medium
- tp-link tl-wr802n firmwareTP-Link TL-WR802N(US), Archer_C50v5_US v4_200 <= 2020.06 contains a buffer overflow vulnerability...8.1 High
- asus rt-ac1750 b1 firmware, rt-ac1900 firmware, rt-ac1900p firmware +24 more +26 moreIn ASUS RT-AX3000, ZenWiFi AX (XT8), RT-AX88U, and other ASUS routers with firmware < 3.0.0.4.386...7.5 High
- tp-link tl-xdr1850 firmware, tl-xdr1860 firmware, tl-xdr3230 firmware +3 more +5 moreIn TP-Link TL-XDR3230 < 1.0.12, TL-XDR1850 < 1.0.9, TL-XDR1860 < 1.0.14, TL-XDR3250 < 1.0.2, TL...7.5 High
- gargoyle-router gargoyleIn Gargoyle OS 1.12.0, when IPv6 is used, a routing loop can occur that generates excessive...7.5 High
- bitdefender safepaySame-origin policy vulnerability in Bitdefender Safepay5.5 Medium
- mongodb database tools, mongomirror +1 moreSpecific command line parameter might result in accepting invalid certificate4.2 Medium
- fatek winproladderThe Fatek Automation WinProladder Versions 3.3 and prior are vulnerable to an integer underflow,...7.8 High
- gitlabA path traversal vulnerability via the GitLab Workhorse in all versions of GitLab could result in the leakage of a JWT token8.5 High
- fortinet fortios, fortiproxy, fortiproxy, fortios +2 moreA Stack-based Buffer Overflow vulnerability in the HTTPD daemon of FortiOS 6.0.10 and below, 6.2...5.4 Medium
- fortinet fortiadc, fortiadc manager, fortiadcmanager, fortiadc +2 moreA clear text storage of sensitive information into log file vulnerability in FortiADCManager 5.3...4.3 Medium
- fortinet fortiwebAn information disclosure vulnerability in Web Vulnerability Scan profile of Fortinet's FortiWeb...4.3 Medium
- patreon wordpress, unknown patreon wordpress +1 morePatreon WordPress < 1.7.0 - CSRF to Disconnect Sites From Patreon6.5 Medium
- patreon wordpress, unknown patreon wordpress +1 morePatreon WordPress < 1.7.0 - CSRF to Overwrite/Create User Meta8.1 High
- patreon wordpress, unknown patreon wordpress +1 morePatreon WordPress < 1.7.2 - Reflected XSS on patreon_save_attachment_patreon_level AJAX action9.6 Critical
- patreon wordpress, unknown patreon wordpress +1 morePatreon WordPress < 1.7.2 - Reflected XSS on Login Form9.6 Critical
- patreon wordpress, unknown patreon wordpress +1 morePatreon WordPress < 1.7.0 - Unauthenticated Local File Disclosure7.5 High
- accessallyAccessAlly < 3.5.7 - $_SERVER Superglobal Leakage7.5 High
- advanced booking calendar booking calendar, elbtide advanced booking calendar +1 moreAdvanced Booking Calendar < 1.6.7 - Authenticated Reflected Cross-Site Scripting (XSS)5.4 Medium
- hassantafreshi easy form builder, easy-form-builder-by-bitware project easy-form-builder-by-bitware +1 moreEasy Form Builder <= 1.0 - Authenticated Arbitrary File Upload8.8 High
- n5 upload form project upload form, unknown n5 upload form +1 moreN5 Upload Form <= 1.0 - Unauthenticated Arbitrary File Upload to RCE9.8 Critical
- unknown wp-curriculo vitae freeWP-Curricul Vitea Free <= 6.3 - Unauthenticated Arbitrary File Upload to RCE9.8 Critical
- Show moreLoading…