CVEs published in April 2021
1,956 vulnerabilities, 217 critical, 16 exploited.
- google androidIn getSimSerialNumber of TelephonyManager.java, there is a possible way to read a trackable...5.5 Medium
- accusoft imagegearAn out-of-bounds write vulnerability exists in the JPG format SOF marker processing of Accusoft...9.8 Critical
- slic3r libslic3rAn out-of-bounds read vulnerability exists in the Obj File TriangleMesh::TriangleMesh()...8.6 High
- eaton intelligent power manager (ipm), intelligent power manager, intelligent power manager virtual appliance +1 more +3 moreArbitrary File upload8.0 High
- eaton intelligent power manager (ipm), intelligent power manager, intelligent power manager virtual appliance +1 more +3 moreImproper Neutralization of Directives in Dynamically Evaluated Code8.3 High
- eaton intelligent power manager (ipm), intelligent power manager +1 moreRemote Code execution10.0 Critical
- eaton intelligent power manager (ipm), intelligent power manager, intelligent power manager virtual appliance +1 more +3 moreArbitrary File delete8.0 High
- eaton intelligent power manager (ipm), intelligent power manager, intelligent power manager virtual appliance +1 more +3 moreImproper Neutralization of Special Elements used in an SQL Command7.1 High
- eaton intelligent power manager (ipm), intelligent power manager, intelligent power manager virtual appliance +1 more +3 moreArbitrary File delete8.7 High
- gradle, quarkus +1 moreRepository content filters do not work in Settings pluginManagement8.0 High
- gradle, quarkus +1 moreLocal privilege escalation through system temporary directory8.8 High
- ampacheUnauthenticated SubSonic backend access in Ampache9.1 Critical
- anuko time tracker, timetracker +1 moreCross site request forgery vulnerability5.4 Medium
- trestle-auth project trestle-authCross-Site Request Forgery (CSRF) in trestle-auth8.1 High
- perforce helix almThe XML Import functionality of the Administration console in Perforce Helix ALM 2020.3.1 Build...4.9 Medium
- windriver vxworksXML External Entity Resolution (XXE) in Helix ALM. The XML Import functionality of the...5.3 Medium
- windriver vxworksAn issue was discovered in Wind River VxWorks through 6.8. There is a possible stack overflow in...9.8 Critical
- windriver vxworks, siemens ruggedcom win subscriber station firmware, scalance x200-4 p irt firmware +33 more +35 moreAn issue was discovered in Wind River VxWorks before 6.5. There is a possible heap overflow in...9.8 Critical
- mongo-express project mongo-expressDenial of Service (DoS)4.4 Medium
shopware/corePackagist,shopware/platformPackagist +1 moreAfter order payment process manipulation in shopware/platform and shopware/coreNo scoreshopware/productionPackagist,shopware/shopwarePackagist +1 moreExposure of .env if project root is configured as web root in shopware/productionNo scoreshopware/corePackagist,shopware/platformPackagist +1 moreLeak of information via Store-API aggregations in shopware/platform and shopware/coreNo score- zte zxhn h108n firmware, zxhn h168n firmware +1 moreSome ZTE products have CSRF vulnerability. Because some pages lack CSRF random value verification...6.5 Medium
pwweb/laravel-corePackagistUser (Encrypted) Password Field Being SerialisedNo scoresopel-modules-weatherPyPIPotential API key leakNo score- zte zxhn h168n, zxhn h168n firmware +1 moreA ZTE product is impacted by improper access control vulnerability. The attacker could exploit...9.8 Critical
- zte zxcloud iraiA CSRF vulnerability exists in the management page of a ZTE product.The vulnerability is caused...8.1 High
- phpgacl, open-emr openemr +1 moreSQL injection vulnerability exists in phpGACL 3.3.7. A specially crafted HTTP request can lead to...8.8 High
- phpgacl, open-emr openemr +1 moreSQL injection vulnerabilities exist in phpGACL 3.3.7. A specially crafted HTTP request can lead...8.8 High
- openclinic ga project gaAn exploitable unatuhenticated command injection exists in the OpenClinic GA 5.173.3. Specially...10.0 Critical
- openclinic ga project gaAn incorrect default permissions vulnerability exists in the installation functionality of...8.8 High
- openclinic ga project gaAn exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173...6.4 Medium
- openclinic ga project gaAn exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173...6.4 Medium
- openclinic ga project gaAn exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173...6.4 Medium
- openclinic ga project gaAn exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173...6.4 Medium
- the xorg project xorg-x11-server, debian linux, fedoraproject fedora +2 more +4 moreA flaw was found in xorg-x11-server in versions before 1.20.11. An integer underflow can occur in...7.8 High
- microfocus operations agentEscalation of privileges vulnerability in Micro Focus Operations Agent, affects versions 12.0x,...9.8 Critical
- zerof expertThe ZEROF Expert pro/2.0 application for mobile devices allows SQL Injection via the...9.8 Critical
- zerof web serverZEROF Web Server 1.0 (April 2021) allows SQL Injection via the /HandleEvent endpoint for the...9.8 Critical
- trend micro password manager, trend micro, inc. micro password manager +1 moreTrend Micro Password Manager version 5 (Consumer) is vulnerable to a DLL Hijacking vulnerability...7.8 High
- trend micro apex one, officescan +1 moreAn insecure file permissions vulnerability in Trend Micro Apex One, Apex One as a Service and...5.5 Medium
- trend micro apex one, officescan +1 moreAn incorrect permission assignment vulnerability in Trend Micro Apex One, Apex One as a Service...7.8 High
- trend micro apex one, officescan +1 moreAn improper access control vulnerability in Trend Micro Apex One, Trend Micro Apex One as a...7.8 High
- trend micro apex one, officescan +1 moreAn improper access control vulnerability in Trend Micro Apex One, Trend Micro Apex One as a...7.8 High
- cifs-utils, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file...6.1 Medium
- apache commons io, debian linux, netapp active iq unified manager +57 more +59 morePossible limited path traversal vulnerabily in Apache Commons IO4.8 Medium
- apache solrApache Solr Unprivileged users may be able to perform unauthorized read/write to collections9.1 Critical
- apache solrMisapplied Zookeeper ACLs can result in leakage of configured authentication and authorization settings7.5 High
- apache solrSSRF vulnerability with the Replication handler9.8 Critical
- siren federateSiren Federate before 6.8.14-10.3.9, 6.9.x through 7.6.x before 7.6.2-20.2, 7.7.x through 7.9.x...4.3 Medium
- Show moreLoading…