CVEs published in April 2021
1,956 vulnerabilities, 217 critical, 16 exploited.
- microsoft visual studio 2015 update 3, visual studio 2017 version 15.9 (includes 15.0 - 15.8), visual studio 2019 version 16.4 (includes 16.0 - 16.3) +17 more +19 moreDiagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability7.8 High
- microsoft visual studio 2015 update 3, visual studio 2017 version 15.9 (includes 15.0 - 15.8), visual studio 2019 version 16.4 (includes 16.0 - 16.3) +17 more +19 moreDiagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +12 more +14 moreWindows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1803, windows 10 version 1809, windows 10 version 1909 +9 more +11 moreWindows TCP/IP Driver Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +26 more +28 moreWindows GDI+ Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +26 more +28 moreMicrosoft Windows Codecs Library Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +23 more +25 moreWindows WLAN AutoConfig Service Security Feature Bypass Vulnerability4.2 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +26 more +28 moreWindows Media Video Decoder Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 1909, windows 10 version 2004 +8 more +10 moreWindows Hyper-V Elevation of Privilege Vulnerability7.8 High
- microsoft visual studio 2015 update 3, visual studio 2017 version 15.9 (includes 15.0 - 15.8), visual studio 2019 version 16.4 (includes 16.0 - 16.3) +17 more +19 moreDiagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 1909, windows 10 version 2004 +8 more +10 moreWindows NTFS Denial of Service Vulnerability3.3 Low
- microsoft windows 10 version 1607, windows 10 version 1803, windows 10 version 1809 +11 more +13 moreWindows Application Compatibility Cache Denial of Service Vulnerability6.5 Medium
- microsoft win32k, windows 10 version 1803, windows 10 version 1809 +16 more +18 moreWin32k Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +26 more +28 moreWindows Kernel Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +23 more +25 moreNTFS Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +26 more +28 moreWindows Media Video Decoder Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +18 more +20 moreWindows Early Launch Antimalware Driver Security Feature Bypass Vulnerability4.4 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +26 more +28 moreWindows Kernel Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1803, windows 10 version 1809, windows 10 version 1909 +9 more +11 moreAzure AD Web Sign-in Security Feature Bypass Vulnerability6.8 Medium
- microsoft windows 7, windows 7 service pack 1, windows server 2008 r2 service pack 1 +4 more +6 moreRPC Endpoint Mapper Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 2004, windows 10 version 20h2, windows server version 2004 +3 more +5 moreWindows Secure Kernel Mode Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +26 more +28 moreMicrosoft Internet Messaging API Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1803, windows 10 version 1809, windows 10 version 1909 +9 more +11 moreWindows Event Tracing Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1803, windows 10 version 1809, windows 10 version 1909 +9 more +11 moreWindows Services and Controller App Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +12 more +14 moreWindows Media Photo Codec Information Disclosure Vulnerability5.7 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +18 more +20 moreWin32k Elevation of Privilege Vulnerability7.0 High
- microsoft azure devops server, team foundation server, azure devops server 2019 update 1 +7 more +9 moreAzure DevOps Server and Team Foundation Server Information Disclosure Vulnerability6.5 Medium
- microsoft visual studio 2017 version 15.9 (includes 15.0 - 15.8), visual studio 2019 version 16.4 (includes 16.0 - 16.3), visual studio 2019 version 16.7 (includes 16.0 – 16.6) +3 more +5 moreVisual Studio Installer Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 1909, windows 10 version 2004 +8 more +10 moreWindows Overlay Filter Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 1909 +9 more +11 moreWindows Hyper-V Denial of Service Vulnerability7.7 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +26 more +28 moreWindows Installer Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1803 +26 more +28 moreWindows Installer Spoofing Vulnerability6.2 Medium
- sap focused runSAP Focused RUN versions 200, 300, does not perform necessary authorization checks for an...4.6 Medium
- sap netweaver application server java, sap se netweaver as for java (telnet commands) +1 moreAn unauthorized attacker may be able to entice an administrator to invoke telnet commands of an...7.4 High
- sap fiori apps 2.0 for travel management in sap erpSAP's HCM Travel Management Fiori Apps V2, version - 608, does not perform proper authorization...4.3 Medium
- sap netweaver application server java, sap se netweaver as for java (applications based on htmlb for java) +1 moreSAP NetWeaver AS Java (Applications based on HTMLB for Java) allows a basic-level authorized...5.4 Medium
- sap manufacturing execution, sap se manufacturing execution (system rules) +1 moreSAP Manufacturing Execution (System Rules), versions - 15.1, 15.2, 15.3, 15.4, allows an...6.4 Medium
- sap commerceSAP Commerce, versions - 1808, 1811, 1905, 2005, 2011, Backoffice application allows certain...9.9 Critical
- sap netweaver application server abap, sap se netweaver as for abap +1 moreAn RFC enabled function module SPI_WAIT_MILLIS in SAP NetWeaver AS ABAP, versions - 731, 740, 750...6.5 Medium
- sap netweaver application server java, sap se netweaver as for java (http service) +1 moreSAP NetWeaver Application Server Java(HTTP Service), versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7...4.3 Medium
- nextcloud nextcloud-dialogs, nextcloud\/dialogs project nextcloud\/dialogs +1 moreImproper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in @nextcloud/dialogs4.6 Medium
- sap netweaver master data managementSAP NetWeaver Master Data Management, versions - 710, 710.750, allows a malicious unauthorized...8.3 High
- sap solution managerUnder certain conditions SAP Solution Manager, version - 720, allows a high privileged attacker...8.2 High
- sap netweaver application server java, sap se netweaver as for java (customer usage provisioning servlet) +1 moreSAP NetWeaver AS JAVA (Customer Usage Provisioning Servlet), versions - 7.31, 7.40, 7.50, allows...6.5 Medium
- schneider-electric c-bus toolkitA CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...7.2 High
- schneider-electric c-bus toolkitA CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...8.8 High
- schneider-electric c-bus toolkitA CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...7.8 High
- schneider-electric c-bus toolkitA CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...8.8 High
- schneider electric c-bus toolkitA CWE-269: Improper Privilege Management vulnerability exists in C-Bus Toolkit (V1.15.7 and prior...7.8 High
- scratchoauth2 project scratchoauth2Account compromise by man-in-the-middle attack8.0 High
- Show moreLoading…