CVEs published in April 2021
1,956 vulnerabilities, 217 critical, 16 exploited.
- saitoha libsixelBuffer Overflow in the "sixel_encoder_encode_bytes" function of Libsixel v1.8.6 allows attackers...7.5 High
- x2engine x2crmCross Site Scripting (XSS) in X2engine X2CRM v7.1 and older allows remote attackers to obtain...4.8 Medium
- x2engine x2crmCross Site Scripting (XSS) in X2Engine X2CRM v6.9 and older allows remote attackers to execute...6.1 Medium
- x2engine x2crmCross Site Scripting (XSS) in X2Engine X2CRM v7.1 allows remote attackers to obtain sensitive...6.1 Medium
- priority-software priority enterprise management systemCross Site Scripting (XSS) in the "Reset Password" page form of Priority Enterprise Management...6.1 Medium
- nextcloud desktop, fedoraproject fedora +1 moreNextcloud Desktop Client prior to 3.1.3 is vulnerable to resource injection by way of missing...8.8 High
- appspaceAppspace 6.2.4 is vulnerable to stored cross-site scripting (XSS) in multiple parameters within ...5.4 Medium
- qnap surveillance stationStack Buffer Overflow in Surveillance Station9.8 Critical
- rust-lang rustIn the standard library in Rust before 1.19.0, there is a synchronization problem in the...5.9 Medium
- rust-lang rust, fedoraproject fedora +1 moreIn the standard library in Rust before 1.50.3, there is an optimization for joining strings that...8.2 High
- rust-lang rustIn the standard library in Rust before 1.29.0, there is weak synchronization in the Arc::get_mut...5.9 Medium
- rust-lang rust, fedoraproject fedora +1 moreIn the standard library in Rust before 1.53.0, a double free can occur in the Vec::from_iter...9.8 Critical
- multilaser ac1200 re018 firmwareMultilaser Router AC1200 V02.03.01.45_pt contains a cross-site request forgery (CSRF)...8.8 High
- libexif project exif, fedoraproject fedora +1 moreNULL Pointer Deference in the "actions.c" library of libexif exif v0.6.22 allows attackers to...5.5 Medium
- debian linux, linux kernel, starwindsoftware starwind virtual san +2 moreAn issue was discovered in the FUSE filesystem implementation in the Linux kernel before 5.10.6,...5.5 Medium
- facebook thriftAn invalid free in Thrift's table-based serialization can cause the application to crash or...9.8 Critical
- cheetah browser project browserA UXSS was discovered in the Thanos-Soft Cheetah Browser in Android 1.2.0 due to the inadequate...6.1 Medium
- xerox altalink b8045/b8055/b8065/b8075/b8090, altalink c8030/c8035/c8045/c8055/c8070, altalink b8045 firmware +25 more +27 moreDefault hidden Privileged Account Vulnerability in multiple XEROX devices9.4 Critical
- lenovo xclarity controller (xcc), xclarity controller +1 moreAn internal product security audit of Lenovo XClarity Controller (XCC) discovered that the XCC...4.5 Medium
- lenovo power management driver for windows 10, power management driver +1 moreA null pointer dereference vulnerability in Lenovo Power Management Driver for Windows 10, prior...4.2 Medium
- lenovo power management driver for windows 10, power management driver +1 moreA privilege escalation vulnerability in Lenovo Power Management Driver for Windows 10, prior to...5.5 Medium
- motorola mh702x, mh702x firmware +1 moreThe Motorola MH702x devices, prior to version 2.0.0.301, do not properly verify the server...8.1 High
- getgrav gravTwig allowing dangerous PHP functions by default8.4 High
- getgrav grav admin, grav-plugin-admin +1 morePlugins can be installed with minimal admin privileges7.2 High
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 19 +3 more +5 moreMicrosoft Exchange Server Remote Code Execution Vulnerability9.0 Critical
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 19 +3 more +5 moreMicrosoft Exchange Server Remote Code Execution Vulnerability8.8 High
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 19 +3 more +5 moreMicrosoft Exchange Server Remote Code Execution Vulnerability9.8 Critical
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 19 +3 more +5 moreMicrosoft Exchange Server Remote Code Execution Vulnerability9.8 Critical
- microsoft visual studio codeVisual Studio Code Remote Code Execution Vulnerability7.0 High
- microsoft visual studio codeVisual Studio Code Remote Code Execution Vulnerability7.8 High
- microsoft visual studio codeVisual Studio Code Remote Code Execution Vulnerability7.8 High
- microsoft visual studio code - maven for java extension, vscode-maven +1 moreVisual Studio Code Maven for Java Extension Remote Code Execution Vulnerability7.8 High
- microsoft visual studio codeRemote Development Extension for Visual Studio Code Remote Code Execution Vulnerability7.8 High
- microsoft visual studio code github pull requests and issues, visual studio code - github pull requests and issues extension +1 moreVisual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution Vulnerability7.8 High
- microsoft visual studio codeVisual Studio Code Remote Code Execution Vulnerability7.8 High
- microsoft raw image extensionRaw Image Extension Remote Code Execution Vulnerability7.8 High
- microsoft raw image extensionRaw Image Extension Remote Code Execution Vulnerability7.8 High
- microsoft vp9 video extensionsVP9 Video Extensions Remote Code Execution Vulnerability7.8 High
- microsoft azure sphereAzure Sphere Unsigned Code Execution Vulnerability8.1 High
- microsoft azure devops server, azure devops server 2020.0.1 +1 moreAzure DevOps Server Spoofing Vulnerability6.1 Medium
- microsoft ms-rest-nodeauth, @azure/ms-rest-nodeauth +1 moreAzure ms-rest-nodeauth Library Elevation of Privilege Vulnerability7.8 High
- microsoft visual studio codeVisual Studio Code Remote Code Execution Vulnerability7.8 High
- microsoft excel, 365 apps, 365 apps for enterprise +9 more +11 moreMicrosoft Excel Information Disclosure Vulnerability5.5 Medium
- microsoft 365 apps, 365 apps for enterprise, excel 2010 service pack 2 +10 more +12 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft word, 365 apps, 365 apps for enterprise +17 more +19 moreMicrosoft Word Remote Code Execution Vulnerability7.8 High
- microsoft outlook, 365 apps, 365 apps for enterprise +5 more +7 moreMicrosoft Outlook Memory Corruption Vulnerability7.1 High
- microsoft excel, 365 apps, 365 apps for enterprise +8 more +10 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft sharepoint enterprise server 2013 service pack 1, sharepoint enterprise server 2016, sharepoint foundation 2010 service pack 2 +3 more +5 moreMicrosoft SharePoint Denial of Service Vulnerability5.0 Medium
- microsoft office, 365 apps, excel +8 more +10 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft visual studio code kubernetes tools, visual studio code - kubernetes tools +1 moreVisual Studio Code Kubernetes Tools Remote Code Execution Vulnerability7.8 High
- Show moreLoading…