CVEs published in April 2021
1,956 vulnerabilities, 217 critical, 16 exploited.
- openclinic ga project gaAn exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173...6.4 Medium
- openclinic ga project gaAn exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173...6.4 Medium
- openclinic ga project gaAn exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173...6.4 Medium
- textpatternTextpattern V4.8.4 contains an arbitrary file upload vulnerability where a plug-in can be loaded...6.5 Medium
- google androidIn pb_write of pb_encode.c, there is a possible out of bounds write due to a missing bounds check...6.7 Medium
- phpgurukul beauty parlour management systemSQL Injection in the "add-services.php" component of PHPGurukul Beauty Parlour Management System...6.5 Medium
- phpgurukul beauty parlour management systemCross Site Scripting (XSS) in the "add-services.php" component of PHPGurukul Beauty Parlour...4.8 Medium
- casap automated enrollment system project automated enrollment systemCASAP Automated Enrollment System version 1.0 contains a cross-site scripting (XSS) vulnerability...5.4 Medium
- mcafee advanced threat defense, mcafee,llc mcafee advanced threat defense (atd) +1 moreSensitive Information Exposure in McAfee ATD4.9 Medium
- mcafee advanced threat defense, mcafee,llc mcafee advanced threat defense (atd) +1 moreSensitive Information Exposure in McAfee ATD4.9 Medium
- mcafee,llc mcafee data loss prevention (dlp) endpoint for windows, mcafee data loss prevention endpoint +1 morePrivilege escalation in McAfee DLP Endpoint for Windows7.8 High
- mcafee,llc mcafee data loss prevention (dlp) endpoint for windows, mcafee data loss prevention endpoint +1 moreLocal Denial of Service in McAfee DLP Endpoint for Windows5.5 Medium
- mcafee endpoint security, mcafee,llc mcafee endpoint security (ens) for windows +1 moreTransmission of data in clear text by McAfee ENS4.8 Medium
- apache tapestryBypass of the fix for CVE-2019-01959.8 Critical
- mcafee content security reporter, mcafee,llc mcafee content security reporter (csr) +1 moreClear text exposure of password in McAfee CSR ePO extension4.3 Medium
dracoOSS-FuzzHeap-use-after-free in std::__1::__tree_iterator<std::__1::__value_type<std::__1::basic_string<char, stNo score- ceph, debian linux, fedoraproject fedora +1 more +3 moreAn authentication flaw was found in ceph in versions before 14.2.20. When the monitor handles...7.2 High
- zulip serverAn issue was discovered in Zulip Server before 3.4. A bug in the implementation of the...5.3 Medium
- zulip serverAn issue was discovered in Zulip Server before 3.4. A bug in the implementation of the...4.3 Medium
- atlassian data center, jira, jira server +1 more +3 moreThe jira.editor.user.mode cookie set by the Jira Editor Plugin in Jira Server and Data Center...3.7 Low
- atlassian data center, jira, jira server +1 more +3 moreThe Jira importers plugin AttachTemporaryFile rest resource in Jira Server and Data Center before...4.3 Medium
- atlassian data center, jira, jira server +1 more +3 moreThe issue navigation and search view in Jira Server and Data Center before version 8.5.12, from...6.1 Medium
- zulip serverAn issue was discovered in Zulip Server before 3.4. A bug in the implementation of replies to...4.3 Medium
- zulip serverIn the topic moving API in Zulip Server 3.x before 3.4, organization administrators were able to...2.7 Low
- altn mdaemonAn issue was discovered in MDaemon before 20.0.4. Administrators can use Remote Administration to...7.2 High
- altn mdaemonAn issue was discovered in MDaemon before 20.0.4. There is an IFRAME injection vulnerability in...8.8 High
- altn mdaemonAn issue was discovered in MDaemon before 20.0.4. Remote Administration allows an attacker to...8.8 High
- altn mdaemonAn issue was discovered in MDaemon before 20.0.4. There is Reflected XSS in Webmail (aka...6.1 Medium
- pi-holeMultiple Privilege Escalation Vulnerabilities Pihole6.3 Medium
- gopkg.in/yaml.v2, yaml project yaml, github.com/go-yaml/yaml +2 moreDenial of service in gopkg.in/yaml.v25.5 Medium
- tukaani-project xzdenial of service in github.com/ulikunitz/xz7.5 High
- digitalocean golang-nanoauth, github.com/nanobox-io/golang-nanoauth +1 moreAuthentication bypass in github.com/nanobox-io/golang-nanoauth9.1 Critical
- github.com/revel/revel, revel +1 moreResource exhaustion in github.com/revel/revel7.5 High
- gin-gonic gin, github.com/gin-gonic/gin +1 moreArbitrary log line injection in github.com/gin-gonic/gin7.5 High
- github.com/labstack/echo/v4, labstack echo +1 moreDirectory traversal on Windows in github.com/labstack/echo/v45.3 Medium
- github.com/justinas/nosurf, nosurf project nosurf +1 moreImproper input validation in github.com/justinas/nosurf7.5 High
- github.com/robotsandpencils/go-saml, robotsandpencils go-saml +1 moreWeak hash (SHA-1) in github.com/RobotsAndPencils/go-saml5.3 Medium
- dht project dht, github.com/shiyanhui/dht +1 moreUncontrolled Resource Consumption in github.com/shiyanhui/dht7.5 High
- github.com/yi-ge/unzip, unzip project unzip +1 morePath traversal in github.com/yi-ge/unzip9.1 Critical
- github.com/artdarek/go-unzip, go-unzip project go-unzip +1 morePath traversal in github.com/artdarek/go-unzip9.1 Critical
- aahframe.work, aahframework aah +1 morePath Traversal in aahframe.work7.5 High
- github.com/goadesign/goa, goa.design goa, goa.design/goa +1 more +3 morePath traversal in github.com/goadesign/goa7.5 High
- tendermint, github.com/tendermint/tendermint github.com/tendermint/tendermint/rpc/lib/client +1 moreUncontrolled resource consumption in github.com/tendermint/tendermint7.5 High
- cloudfoundry archiver, code.cloudfoundry.org/archiver code.cloudfoundry.org/archiver/extractor +1 morePath traversal in code.cloudfoundry.org/archiver9.1 Critical
- github.com/gorilla/handlers, gorillatoolkit handlers +1 moreImproper access control in github.com/gorilla/handlers9.8 Critical
- github.com/dinever/golf, golf project golf +1 moreCryptographically weak random number generation in github.com/dinever/golf8.8 High
- github.com/robbert229/jwt, json web token project web token +1 moreTiming side-channel in github.com/robbert229/jwt7.5 High
- cloudflare golz4, github.com/cloudflare/golz4 +1 moreOut-of-bounds write in github.com/cloudflare/golz49.8 Critical
- github.com/btcsuite/go-socks, github.com/btcsuitereleases/go-socks, socks5 project socks5 +2 moreInfinite loop in github.com/btcsuite/go-socks7.5 High
- devolutions serverAn SQL Injection issue in Devolutions Server before 2021.1 and Devolutions Server LTS before 2020...7.2 High
- Show moreLoading…