CVEs published in April 2021
1,956 vulnerabilities, 217 critical, 16 exploited.
- broadcom vmware nsx-t data centerVMware NSX-T contains a privilege escalation vulnerability due to an issue with RBAC (Role based...7.8 High
irssiopenSUSESecurity update for irssiNo score- fibar group s.a fibaro home center, fibaro home center 2 firmware, home center lite firmware +2 moreFibaro Home Center Unencrypted management interface8.1 High
- fibar group s.a fibaro home center, fibaro home center 2 firmware, home center lite firmware +2 moreFibaro Home Center Authenticated remote command execution9.8 Critical
- fibar group s.a fibaro home center, fibaro home center 2 firmware, home center lite firmware +2 moreFibaro Home Center Unauthenticated access to shutdown, reboot and reboot to recovery mode7.5 High
- fibar group s.a fibaro home center, fibaro home center 2 firmware, home center lite firmware +2 moreFibaro Home Center Insufficient remote access server authorization5.9 Medium
- innorix file transfer solution, agent.exe +1 moreInnorix File Transfer Solution File Download and Execution Vulnerability7.8 High
- adobe robohelpPrivilege Escalation Vulnerability in Adobe RoboHelp6.5 Medium
- xmbforum2 xmbXMB is vulnerable to cross-site scripting (XSS) due to inadequate filtering of BBCode input. This...6.1 Medium
- exiv2, debian linux, fedoraproject fedora +2 moreOut-of-bounds read in Exiv2::Internal::CrwMap::encode5.5 Medium
- exiv2, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in Exiv2::Jp2Image::doWriteMetadata7.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreWhen a user clicked on an FTP URL containing encoded newline characters (%0A and %0D), the...8.8 High
- mozilla firefoxA compromised content process could have performed session history manipulations it should not...4.3 Medium
- mozilla firefoxA race condition with requestPointerLock() and setTimeout() could have resulted in a user...3.1 Low
- mozilla firefox, firefox esr, thunderbird +2 moreIf a Blob URL was loaded through some unusual user interaction, it could have been loaded by the...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreThrough complicated navigations with new windows, an HTTP page could have inherited a secure lock...6.5 Medium
- mozilla firefoxDue to unexpected data type conversions, a use-after-free could have occurred when interacting...8.8 High
- mozilla firefoxBy utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreWhen Responsive Design Mode was enabled, it used references to objects that were previously freed...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreA WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out...8.8 High
- nvidia gpu display driverNVIDIA GPU Display Driver for Windows and Linux, R450 and R460 driver branch, contains a...6.6 Medium
- debian linux, nvidia gpu display driver +1 moreNVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the...6.6 Medium
- portkiller project portkillerArbitrary Command Injection7.3 High
- roar-pidusage project roar-pidusageArbitrary Command Injection5.6 Medium
- killing project killingArbitrary Command Injection7.3 High
- ps-visitor project ps-visitorArbitrary Command Injection7.3 High
- psnode project psnodeArbitrary Command Injection7.3 High
- ffmpegdotjs project ffmpegdotjsArbitrary Command Injection9.8 Critical
- onion-oled-js project onion-oled-jsArbitrary Command Injection9.8 Critical
- picotts project picottsArbitrary Command Injection9.8 Critical
libjpeg-turboOSS-FuzzHeap-buffer-overflow in decode_mcu_fastNo scorec-blosc2OSS-FuzzHeap-use-after-free in ZSTD_freeDDictNo scorephpOSS-FuzzHeap-use-after-free in zend_gc_delrefNo score- google chrome, fedoraproject fedora, google chromium v8 +2 moreInsufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed...8.8 High
- google chrome, fedoraproject fedora, google chromium blink +2 moreUse after free in Blink in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to...8.8 High
- qnap media streaming add-on, multimedia console, qts +2 moreSQL Injection Vulnerability in Multimedia Console and the Media Streaming Add-On9.8 Critical
- qnap qts, quts hero, network-attached storage (nas) +2 moreCommand Injection Vulnerability in QTS and QuTS hero9.8 Critical
dracoOSS-FuzzHeap-use-after-free in std::__1::__tree_iterator<std::__1::__value_type<std::__1::basic_string<char, stNo scorec-blosc2OSS-FuzzUNKNOWN READ in blosc_dNo scorewasm3OSS-FuzzHeap-buffer-overflow in op_Const64No score- jose-node-cjs-runtime project jose-node-cjs-runtimePadding Oracle Attack due to Observable Timing Discrepancy in jose-node-cjs-runtime5.9 Medium
- panva jose-node-esm-runtime, jose-node-cjs-runtime project jose-node-cjs-runtime +1 morePadding Oracle Attack due to Observable Timing Discrepancy in jose-node-esm-runtime5.9 Medium
- appsup-dart jose, jose-node-cjs-runtime project jose-node-cjs-runtime +1 morePadding Oracle Attack due to Observable Timing Discrepancy in jose-browser-runtime5.9 Medium
- manydesigns portofinoMissing validation of JWT signature in `ManyDesigns/Portofino`9.1 Critical
- curveball a12n-serverAny logged in user could edit any other logged in user.8.1 High
- mendix, siemens mendix applications using mendix 7, mendix applications using mendix 8 +3 more +5 moreA vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23...8.8 High
- ipb-halle molecularfacesMolecularFaces XSS6.1 Medium
- ezxml project ezxml, debian linux +1 moreAn issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_parse_str() performs...6.5 Medium
- appsup-dart josePadding Oracle Attack due to Observable Timing Discrepancy in jose5.9 Medium
- ezxml project ezxml, debian linux +1 moreAn issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_parse_str() performs...6.5 Medium
- Show moreLoading…