CVEs published in April 2021
1,956 vulnerabilities, 217 critical, 16 exploited.
- jenkins config file provider, jenkins project config file provider plugin +1 moreCSRF vulnerability in Jenkins Config File Provider Plugin allows deleting configuration files5.4 Medium
- jenkins config file provider, jenkins project config file provider plugin +1 moreIncorrect permission checks in Jenkins Config File Provider Plugin allow enumerating credentials IDs6.5 Medium
- jenkins config file provider, jenkins project config file provider plugin +1 moreXML External Entity Reference vulnerability in Jenkins Config File Provider Plugin8.1 High
- ibm iIBM i 7.1, 7.2, 7.3, and 7.4 SMTP allows a network attacker to send emails to non-existent local...5.9 Medium
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a XML External Entity...8.2 High
phpOSS-FuzzHeap-buffer-overflow in _estrdupNo scoreirssiOSS-FuzzHeap-use-after-free in module_check_castNo score- gpacAn issue was discovered in GPAC version 0.8.0 and 1.0.1. There is a use-after-free in the...7.8 High
- pupnpDNS rebinding in pupnp7.6 High
- tobesoft xplatformA vulnerability of XPlatform could allow an unauthenticated attacker to execute arbitrary command...7.5 High
- demon1a discord-reconLFI and possible code execution on discord-recon using tools arguments8.1 High
- wondercmsAn OS command injection vulnerability in the installUpdateThemePluginAction function in index.php...9.8 Critical
- wondercmsA server-side request forgery (SSRF) vulnerability in the addCustomThemePluginRepository function...9.8 Critical
- xwiki, xwiki xwiki-platform +1 moreXSS Cross Site Scripting9.6 Critical
- tibco administrator, tibco software inc. administrator - enterprise edition, administrator - enterprise edition distribution for tibco silver fabric +1 more +3 moreTIBCO Administrator CSV injection vulnerability6.5 Medium
- tibco administrator, tibco software inc. administrator - enterprise edition, administrator - enterprise edition distribution for tibco silver fabric +1 more +3 moreTIBCO Administrator SQL injection vulnerability7.6 High
- tibco administrator, runtime agent, tibco software inc. administrator - enterprise edition +3 more +5 moreTIBCO Administrator Stored Cross Site Scripting vulnerability9.6 Critical
- omicronenergy stationguardOMICRON StationGuard before 1.10 allows remote attackers to cause a denial of service ...7.5 High
- oracle graalvm, debian linux, fedoraproject fedora +9 more +11 moreVulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of...5.3 Medium
- dell powerscale onefsDell PowerScale OneFS 8.1.0 - 9.1.0 contains a privilege escalation in SmartLock compliance mode...6.0 Medium
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS 8.1.0 - 9.1.0 contains an LDAP Provider inability to connect over TLSv1.2...7.5 High
- mi miuiThe application in the mobile phone can read the SNO information of the device, Xiaomi 10 MIUI <...5.5 Medium
- hashicorp consulHashiCorp Consul Enterprise version 1.8.0 up to 1.9.4 audit log can be bypassed by specifically...7.5 High
- nvidia geforce experience, geforce experience software +1 moreNVIDIA GeForce Experience, all versions prior to 3.22, contains a vulnerability in GameStream...6.1 Medium
- hashicorp consulHashiCorp Consul Cross-site Scripting vulnerability6.1 Medium
- unisys stealthUnisys Stealth (core) 5.x before 5.0.048.0, 5.1.x before 5.1.017.0, and 6.x before 6.1.037.0...4.9 Medium
- lextudio restructuredtextvscode-restructuredtext before 146.0.0 contains an incorrect access control vulnerability, where...9.8 Critical
- imagemagick, debian linux +1 moreA flaw was found in ImageMagick in versions before 7.0.11. A potential cipher leak when the...7.5 High
- imagemagick, debian linux +1 moreA flaw was found in ImageMagick in versions 7.0.11, where an integer overflow in...7.5 High
- imagemagickA flaw was found in ImageMagick in versions before 7.0.11, where a division by zero in...7.5 High
- imagemagick, debian linux +1 moreA flaw was found in ImageMagick in versions before 7.0.11 and before 6.9.12, where a division by...7.5 High
- cnesty helpcomA vulnerability of Helpcom could allow an unauthenticated attacker to execute arbitrary command....7.5 High
- sonicwall email security, email security appliance 3300 firmware, email security appliance 4300 firmware +8 more +10 moreSonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post...4.9 Medium
- ibm websphere application serverIBM WebSphere Application Server 8.0, 8.5, and 9.0 is vulnerable to a XML External Entity...8.2 High
- adtran personal phone manager** UNSUPPORTED WHEN ASSIGNED ** AdTran Personal Phone Manager 10.8.1 software is vulnerable to an...7.5 High
- adtran personal phone manager** UNSUPPORTED WHEN ASSIGNED ** The AdTran Personal Phone Manager software is vulnerable to...6.1 Medium
- adtran personal phone manager** UNSUPPORTED WHEN ASSIGNED ** The AdTran Personal Phone Manager software is vulnerable to an...5.4 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Windows VPN kernel driver denial of service (DoS)5.5 Medium
- palo alto networks pan-osPAN-OS: Secrets for scheduled configuration exports are logged in system logs2.3 Low
- palo alto networks pan-osPAN-OS: Administrator secrets are logged in web server logs when using the PAN-OS XML API incorrectly4.4 Medium
- palo alto networks bridgecrew checkovBridgecrew Checkov: Unsafe deserialization of Terraform files allows code execution6.7 Medium
wasm3OSS-FuzzUNKNOWN READ in op_BranchIfPrologue_sNo score- telegramThe Telegram app 7.6.2 for iOS allows remote authenticated users to cause a denial of service ...5.7 Medium
- mozilla firefox, firefox esr, thunderbird +2 morePorts that were written as an integer overflow above the bounds of a 16-bit integer could have...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreThe WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read...6.5 Medium
- debian linux, linux kernel, fedoraproject fedora +2 moreAn issue was discovered in the Linux kernel through 5.11.x. kernel/bpf/verifier.c performs...5.5 Medium
- debian linux, linux kernel, netapp cloud backup +9 more +11 moreAn out-of-bounds (OOB) memory access flaw was found in fs/f2fs/node.c in the f2fs module in the...7.1 High
- jtekt 2port-efr thu-6404 firmware, fl\/et-t-v2h thu-6289 firmware, pc10b-e\/c tcu-6521 firmware +15 more +17 moreIf Ethernet communication of the JTEKT Corporation TOYOPUC product series’ (TOYOPUC-PC10 Series:...7.5 High
- openclinic ga project gaAn exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173...6.4 Medium
- openclinic ga project gaAn exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173...6.4 Medium
- Show moreLoading…