CVEs published in April 2021
1,956 vulnerabilities, 217 critical, 16 exploited.
- mediawikiAn issue was discovered in the PageForms extension for MediaWiki through 1.35.2. Crafted payloads...6.1 Medium
- mediawikiAn issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. It incorrectly...5.4 Medium
- mediawikiAn issue was discovered in the CheckUser extension for MediaWiki through 1.35.2. MediaWiki...6.5 Medium
- mediawikiAn issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. It improperly...5.4 Medium
- mediawikiAn issue was discovered in the Oauth extension for MediaWiki through 1.35.2. It did not validate...7.5 High
- demon1a discord-reconPath Traversal at Discord-Recon .recon Command Path6.5 Medium
- demon1a discord-reconRemote file overwrite on discord-recon can result in DoS and Remote Code Execution8.3 High
- birb-digital wrongthinkSelf-XSS6.1 Medium
libaomOSS-FuzzHeap-buffer-overflow in av1_cdef_init_fb_row_mtNo scorelibaomOSS-FuzzHeap-buffer-overflow in av1_free_cdef_buffersNo scorephpOSS-FuzzHeap-buffer-overflow in _estrdupNo scoreghostscriptOSS-FuzzStack-use-after-return in pdf14_initializeNo score- jhead project jheadA heap-based buffer overflow was found in jhead in version 3.06 in Get16u() in exif.c when...7.8 High
- mozilla thunderbirdWhen loading the shared library that provides the OTR protocol implementation, Thunderbird will...7.8 High
- mozilla thunderbirdSignatures are written to disk before and read during verification, which might be subject to a...2.5 Low
- oracle database, oracle corporation database - enterprise edition +1 moreVulnerability in the Oracle Database - Enterprise Edition component of Oracle Database Server....2.3 Low
- oracle database server, oracle corporation database - enterprise edition +1 moreVulnerability in the Database Vault component of Oracle Database Server. Supported versions that...2.7 Low
- oracle database server, oracle corporation database - enterprise edition +1 moreVulnerability in the Recovery component of Oracle Database Server. Supported versions that are...4.1 Medium
- nvidia gpu display driverNVIDIA Windows GPU Display Driver for Windows, all versions, contains a vulnerability in the...5.5 Medium
- nvidia gpu display driverNVIDIA Windows GPU Display Driver for Windows, all versions, contains a vulnerability in the...7.3 High
- nvidia gpu display driverNVIDIA Windows GPU Display Driver for Windows, R390 driver branch, contains a vulnerability in...7.3 High
- aviatrix openvpnArbitrary File Write exists in Aviatrix VPN Client 2.8.2 and earlier. The VPN service writes logs...7.5 High
- aviatrix controllerInsecure File Permissions exist in Aviatrix Controller 5.3.1516. Several world writable files and...7.5 High
- openmage magento, magento-lts +1 moreBackport for CVE-2021-21024 Blind SQLi from Magento 29.1 Critical
- openmage magento, magento-lts +1 moreFixes a bug in Zend Framework's Stream HTTP Wrapper9.8 Critical
- wikimedia analytics-quarry-webWikimedia Quarry analytics-quarry-web before 2020-12-15 allows Reflected XSS because app.py does...6.1 Medium
- abus secvest wireless alarm system fuaa50000 firmwareThe ABUS Secvest wireless alarm system FUAA50000 (v3.01.17) fails to properly authenticate some...7.5 High
- autheliaAuthelia allows open redirects on the logout endpoint5.7 Medium
- xscreensaver project xscreensaverThe Debian xscreensaver 5.42+dfsg1-1 package for XScreenSaver has cap_net_raw enabled for the ...7.8 High
- gpacAn issue was discovered in gpac before 1.0.1. A NULL pointer dereference exists in the function...5.5 Medium
- gpacAn issue was discovered in gpac before 1.0.1. The abst_box_read function in box_code_adobe.c has...7.1 High
- gpacAn issue was discovered in gpac through 20200801. A NULL pointer dereference exists in the...5.5 Medium
- gpacAn issue was discovered in gpac before 1.0.1. The abst_box_read function in box_code_adobe.c has...7.1 High
- giflib project giflib, apache bookkeeper +1 moreAn issue was discovered in giflib through 5.1.4. DumpScreen2RGB in gif2rgb.c has a heap-based...7.1 High
- fast ber project berAn issue was discovered in fast_ber through v0.4. yy::yylex() in asn_compiler.hpp has a heap...7.1 High
- cpp-peglib project cpp-peglibAn issue was discovered in cpp-peglib through v0.1.12. peg::resolve_escape_sequence() in peglib.h...5.5 Medium
- cpp-peglib project cpp-peglibAn issue was discovered in cpp-peglib through v0.1.12. A NULL pointer dereference exists in the...5.5 Medium
- axiosys bento4An issue was discovered in Bento4 through v1.6.0-637. A NULL pointer dereference exists in the...5.5 Medium
- avast retdecAn issue was discovered in retdec v3.3. In function canSplitFunctionOn() of ir_modifications.cpp,...9.8 Critical
- eclipse openj9, the eclipse foundation eclipse openj9 +1 moreIn Eclipse Openj9 to version 0.25.0, usage of the jdk.internal.reflect.ConstantPool API causes...6.5 Medium
- drupal core, drupal +1 moreDrupal core Cross-site Scripting (XSS) vulnerability6.1 Medium
- remoteclinic remote clinicStored XSS in Remote Clinic v2.0 in /medicines due to Medicine Name Field.5.4 Medium
- remoteclinic remote clinicCross Site Scripting (XSS) in Remote Clinic v2.0 via the "Chat" and "Personal Address" field on...5.4 Medium
- alpinelinux apk-toolsIn Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash.7.5 High
- gpacAn issue was discovered in GPAC version 0.8.0 and 1.0.1. There is an invalid pointer dereference...7.8 High
- gpacAn issue was discovered in GPAC version 0.8.0 and 1.0.1. There is an invalid pointer dereference...7.8 High
- gpacAn issue was discovered in GPAC version 0.8.0 and 1.0.1. There is heap-based buffer overflow in...7.8 High
- jenkins cloudbees cd, jenkins project cloudbees cd plugin +1 moreMissing permission check in Jenkins CloudBees CD Plugin allows scheduling builds4.3 Medium
- jenkins templating engine, jenkins project templating engine plugin +1 moreRemote code execution vulnerability in Jenkins Templating Engine Plugin8.8 High
- jenkins config file provider, jenkins project config file provider plugin +1 moreMissing permission checks in Jenkins Config File Provider Plugin allow enumerating configuration file IDs4.3 Medium
- Show moreLoading…