CVEs published in April 2021
1,956 vulnerabilities, 217 critical, 16 exploited.
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3: In a multi-tenant environment, a tenant host administrator may be able to jailbreak out of their network impacting other te…7.3 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Junos Fusion: Hard-coded credentials on satellite devices allows a locally authenticated attacker to elevate their privileges.7.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: A race condition in the storm control profile may allow an attacker to cause a Denial of Service condition7.4 High
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4300: Stateless firewall policer fails to discard traffic4.7 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4300: FPC crash upon receipt of specific frames on an interface without L2PT or dot1x configured6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Receipt of specific DHCPv6 packet may cause jdhcpd to crash and restart7.4 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Receipt of malformed DHCPv6 packets causes jdhcpd to crash and restart.7.4 High
- juniper junos os evolvedJunos OS Evolved: Denial of Service due to receipt of specific genuine layer 2 frames.6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: Executing CLI command repetitively may cause the system to run out of disk space5.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4300-MP/EX4600/EX4650/QFX5K Series: Packet Forwarding Engine manager (FXPC) process crashes when deployed in a Virtual Chassis (VC) configuration6.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS: A specific BGP VPNv6 flowspec message causes routing protocol daemon (rpd) process to crash with a core.6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, vSRX Series: In a multi-tenant environment, a tenant host administrator may configure logical firewall isolation affecting…7.3 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5100-96S: DDoS protection does not work as expected.5.8 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: ACX500 Series, ACX4000 Series: Denial of Service due to FFEB crash while processing high rate of specific packets.7.5 High
- juniper paragon active assurance control center, juniper networks paragon active assurance, fedoraproject fedora +2 moreParagon Active Assurance: Authentication bypass vulnerability in Control Center7.4 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX, vSRX Series: J-Web Path traversal vulnerability in SRX and vSRX Series leads to information disclosure.6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Memory leak when querying Aggregated Ethernet (AE) interface statistics7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Receipt of specific packets could lead to Denial of Service in MQTT Server5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: DDoS LACP violation upon receipt of specific layer 2 frames in EVPN-VXLAN deployment6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Denial of Service in J-Web upon receipt of crafted HTTP packets7.5 High
- juniper junos os evolvedJunos OS Evolved: The IPv6 BGP session will flap due to receipt of a specific IPv6 packet7.1 High
- juniper junos os evolvedJunos OS Evolved: Stateless IP firewall filter does not work as expected5.8 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: ANCPD core when hitting maximum-discovery-table-entries limit6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: ACX5448, ACX710: BFD sessions might flap due to high rate of transit ARP packets6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Denial of Service in ppmd upon receipt of malformed packet6.5 Medium
- mitsubishi electric got2000 series gt25 model, got2000 series gt27 model, mitsubishielectric got2000 gt25 firmware +5 more +7 moreImproper authentication vulnerability in GOT2000 series GT27 model all versions, GOT2000 series...7.5 High
- debian linux, linux kernel, broadcom brocade fabric operating system +12 more +14 moreLinux Kernel sctp_destroy_sock race condition6.7 Medium
- cdnetworks aquanplayerAquaNPlayer directory traversing vulnerability6.8 Medium
- amazon freertosThe kernel in Amazon Web Services FreeRTOS before 10.4.3 has an integer overflow in stream_buffer...9.8 Critical
- amazon freertosThe kernel in Amazon Web Services FreeRTOS before 10.4.3 has an integer overflow in queue.c for...9.8 Critical
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...8.2 High
- solarwinds orion virtual infrastructure monitor, orion platform +1 moreThis vulnerability allows local attackers to escalate privileges on affected installations of...7.8 High
- checkpoint identity agentA denial of service vulnerability was reported in Check Point Identity Agent before R81.018.0000,...8.1 High
- eclipse jersey, the eclipse foundation eclipse jersey, oracle communications cloud native core policy +1 more +3 moreLocal information disclosure via system temporary directory6.2 Medium
- anysupport, koino aquanplayer +1 moreAnySupport directory traversing vulnerability8.4 High
- hashicorp vaultHashiCorp Vault and Vault Enterprise Cassandra integrations (storage backend and database secrets...7.5 High
- hashicorp vaultHashiCorp Vault and Vault Enterprise 1.5.1 and newer, under certain circumstances, may exclude...7.5 High
- hashicorp terraform providerHashiCorp Terraform’s Vault Provider (terraform-provider-vault) did not correctly configure GCE...9.8 Critical
com.vaadin:flow-clientMavenServer session is not invalidated when logout() helper method of Authentication module is used in Vaadin 18-196.3 Medium- vaadin flow, flow-client, vaadin +2 moreServer session is not invalidated when logout() helper method of Authentication module is used in Vaadin 18-196.3 Medium
- google llc dart sdk, dart software development kit +1 moreXSS in Dart SDK6.1 Medium
- fusionauth saml v2FusionAuth fusionauth-samlv2 before 0.5.4 allows XXE attacks via a forged AuthnRequest or...6.5 Medium
- zohocorp manageengine opmanagerZoho ManageEngine OpManager before 12.5.329 allows unauthenticated Remote Code Execution due to a...9.8 Critical
linuxUbuntu,linux-awsUbuntu,linux-gke-5.3Ubuntu +7 more +9 morelinux, linux-aws, linux-gke-5.3, linux-hwe, linux-kvm, linux-lts-xenial, linux-oem-5.6, linux-raspi2, linux-raspi2-5.3, linux-snapdragon regressionNo score- mediawikiAn issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. The...5.3 Medium
- mediawikiAn issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. It incorrectly...4.3 Medium
- mediawikiAn issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. Its...4.3 Medium
- mediawikiAn issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. A MediaWiki...6.5 Medium
- mediawikiAn issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. The Special...4.3 Medium
- mediawikiAn issue was discovered in the CommentBox extension for MediaWiki through 1.35.2. Via crafted...5.4 Medium
- Show moreLoading…