CVEs published in April 2021
1,956 vulnerabilities, 217 critical, 16 exploited.
- ivorysearch ivory search, unknown ivory search – wordpress search plugin +1 moreIvory Search < 4.6.1 - Reflected Cross Site Scripting (XSS)6.1 Medium
- boxystudio cooked, unknown cooked ppro +1 moreCooked Pro < 1.7.5.6 - Unauthenticated Reflected Cross Site Scripting (XSS)6.1 Medium
- advanced booking calendar booking calendar, elbtide advanced booking calendar +1 moreAdvanced Booking Calendar < 1.6.8 - Authenticated Reflected Cross-Site Scripting (XSS)5.4 Medium
- siemens nucleus net, nucleus readystart v3, nucleus source code +2 moreA vulnerability has been identified in Nucleus NET (All versions), Nucleus RTOS (versions...5.3 Medium
- siemens siveillance video open network bridgeA vulnerability has been identified in Siveillance Video Open Network Bridge (2020 R3),...8.8 High
- siemens opcenter quality, qms automotive +1 moreA vulnerability has been identified in Opcenter Quality (All versions < V12.2), QMS Automotive ...9.8 Critical
- siemens solid edge se2020, solid edge se2021 +1 moreA vulnerability has been identified in Solid Edge SE2020 (All versions < SE2020MP13), Solid Edge...7.8 High
- siemens solid edge se2020, solid edge se2021 +1 moreA vulnerability has been identified in Solid Edge SE2020 (All versions < SE2020MP13), Solid Edge...7.8 High
- siemens apogee pxc compact (bacnet), apogee pxc compact (p2 ethernet), apogee pxc modular (bacnet) +9 more +11 moreA vulnerability has been identified in Nucleus 4 (All versions < V4.1.0), Nucleus NET (All...5.3 Medium
- siemens tecnomatix robotexpertA vulnerability has been identified in Tecnomatix RobotExpert (All versions < V16.1). Affected...7.8 High
- siemens scalance x200-4p irt, scalance x201-3p irt, scalance x201-3p irt pro +55 more +57 moreA vulnerability has been identified in SCALANCE X200-4P IRT (All versions < 5.5.1), SCALANCE X201...9.8 Critical
- siemens scalance x200-4p irt, scalance x201-3p irt, scalance x201-3p irt pro +55 more +57 moreA vulnerability has been identified in SCALANCE X200-4P IRT (All versions < 5.5.1), SCALANCE X201...9.8 Critical
- siemens capital embedded ar classic 431-422, capital embedded ar classic r20-11, nucleus net +4 more +6 moreA vulnerability has been identified in Nucleus 4 (All versions < V4.1.0), Nucleus NET (All...8.7 High
- siemens capital embedded ar classic 431-422, capital embedded ar classic r20-11, nucleus net +5 more +7 moreA vulnerability has been identified in Nucleus 4 (All versions < V4.1.0), Nucleus NET (All...8.7 High
- siemens apogee pxc compact (bacnet), apogee pxc compact (p2 ethernet), apogee pxc modular (bacnet) +9 more +11 moreA vulnerability has been identified in Nucleus 4 (All versions < V4.1.0), Nucleus NET (All...6.5 Medium
- siemens apogee pxc compact (bacnet), apogee pxc compact (p2 ethernet), apogee pxc modular (bacnet) +9 more +11 moreA vulnerability has been identified in Nucleus 4 (All versions < V4.1.0), Nucleus NET (All...6.5 Medium
- siemens apogee pxc compact (bacnet), apogee pxc compact (p2 ethernet), apogee pxc modular (bacnet) +9 more +11 moreA vulnerability has been identified in Nucleus 4 (All versions < V4.1.0), Nucleus NET (All...6.5 Medium
- siemens apogee pxc compact (bacnet), apogee pxc compact (p2 ethernet), apogee pxc modular (bacnet) +5 more +7 moreA vulnerability has been identified in Nucleus NET (All versions < V5.2), Nucleus RTOS (versions...8.1 High
- siemens solid edge se2020, solid edge se2021 +1 moreA vulnerability has been identified in Solid Edge SE2020 (All versions < SE2020MP13), Solid Edge...7.8 High
- siemens logo! soft comfort, logo\! soft comfort +1 moreA vulnerability has been identified in LOGO! Soft Comfort (All versions). The software insecurely...8.4 High
- siemens logo! soft comfort, logo\! soft comfort +1 moreA vulnerability has been identified in LOGO! Soft Comfort (All versions). A zip slip...5.1 Medium
- siemens apogee pxc compact (bacnet), apogee pxc compact (p2 ethernet), apogee pxc modular (bacnet) +5 more +7 moreA vulnerability has been identified in Nucleus NET (All versions < V5.2), Nucleus RTOS (versions...8.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: J-Web: Cross-site scripting attack allows an attacker to gain control of another users session.8.8 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Trio Chipset: Denial of Service due to packet destined to device's interfaces.5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10002-32Q, QFX10002-60C, QFX10002-72Q, QFX10008, QFX10016: In EVPN-VXLAN scenarios receipt of specific genuine packets by an adjacent attacker will cause a kernel memory leak in FPC.6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX2200-C Series, EX3200 Series, EX3300 Series, EX4200 Series, EX4500 Series, EX4550 Series, EX6210 Series, EX8208 Series, EX8216 Series: Receipt of a crafted ARP packet by an adjacent attack…6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: PTX Series, QFX10K Series: A PTX/QFX FPC may restart unexpectedly with the "inline-Jflow" feature enabled on a large-scale deployment7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: J-Web can be compromised through reflected client-side HTTP parameter pollution attacks.8.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: J-Web has an Improper Neutralization of CRLF Sequences in its HTTP Headers which allows an attacker to carry out multiple types of attacks.8.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Receipt of a crafted DHCP packet will cause the jdhcpd DHCP service to core.7.4 High
- juniper junos, juniper networks junos os +1 morecSRX: Use of Hard-coded Cryptographic Keys allows an attacker to take control of the device through device management services.8.1 High
- juniper appformix, juniper networks contrail insights +1 moreContrail Insights: The REST API implementation allows an unauthenticated remote attacker to execute commands as root.8.1 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: MX Series with MPC10/MPC11, PTX10003, PTX10008: Line card may crash and restart when traffic is hitting a firewall filter having a term with syslog action configured5.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: PTX Series: Denial of Service in packet processing due to heavy route churn when J-Flow sampling is enabled5.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10002-60C: Use after free vulnerability found during static code analysis6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Denial of Service vulnerability in J-Web and web based (HTTP/HTTPS) services caused by a high number of specific requests7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SNMP fails to properly perform authorization checks on incoming received SNMP requests.7.3 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: QFX5K Series: Underlay network traffic might not be processed upon receipt of high rate of specific genuine overlay packets in VXLAN scenario7.4 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Kernel panic upon receipt of specific TCPv6 packet on management interface5.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series, EX9200 Series: Trio-based MPCs memory leak in VPLS with integrated routing and bridging (IRB) interface6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: mosquitto Local Privilege Escalation vulnerability in SUID binaries5.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: ethtraceroute Local Privilege Escalation vulnerability in SUID binaries5.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Remote code execution vulnerability in overlayd service9.8 Critical
- juniper junos, juniper networks junos os +1 moreJunos OS: NFX Series: Local Command Execution Vulnerability in JDMD Leads to Privilege Escalation7.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: NFX Series: Local Code Execution Vulnerability in JDMD Leads to Privilege Escalation7.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series with MS-PIC, MS-SPC3, MS-MIC or MS-MPC: The BRAS Subscriber Services service activation portal is vulnerable to a Denial of Service (DoS) via malformed HTTP packets8.6 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An attacker sending a specific crafted BGP update message will crash RPD7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: A remote attacker may be able to cause a PFE buffer overflow to arbitrarily remotely execute code or commands on the target device with UTM enabled.8.1 High
- juniper junos, juniper networks junos os +1 moreNFX Series: Hard-coded credentials allow an attacker to take control of any instance through administrative interfaces.10.0 Critical
- juniper junos, juniper networks junos os +1 moreJunos OS: PTX Series, QFX Series: Due to a race condition input loopback firewall filters applied to interfaces may not operate even when listed in the running configuration.5.1 Medium
- Show moreLoading…