CVEs published in April 2021
1,956 vulnerabilities, 217 critical, 16 exploited.
- aterm wg2600hs firmware, nec corporation aterm wg2600hs +1 moreCross-site scripting vulnerability in Aterm WG2600HS firmware Ver1.5.1 and earlier allows remote...6.1 Medium
- nec aterm wf1200cr firmware, aterm wg1200cr firmware, aterm wg2600hs firmware +1 more +3 moreImproper validation of integrity check value vulnerability in NEC Aterm WF1200CR firmware Ver1.3...7.2 High
- nec aterm wf1200cr firmware, aterm wg1200cr firmware, aterm wg2600hs firmware +1 more +3 moreNEC Aterm devices (Aterm WF1200CR firmware Ver1.3.2 and earlier, Aterm WG1200CR firmware Ver1.3.3...7.2 High
- d-link japan k.k. dap-1880ac, dlink dap-1880ac firmware +1 moreMissing authentication for critical function in DAP-1880AC firmware version 1.21 and earlier...9.8 Critical
- d-link japan k.k. dap-1880ac, dlink dap-1880ac firmware +1 moreDAP-1880AC firmware version 1.21 and earlier allows a remote authenticated attacker to execute...8.8 High
- d-link japan k.k. dap-1880ac, dlink dap-1880ac firmware +1 moreImproper following of a certificate's chain of trust vulnerability in DAP-1880AC firmware version...8.8 High
- d-link japan k.k. dap-1880ac, dlink dap-1880ac firmware +1 moreImproper access control vulnerability in DAP-1880AC firmware version 1.21 and earlier allows a...8.8 High
- gurunavi, gurunavi, inc. gurunavi app +1 moreImproper access control vulnerability in Gurunavi App for Android ver.10.0.10 and earlier and for...7.5 High
- nec aterm w1200ex-ms firmware, aterm w1200ex firmware, aterm w300p firmware +15 more +17 moreCross-site scripting vulnerability in NEC Aterm devices (Aterm WG1900HP2 firmware Ver.1.3.1 and...6.1 Medium
wasm3OSS-FuzzUNKNOWN WRITE in InitDataSegmentsNo score- mozilla firefoxMozilla developers and community members reported memory safety bugs present in Firefox 87. Some...8.8 High
- exiv2, debian linux, fedoraproject fedora +2 moreOut-of-bounds read in Exiv2::Jp2Image::doWriteMetadata2.5 Low
libdwarfopenSUSESecurity update for libdwarfNo score- npupnp project npupnpThe server in npupnp before 4.1.4 is affected by DNS rebinding in the embedded web server ...8.8 High
- webminWebmin 1.973 is affected by Cross Site Request Forgery (CSRF) to create a privileged user through...8.8 High
- webminWebmin 1.973 is affected by reflected Cross Site Scripting (XSS) to achieve Remote Command...9.6 Critical
- webminWebmin 1.973 is affected by Cross Site Request Forgery (CSRF) to achieve Remote Command Execution...8.8 High
- akuvox c315 firmwareAkuvox C315 115.116.2613 allows remote command Injection via the cfgd_server service. The attack...9.8 Critical
- simple glasgow haskell compiler project glasgow haskell compilerThe unofficial vscode-ghc-simple (aka Simple Glasgow Haskell Compiler) extension before 0.2.3 for...9.8 Critical
- react draft wysiwyg project draft wysiwygCross-site Scripting in React Draft Wysiwyg5.4 Medium
- directumSettings.aspx?view=About in Directum 5.8.2 allows XSS via the HTTP User-Agent header.6.1 Medium
- pvrsrvkm.ko project pvrsrvkm.koThe PowerVR GPU kernel driver in pvrsrvkm.ko through 2021-04-24 for the Linux kernel, as used on...7.0 High
- ezxml project ezxml, debian linux +1 moreAn issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_decode() performs...7.5 High
gst-plugins-ugly1.0Debiangst-plugins-ugly1.0 - security updateNo scoregst-plugins-bad1.0Debiangst-plugins-bad1.0 - security updateNo scoregst-libav1.0Debiangst-libav1.0 - security updateNo score- gstreamer, netapp active iq unified manager, e-series santricity os controller +9 more +11 moreGStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.5.5 Medium
- sentrysoftware hardware sentry km for bmc patrolIn Hardware Sentry KM before 10.0.01 for BMC PATROL, a cleartext password may be discovered after...7.5 High
- avaya callback assistXXE in Avaya Callback Assist Administration8.1 High
- avaya aura orchestration designerXXE in Avaya Aura Orchestration Designer8.1 High
- sipwise next generation communication platformSipwise C5 NGCP CSC through CE_m39.3.1 allows call/click2dial CSRF attacks for actions with...8.8 High
- sipwise next generation communication platformSipwise C5 NGCP CSC through CE_m39.3.1 has multiple authenticated stored and reflected XSS...5.4 Medium
- void aurall rec monitorAn issue was discovered in svc-login.php in Void Aural Rec Monitor 9.0.0.1. An unauthenticated...7.5 High
- void aural rec monitorAn issue was discovered in svc-login.php in Void Aural Rec Monitor 9.0.0.1. Passwords are stored...7.5 High
- sonatype nexus repository managerSonatype Nexus Repository Manager 3 Pro up to and including 3.30.0 has Incorrect Access Control.4.9 Medium
- dotcmsCross Site Scripting (XSS) in dotCMS v5.1.5 allows remote attackers to execute arbitrary code by...5.4 Medium
- avaya session border controller for enterpriseCommand injection in Avaya Session Border Controller for Enterprise7.2 High
- misp-project mispIn app/Model/MispObject.php in MISP 2.4.141, an incorrect sharing group association could lead to...7.5 High
- jquery-plugin-query-object project jquery-plugin-query-objectjquery-plugin-query-object contains prototype pollution vulnerability8.8 High
- backbone-query-parameters project backbone-query-parametersPrototype Pollution in backbone-query-parameters8.8 High
- purl project purlImproperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in purl...8.8 High
- jquery-bbq project jquery-bbqPrototype Pollution in jquery-bbq8.8 High
- noderedis node-redis, redis.js redis +1 morePotential exponential regex in monitor mode5.3 Medium
- acemetrix jquery-deparamPrototype Pollution in jquery-deparam8.8 High
- mootools mootools-moremootools-more vulnerable to prototype pollution8.8 High
- jquery-sparkle project jquery-sparkleImproperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in...8.8 High
- gitlab, gitlab community and enterprise editions +1 moreAn issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab...10.0 Critical
- the wireshark foundation wireshark, debian linux, fedoraproject fedora +1 more +3 moreExcessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12...5.5 Medium
- horner automation cscapeCscape (All versions prior to 9.90 SP4) lacks proper validation of user-supplied data when...7.8 High
- exiftool, debian linux, fedoraproject fedora +2 moreImproper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up...6.8 Medium
- Show moreLoading…