CVEs published in April 2021
1,956 vulnerabilities, 217 critical, 16 exploited.
- opendesign drawings sdk, siemens comos +1 moreAn out-of-bounds write vulnerability exists in the file-reading procedure in Open Design Alliance...7.8 High
- jansson project janssonAn issue was discovered in Jansson through 2.13.1. Due to a parsing error in json_loads, there's...7.5 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in navigation in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who...9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreOut of bounds memory access in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote...8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreType confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInteger overflow in Mojo in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had...9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who...6.5 Medium
- ibm spectrum protect plusIBM Spectrum Protect Plus 10.1.0 through 10.1.7 uses weaker than expected cryptographic...5.9 Medium
- ibm spectrum protect client, spectrum protect for space management +1 moreIBM Spectrum Protect Client 8.1.0.0-8 through 1.11.0 is vulnerable to a stack-based buffer...8.4 High
- ibm spectrum protect client, spectrum protect for space management +1 moreIBM Spectrum Protect Client 8.1.0.0 through 8.1.11.0 is vulnerable to a stack-based buffer...6.2 Medium
- ibm spectrum protect plusIBM Spectrum Protect Plus File Systems Agent 10.1.6 and 10.1.7 stores potentially sensitive...6.2 Medium
- ibm spectrum protect for virtual environments, spectrum protect backup-archive client +1 moreIBM Spectrum Protect Client 8.1.0.0 through 8.1.11.0 could allow a local user to escalate their...7.4 High
- ibm spectrum protect plusIBM Spectrum Protect Plus 10.1.0 through 10.1.7 uses Cross-Origin Resource Sharing (CORS) which...6.5 Medium
- ibm planning analyticsIBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information by...5.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient validation of untrusted input in Mojo in Google Chrome prior to 90.0.4430.72 allowed...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to...5.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to...5.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to...5.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Network API in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in WebMIDI in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreIncorrect security UI in Network Config UI in Google Chrome on ChromeOS prior to 90.0.4430.72...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Navigation in Google Chrome on iOS prior to 90.0.4430.72 allowed...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Network in Google Chrome prior to 90.0.4430.72 allowed a remote...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in storage in Google Chrome prior to 90.0.4430.72 allowed a remote...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient data validation in QR scanner in Google Chrome on iOS prior to 90.0.4430.72 allowed...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in IndexedDB in Google Chrome prior to 90.0.4430.72 allowed an attacker who...8.6 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in navigation in Google Chrome on iOS prior to 90.0.4430.72...8.1 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Blink in Google Chrome on OS X prior to 90.0.4430.72 allowed a remote attacker...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Blink in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in extensions in Google Chrome prior to 90.0.4430.72 allowed an attacker who...8.6 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in permissions in Google Chrome prior to 90.0.4430.72 allowed a remote attacker...9.6 Critical
- gnu guix, gnu guix guix-daemon +1 moreLocal privilege escalation in GNU Guix via guix-daemon and '--keep-failed'5.5 Medium
- postcssRegular Expression Denial of Service (ReDoS)5.3 Medium
- the foreman foremanA smart proxy that provides a restful API to various sub-systems of the Foreman is affected by...5.9 Medium
- orangehrmOrangeHRM 4.7 allows an unauthenticated user to enumerate the valid username and email address...5.3 Medium
- minthcmA weak password requirement vulnerability exists in the Create New User function of MintHCM...9.8 Critical
- minthcmThe Import function in MintHCM RELEASE 3.0.8 allows an attacker to execute a cross-site scripting...6.1 Medium
- openvpn, canonical ubuntu linux, debian linux +1 more +3 moreOpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access...7.5 High
- netgear r7000 firmwareNETGEAR R7000 1.0.11.116 devices have a heap-based Buffer Overflow that is exploitable from the...8.8 High
- jamoviJamovi <=1.6.18 is affected by a cross-site scripting (XSS) vulnerability. The column-name is...6.1 Medium
- hametech hame sd1 wi-fi firmwareAn access control vulnerability in Hame SD1 Wi-Fi firmware <=V.20140224154640 allows an attacker...9.8 Critical
- manta safe-objPrototype pollution in safe-obj9.8 Critical
- safe-flat project safe-flatPrototype pollution in safe-flat9.8 Critical
- tyk tyk-identity-brokerAuthentication Bypass4.8 Medium
- cpanelcPanel before 94.0.3 allows self-XSS via EasyApache 4 Save Profile (SEC-581).6.1 Medium
- leocadLeoCAD before 21.03 sometimes allows a use-after-free during the opening of a new document.5.5 Medium
- nec aterm wg2600hs firmware, aterm wx3000hp firmware, nec corporation aterm devices +2 moreImproper access control vulnerability in NEC Aterm WG2600HS firmware Ver1.5.1 and earlier, and...5.3 Medium
- nec aterm wg2600hs firmware, nec corporation aterm wg2600hs +1 moreAterm WG2600HS firmware Ver1.5.1 and earlier allows an attacker to execute arbitrary OS commands...9.8 Critical
- Show moreLoading…