CVEs published in April 2021
1,956 vulnerabilities, 217 critical, 16 exploited.
- homeautomation project homeautomationHomeAutomation 3.3.2 suffers from an authenticated OS command execution vulnerability using...8.0 High
- homeautomation project homeautomationIn HomeAutomation 3.3.2 input passed via the 'redirect' GET parameter in 'api.php' script is not...6.1 Medium
- homeautomation project homeautomationHomeAutomation 3.3.2 is affected by Cross Site Request Forgery (CSRF). The application interface...8.8 High
- homeautomation project homeautomationHomeAutomation 3.3.2 is affected by persistent Cross Site Scripting (XSS). XSS vulnerabilities...6.1 Medium
- ibm spectrum scaleIBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is potentially vulnerable to...7.0 High
- ibm spectrum scaleIBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is vulnerable to cross-site...5.4 Medium
- ibm content navigatorIBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ibm content navigatorIBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ibm content navigatorIBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ibm spectrum scaleIBM Spectrum Scale 5.0.4.1 through 5.1.0.3 could allow a local privileged user to overwrite files...4.4 Medium
- honor pcmanagerA DLL search path vulnerability was reported in Lenovo PCManager, prior to version 3.0.400.3252,...7.8 High
- honor pcmanagerA denial of service vulnerability was reported in Lenovo PCManager, prior to version 3.0.400.3252...5.5 Medium
- soyal 701clientSoyal Technology 701Client 9.0.1 is vulnerable to Insecure permissions via client.exe binary with...8.8 High
- symantec security analyticsAn input validation flaw in the Symantec Security Analytics web UI 7.2 prior 7.2.7, 8.1, prior to...9.8 Critical
- soyal 701server, 701clientsql, 701serversql +2 moreSoyal Technologies SOYAL 701Server 9.0.1 suffers from an elevation of privileges vulnerability...8.8 High
- criticalmanufacturing cncsoft-bCNCSoft-B Versions 1.0.0.3 and prior is vulnerable to an out-of-bounds write, which may allow an...7.8 High
- criticalmanufacturing cncsoft-bCNCSoft-B Versions 1.0.0.3 and prior is vulnerable to an out-of-bounds read, which may allow an...7.8 High
- deltaww industrial automation commgrDelta Industrial Automation COMMGR Versions 1.12 and prior are vulnerable to a stack-based buffer...9.8 Critical
- unisys data exchange management studioUnisys Data Exchange Management Studio through 5.0.34 doesn't sanitize the input to a HTML...5.4 Medium
- apache supersetApache Superset Open Redirect6.1 Medium
- apache ozoneOzone S3 Gateway allows bucket and key access to non authenticated users7.5 High
- recruit co., ltd. hot pepper gourmet app, recruit-holdings hot pepper gourmet +1 moreImproper access control vulnerability in Hot Pepper Gourmet App for Android ver.4.111.0 and...4.3 Medium
- emre vona wp fastest cacheDirectory traversal vulnerability in WP Fastest Cache versions prior to 0.9.1.7 allows a remote...6.5 Medium
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows configuration injection in create_unbound_ad_servers.sh upon a...5.9 Medium
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an integer overflow in the regional allocator via regional_alloc.9.8 Critical
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an integer overflow in the regional allocator via the ALIGN_UP macro.9.8 Critical
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an integer overflow in sldns_str2wire_dname_buf_origin, leading to an...9.8 Critical
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an out-of-bounds write in sldns_bget_token_par.9.8 Critical
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an assertion failure and denial of service in synth_cname.7.5 High
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an assertion failure and denial of service in dname_pkt_copy via an...7.5 High
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an integer overflow in a size calculation in dnscrypt/dnscrypt.c.9.8 Critical
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an integer overflow in a size calculation in respip/respip.c.9.8 Critical
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an infinite loop via a compressed name in dname_pkt_copy.7.5 High
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an assertion failure via a compressed name in dname_pkt_copy.7.5 High
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an out-of-bounds write via a compressed name in rdata_copy.9.8 Critical
- edimax technology co., ltd. ic-3140w, edimax ic-3140w firmware +1 moreEDIMAX Technology Co., Ltd. HD Wireless Day & Night Network Camera IC-3140W - Hard-coded password7.5 High
- sonatype nexus repository managerSonatype Nexus Repository Manager 3.x before 3.30.1 allows a remote attacker to get a list of...5.3 Medium
- pgsync project pgsyncPgsync Contains Cleartext Transmission of Sensitive Information7.5 High
wasm3OSS-FuzzUNKNOWN WRITE in Runtime_ReleaseNo scorewasm3OSS-FuzzSegv on unknown address in std::__Fuzzer::basic_string<char, std::__Fuzzer::char_traits<char>, std::__FuzzeNo scoregst-libav1.0Debiangst-libav1.0 - security updateNo scoregst-plugins-ugly1.0Debiangst-plugins-ugly1.0 - security updateNo scoregst-plugins-bad1.0Debiangst-plugins-bad1.0 - security updateNo score- google chromeInsufficient validation of untrusted input in Extensions in Google Chrome prior to 90.0.4430.72...6.5 Medium
- shibboleth service providerShibboleth Service Provider 3.x before 3.2.2 is prone to a NULL pointer dereference flaw...7.5 High
- hedgedocRelative Path Traversal Attack on note creation4.7 Medium
- advantech webaccess\/scadaIncorrect permissions are set to default on the ‘Project Management’ page of WebAccess/SCADA...8.8 High
- hedgedocPDF export allows arbitrary file reads10.0 Critical
- gestsupGestsup before 3.2.10 allows account takeover through the password recovery functionality (remote...9.8 Critical
- piwigo localfiles editorshow_default.php in the LocalFilesEditor extension before 11.4.0.1 for Piwigo allows Local File...7.5 High
- Show moreLoading…