CVEs published in April 2021
1,956 vulnerabilities, 217 critical, 16 exploited.
- arubanetworks clearpass, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy...8.8 High
- arubanetworks clearpass, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass...6.5 Medium
- arubanetworks clearpass, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote server side request forgery (SSRF) remote code execution vulnerability was discovered in...9.8 Critical
- arubanetworks clearpass, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy...5.4 Medium
- arubanetworks airwaveA remote URL redirection vulnerability was discovered in Aruba AirWave Management Platform...6.1 Medium
- arubanetworks airwaveA remote unauthorized access vulnerability was discovered in Aruba AirWave Management Platform...8.8 High
- arubanetworks airwaveA remote unauthorized access vulnerability was discovered in Aruba AirWave Management Platform...8.8 High
- arubanetworks airwaveA remote XML external entity vulnerability was discovered in Aruba AirWave Management Platform...8.1 High
java-1_7_0-openjdkSUSESecurity update for java-1_7_0-openjdkNo scorepermissionsSUSESecurity update for permissionsNo score- gnu wget, broadcom brocade fabric operating system firmware, netapp 500f firmware +3 more +5 moreGNU Wget through 1.21.1 does not omit the Authorization header upon a redirect to a different...6.1 Medium
- bundler, fedoraproject fedora, microsoft package manager configurations +2 moreDependency Confusion in Bundler8.8 High
- aviatrix vpn clientAviatrix VPN Client before 2.14.14 on Windows has an unquoted search path that enables local...7.8 High
jsonconsOSS-FuzzContainer-overflow in unsigned long jsoncons::detail::escape_string<char, jsoncons::string_sink<std::_No scorefluent-bitOSS-FuzzHeap-double-free in flb_freeNo scorewasm3OSS-FuzzHeap-use-after-free in m3_FreeRuntimeNo scorewasm3OSS-FuzzUNKNOWN READ in ReadLEB_u32No score- cesanta mongooseos mjsIn mjs_json.c in Cesanta MongooseOS mJS 1.26, a maliciously formed JSON string can trigger an off...9.8 Critical
- gnu binutilsA flaw was found in binutils readelf 2.35 program. An attacker who is able to convince a victim...7.8 High
- samba, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs)...6.8 Medium
- arcadyan buffalo firmware, buffalo wsr-2533dhp3-bk firmware, wsr-2533dhpl2-bk firmware +2 moreA path traversal vulnerability in the web interfaces of Buffalo WSR-2533DHPL2 firmware version <=...9.8 Critical
- avaya equinox conferencing, meetings management +1 moreAvaya Meetings Server Information Disclosure vulnerability7.5 High
- avaya meetings server, equinox conferencing +1 moreAvaya Equinox Conferencing XXE vulnerability8.1 High
- miraheze managewikiwikiconfig API leaked private config variables set through ManageWiki9.4 Critical
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The...6.0 Medium
- safe fme serverUnauthenticated Stored XSS in FME Server versions 2019.2 and 2020.0 Beta allows a remote attacker...6.1 Medium
- safe fme serverAuthenticated Stored XSS in FME Server versions 2019.2 and 2020.0 Beta allows a remote attacker...5.4 Medium
- etherpadIn Etherpad < 1.8.3, a specially crafted URI would raise an unhandled exception in the cache...7.5 High
- etherpadEtherpad < 1.8.3 is affected by a denial of service in the import functionality. Upload of binary...7.5 High
- etherpadEtherpad <1.8.3 stored passwords used by users insecurely in the database and in log files. This...6.5 Medium
- etherpad ueberdbIn Etherpad UeberDB < 0.4.4, due to MySQL omitting trailing spaces on char / varchar columns...7.5 High
- etherpadEtherpad < 1.8.3 is affected by a missing lock check which could cause a denial of service....7.5 High
- arubanetworks airwaveA remote XML external entity vulnerability was discovered in Aruba AirWave Management Platform...8.1 High
- arubanetworks airwaveA remote XML external entity vulnerability was discovered in Aruba AirWave Management Platform...6.5 Medium
- arubanetworks airwaveA remote insecure deserialization vulnerability was discovered in Aruba AirWave Management...7.2 High
- arubanetworks airwaveA remote SQL injection vulnerability was discovered in Aruba AirWave Management Platform version...8.1 High
- arubanetworks airwaveA remote escalation of privilege vulnerability was discovered in Aruba AirWave Management...7.5 High
- arubanetworks airwaveA remote insecure deserialization vulnerability was discovered in Aruba AirWave Management...8.8 High
drupal/samlauthPackagistThe SAML Authentication module allows users to authenticate against a SAML identity provider to login to your Drupal site. The module doesn't sufficiently protect against unauthorized local access, by…No score- browserslist project browserslistRegular Expression Denial of Service (ReDoS)5.3 Medium
- 1234n minicmsCross Site Scripting (XSS) in MiniCMS v1.10 allows remote attackers to execute arbitrary code by...6.1 Medium
- qibosoft qibocmsCross Site Scripting (XSS) in Qibosoft QiboCMS v7 and earlier allows remote attackers to execute...6.1 Medium
- ave dominaplus, 53ab-wbs firmware, ts01 firmware +4 more +6 moreAVE DOMINAplus <=1.10.x suffers from an unauthenticated reboot command execution. Attackers can...7.5 High
- ave dominaplus, 53ab-wbs firmware, ts01 firmware +4 more +6 moreAVE DOMINAplus <=1.10.x suffers from clear-text credentials disclosure vulnerability that allows...9.8 Critical
- wems enterprise managerIn WEMS Limited Enterprise Manager 2.58, input passed to the GET parameter 'email' is not...6.1 Medium
giflibSUSESecurity update for giflibNo score- arubanetworks airwaveA remote authentication restriction bypass vulnerability was discovered in Aruba AirWave...8.1 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA local escalation of privilege vulnerability was discovered in Aruba ClearPass Policy Manager...7.8 High
- ave dominaplus, 53ab-wbs firmware, ts01 firmware +4 more +6 moreAVE DOMINAplus <=1.10.x suffers from an authentication bypass vulnerability due to missing...9.8 Critical
- pdfresurrect project pdfresurrectA flaw was found in PDFResurrect in version 0.22b. There is an infinite loop in...5.5 Medium
- Show moreLoading…