CVEs published in April 2021
1,956 vulnerabilities, 217 critical, 16 exploited.
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...8.2 High
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...8.2 High
- parallels desktopThis vulnerability allows local attackers to disclose sensitive information on affected...7.3 High
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...8.8 High
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...8.8 High
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...8.8 High
- parallels desktopThis vulnerability allows local attackers to disclose sensitive information on affected...6.0 Medium
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...7.5 High
- parallels desktopThis vulnerability allows local attackers to delete arbitrary files on affected installations of...3.2 Low
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...8.8 High
- parallels desktopThis vulnerability allows local attackers to disclose sensitive information on affected...6.5 Medium
- parallels desktopThis vulnerability allows local attackers to disclose sensitive information on affected...6.5 Medium
- parallels desktopThis vulnerability allows local attackers to disclose sensitive information on affected...6.5 Medium
- uniview isc2500-s firmwareAn issue was discovered in uniview ISC2500-S. This is an upload vulnerability where an attacker...9.8 Critical
- inxeduSQL Injection in com/inxedu/OS/edu/controller/letter/AdminMsgSystemController in Inxedu v2.0.6...9.8 Critical
- novel boutique house-plus project boutique house-plusDirectory Traversal in the fileDownload function in com/java2nb/common/controller/FileController...5.3 Medium
- chinamobile an lianbao wf-1 firmwareThe api/ZRIGMP/set_MLD_PROXY interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote...9.8 Critical
- chinamobile an lianbao wf-1 firmwareThe api/ZRIptv/setIptvInfo interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote...9.8 Critical
- chinamobile an lianbao wf-1 firmwareThe api/ZRIGMP/set_IGMP_PROXY interface in China Mobile An Lianbao WF-1 router 1.0.1 allows...9.8 Critical
- chinamobile an lianbao wf-1 firmwareThe api/zrDm/set_ZRElink interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote...9.8 Critical
- chinamobile an lianbao wf-1 firmwareThe api/ZRFirmware/set_time_zone interface in China Mobile An Lianbao WF-1 router 1.0.1 allows...9.8 Critical
- chinamobile an lianbao wf-1 firmwareThe api/zrDm/set_zrDm interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote...8.8 High
- chinamobile an lianbao wf-1 firmwareThe api/ZRAndlink/set_ZRAndlink interface in China Mobile An Lianbao WF-1 router 1.0.1 allows...9.8 Critical
- chinamobile an lianbao wf-1 firmwareCommand injection vulnerability in China Mobile An Lianbao WF-1 1.01 via the 'ip' parameter with...9.8 Critical
- mercusys mercury x18g firmwareMERCUSYS Mercury X18G 1.0.5 devices allow Denial of service via a crafted value to the POST...7.5 High
- mercusys mercury x18g firmwareCross site Scripting (XSS) vulnerability in MERCUSYS Mercury X18G 1.0.5 devices, via crafted...6.1 Medium
- shipment 100-design material download system project 100-design material download systemSQL injection in the getip function in conn/function.php in ??100-???????? 1.1 allows remote...7.2 High
- emlogCross Site Scripting (XSS) vulnerability in the article comments feature in emlog 6.0.6.1 Medium
- php-fusion phpfusionCSRF + Cross-site scripting (XSS) vulnerability in search.php in PHPFusion 9.03.110 allows remote...6.1 Medium
- rukovoditelCross Site Request Forgery (CSRF) in Rukovoditel v2.8.3 allows attackers to create an admin user...8.8 High
- pega infinity, pegasystems pega infinity +1 moreIn versions 8.2.1 through 8.5.2 of Pega Infinity, the password reset functionality for local...9.8 Critical
- samurai project samuraisamurai 1.2 has a NULL pointer dereference in printstatus() function in build.c via a crafted...5.5 Medium
- samurai project samuraisamurai 1.2 has a NULL pointer dereference in writefile() in util.c via a crafted build file.5.5 Medium
- md4c project md4cmd_analyze_line in md4c.c in md4c 0.4.7 allows attackers to trigger use of uninitialized memory,...5.5 Medium
- buffalo wsr-2533dhp3-bk firmware, wsr-2533dhpl2-bk firmware +1 moreThe web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware...7.5 High
- buffalo wsr-2533dhp3-bk firmware, wsr-2533dhpl2-bk firmware +1 moreThe web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware...8.8 High
- inim smartliving 10100l firmware, smartliving 10100lg3 firmware, smartliving 1050 firmware +3 more +5 moreAn Unauthenticated Server-Side Request Forgery (SSRF) vulnerability exists in Inim Electronics...7.5 High
- smartwares home easy firmwareSmartwares HOME easy <=1.0.9 is vulnerable to an unauthenticated database backup download and...7.5 High
- inim smartliving 10100l firmware, smartliving 10100lg3 firmware, smartliving 1050 firmware +3 more +5 moreInim Electronics Smartliving SmartLAN/G/SI <=6.x uses default hardcoded credentials. An attacker...9.8 Critical
- live555 streaming mediaVulnerability in the AC3AudioFileServerMediaSubsession, ADTSAudioFileServerMediaSubsession, and...7.5 High
- inim smartliving 10100l firmware, smartliving 10100lg3 firmware, smartliving 1050 firmware +3 more +5 moreInim Electronics SmartLiving SmartLAN/G/SI <=6.x suffers from an authenticated remote command...8.8 High
- domoticz mydomoathomeEmmanuel MyDomoAtHome (MDAH) REST API REST API Domoticz ISS Gateway 0.2.40 is affected by an...7.5 High
- arubanetworks clearpass, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass...6.5 Medium
- arubanetworks clearpass, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy...4.8 Medium
- arubanetworks clearpass, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote disclosure of privileged information vulnerability was discovered in Aruba ClearPass...6.5 Medium
- arubanetworks clearpass, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote XML external entity (XXE) vulnerability was discovered in Aruba ClearPass Policy Manager...8.2 High
- arubanetworks clearpass, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy...4.8 Medium
aes-ctrcrates.io`aes-ctr` has been merged into the `aes` crateNo scoreaes-softcrates.io`aes-soft` has been merged into the `aes` crateNo scoreaesnicrates.io`aesni` has been merged into the `aes` crateNo score- Show moreLoading…