Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: March 2021

116 records · 22 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 1 of 2

  • CVE-2021-25122
    35Monitor

    Apache Tomcat h2c request mix-up

    HighCVSS 7.5No exploitEPSS 18%

    apache · tomcatMar 1, 2021

  • CVE-2021-25830
    43Plan

    A file extension handling issue was found in [core] module of ONLYOFFICE DocumentServer v4.2.0.236-v5.6.4.13.

    CriticalCVSS 9.8No exploitEPSS 11%

    onlyoffice · document serverMar 1, 2021

  • CVE-2021-25831
    42Plan

    A file extension handling issue was found in [core] module of ONLYOFFICE DocumentServer v4.0.0-9-v5.6.3.

    CriticalCVSS 9.8No exploitEPSS 11%

    onlyoffice · document serverMar 1, 2021

  • CVE-2021-25832
    43Plan

    A heap buffer overflow vulnerability inside of BMP image processing was found at [core] module of ONLYOFFICE DocumentServer v4.0.0-9-v6.0.0.

    CriticalCVSS 9.8No exploitEPSS 12%

    onlyoffice · document serverMar 1, 2021

  • CVE-2021-25833
    52Plan

    A file extension handling issue was found in [server] module of ONLYOFFICE DocumentServer v4.2.0.71-v5.6.0.21.

    CriticalCVSS 9.8No exploitEPSS 43%

    onlyoffice · document serverMar 1, 2021

  • CVE-2021-27876
    66This week

    An issue was discovered in Veritas Backup Exec before 21.2.

    HighCVSS 8.1KEVWeaponizedEPSS 13%

    veritas · backup execMar 1, 2021

  • CVE-2021-27877
    88Now

    An issue was discovered in Veritas Backup Exec before 21.2.

    CriticalCVSS 9.8KEVWeaponizedEPSS 64%

    veritas · backup execMar 1, 2021

  • CVE-2021-27878
    72This week

    An issue was discovered in Veritas Backup Exec before 21.2.

    HighCVSS 8.8KEVWeaponizedEPSS 23%

    veritas · backup execMar 1, 2021

  • CVE-2021-27886
    53Plan

    rakibtg Docker Dashboard before 2021-02-28 allows command injection in backend/utilities/terminal.js via shell metacharacters in the command

    CriticalCVSS 9.8No exploitEPSS 45%

    docker dashboard project · docker dashboardMar 1, 2021

  • CVE-2021-26412
    46Plan

    Microsoft Exchange Server Remote Code Execution Vulnerability

    CriticalCVSS 9.1Proof of conceptEPSS 33%

    microsoft · exchange serverMar 2, 2021

  • CVE-2021-26854
    33Monitor

    Microsoft Exchange Server Remote Code Execution Vulnerability

    MediumCVSS 6.6Proof of conceptEPSS 24%

    microsoft · exchange serverMar 2, 2021

  • CVE-2021-26855
    96Now

    Microsoft Exchange Server Remote Code Execution Vulnerability

    CriticalCVSS 9.1KEVWeaponizedEPSS 99%

    microsoft · exchange serverMar 2, 2021

  • CVE-2021-26857
    90Now

    Microsoft Exchange Server Remote Code Execution Vulnerability

    HighCVSS 7.8KEVWeaponizedEPSS 95%

    microsoft · exchange serverMar 2, 2021

  • CVE-2021-27078
    42Plan

    Microsoft Exchange Server Remote Code Execution Vulnerability

    CriticalCVSS 9.1Proof of conceptEPSS 21%

    microsoft · exchange serverMar 2, 2021

  • CVE-2021-26858
    89Now

    Microsoft Exchange Server Remote Code Execution Vulnerability

    HighCVSS 7.8KEVWeaponizedEPSS 93%

    microsoft · exchange serverMar 3, 2021

  • CVE-2021-27065
    91Now

    Microsoft Exchange Server Remote Code Execution Vulnerability

    HighCVSS 7.8KEVWeaponizedEPSS 99%

    microsoft · exchange serverMar 3, 2021

  • CVE-2020-29047
    44Plan

    The wp-hotel-booking plugin through 1.10.2 for WordPress allows remote attackers to execute arbitrary code because of an unserialize operati

    CriticalCVSS 9.8Proof of conceptEPSS 16%

    thimpress · wp hotel bookingMar 3, 2021

  • CVE-2021-21978
    69This week

    VMware View Planner 4.x prior to 4.6 Security Patch 1 contains a remote code execution vulnerability.

    CriticalCVSS 9.8WeaponizedEPSS 99%

    vmware · view plannerMar 3, 2021

  • CVE-2021-22681
    88Now

    Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix cont

    CriticalCVSS 9.8KEVWeaponizedEPSS 63%

    rockwellautomation · factorytalk services platformMar 3, 2021

  • CVE-2021-22883
    53Plan

    Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connection attempts with an

    HighCVSS 7.5No exploitEPSS 77%

    nodejs · node.jsMar 3, 2021

  • CVE-2021-22884
    41Plan

    Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to DNS rebinding attacks as the whitelist includes “localhost6”.

    HighCVSS 7.5No exploitEPSS 36%

    nodejs · node.jsMar 3, 2021

  • CVE-2021-27931
    41Plan

    LumisXP (aka Lumis Experience Platform) before 10.0.0 allows unauthenticated blind XXE via an API request to PageControllerXml.jsp.

    CriticalCVSS 9.1Proof of conceptEPSS 18%

    lumis · lumis experience platformMar 3, 2021

  • CVE-2020-24913
    51Plan

    A SQL injection vulnerability in qcubed (all versions including 3.1.1) in profile.php via the strQuery parameter allows an unauthenticated a

    CriticalCVSS 9.8Proof of conceptEPSS 40%

    qcubed · qcubedMar 4, 2021

  • CVE-2020-28601
    40Plan

    A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.

    CriticalCVSS 9.8No exploitEPSS 2%

    cgal · computational geometry algorithms libraryMar 4, 2021

  • CVE-2020-8298
    42Plan

    fs-path node module before 0.0.25 is vulnerable to command injection by way of user-supplied inputs via the `copy`, `copySync`, `remove`, an

    CriticalCVSS 9.8No exploitEPSS 11%

    fs-path project · fs-pathMar 4, 2021

  • CVE-2021-25337
    59Plan

    Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to read

    HighCVSS 7.1KEVWeaponizedEPSS 2%

    samsung · androidMar 4, 2021

  • CVE-2021-27314
    43Plan

    SQL injection in admin.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via username

    CriticalCVSS 9.8Proof of conceptEPSS 12%

    doctor appointment system project · doctor appointment systemMar 4, 2021

  • CVE-2021-27964
    53Plan

    SonLogger before 6.4.1 is affected by Unauthenticated Arbitrary File Upload.

    CriticalCVSS 9.8Proof of conceptEPSS 47%

    sfcyazilim · sonloggerMar 4, 2021

  • CVE-2021-27965
    43Plan

    The MsIo64.sys driver before 1.1.19.1016 in MSI Dragon Center before 2.0.98.0 has a buffer overflow that allows privilege escalation via a c

    CriticalCVSS 9.8Proof of conceptEPSS 11%

    msi · dragon centerMar 4, 2021

  • CVE-2021-27907
    47Plan

    Apache Superset stored XSS on Dashboard markdown

    MediumCVSS 5.4No exploitEPSS 86%

    apache · supersetMar 5, 2021

  • CVE-2020-29134
    42Plan

    The TOTVS Fluig platform allows path traversal through the parameter "file = ..

    HighCVSS 8.6Proof of conceptEPSS 27%

    totvs · fluigMar 5, 2021

  • CVE-2021-26294
    35Monitor

    An issue was discovered in AfterLogic Aurora through 7.7.9 and WebMail Pro through 7.7.9.

    HighCVSS 7.5Proof of conceptEPSS 16%

    afterlogic · auroraMar 7, 2021

  • CVE-2020-27838
    31Monitor

    A flaw was found in keycloak in versions prior to 13.0.0.

    MediumCVSS 6.5Proof of conceptEPSS 17%

    redhat · keycloakMar 8, 2021

  • CVE-2021-21480
    51Plan

    SAP MII allows users to create dashboards and save them as JSP through the SSCE (Self Service Composition Environment).

    HighCVSS 8.8No exploitEPSS 52%

    sap · manufacturing integration and intelligenceMar 9, 2021

  • CVE-2021-21166
    72This week

    Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM

    HighCVSS 8.8KEVWeaponizedEPSS 24%

    google · chromeMar 9, 2021

  • CVE-2021-21177
    31Monitor

    Insufficient policy enforcement in Autofill in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive

    MediumCVSS 6.5No exploitEPSS 17%

    google · chromeMar 9, 2021

  • CVE-2021-21300
    60This week

    malicious repositories can execute remote code while cloning

    HighCVSS 7.5WeaponizedEPSS 88%

    git-scm · gitMar 9, 2021

  • CVE-2021-28116
    25Monitor

    Squid through 4.14 and 5.x through 5.0.5, in some configurations, allows information disclosure because of an out-of-bounds read in WCCP pro

    MediumCVSS 5.3No exploitEPSS 12%

    squid-cache · squidMar 9, 2021

  • CVE-2021-21295
    29Monitor

    Possible request smuggling in HTTP/2 due missing validation

    MediumCVSS 5.9No exploitEPSS 18%

    netty · nettyMar 9, 2021

  • CVE-2020-29238
    35Monitor

    An integer buffer overflow in the Nginx webserver of ExpressVPN Router version 1 allows remote attackers to obtain sensitive information whe

    HighCVSS 7.5Proof of conceptEPSS 16%

    expressvpn · expressvpnMar 9, 2021

  • CVE-2020-13936
    42Plan

    Velocity Sandbox Bypass

    HighCVSS 8.8No exploitEPSS 22%

    apache · velocity engineMar 10, 2021

  • CVE-2021-26863
    32Monitor

    Windows Win32k Elevation of Privilege Vulnerability

    HighCVSS 7.0No exploitEPSS 11%

    microsoft · windows 10Mar 11, 2021

  • CVE-2021-26877
    44Plan

    Windows DNS Server Remote Code Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 17%

    microsoft · windows server 2008Mar 11, 2021

  • CVE-2021-26897
    42Plan

    Windows DNS Server Remote Code Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 11%

    microsoft · windows server 2008Mar 11, 2021

  • CVE-2021-27059
    62This week

    Microsoft Office Remote Code Execution Vulnerability

    HighCVSS 7.6KEVWeaponizedEPSS 6%

    microsoft · officeMar 11, 2021

  • CVE-2021-27076
    40Plan

    Microsoft SharePoint Server Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 15%

    microsoft · business productivity serversMar 11, 2021

  • CVE-2021-27083
    50Plan

    Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability

    HighCVSS 7.8No exploitEPSS 62%

    microsoft · remote developmentMar 11, 2021

  • CVE-2021-27084
    50Plan

    Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability

    HighCVSS 7.8No exploitEPSS 62%

    microsoft · maven for javaMar 11, 2021

  • CVE-2021-27085
    67This week

    Internet Explorer Remote Code Execution Vulnerability

    HighCVSS 8.8KEVWeaponizedEPSS 5%

    microsoft · internet explorerMar 11, 2021

  • CVE-2020-29045
    48Plan

    The food-and-drink-menu plugin through 2.2.0 for WordPress allows remote attackers to execute arbitrary code because of an unserialize opera

    CriticalCVSS 9.8No exploitEPSS 30%

    fivestarplugins · five star restaurant menuMar 11, 2021

  • CVE-2021-26411
    90Now

    Internet Explorer Memory Corruption Vulnerability

    HighCVSS 8.8KEVWeaponizedEPSS 81%

    microsoft · edgeMar 11, 2021

  • CVE-2016-20009
    40Plan

    A DNS client stack-based buffer overflow in ipdnsc_decode_name() affects Wind River VxWorks 6.5 through 7.

    CriticalCVSS 9.8No exploitEPSS 1%

    windriver · vxworksMar 11, 2021

  • CVE-2021-28143
    46Plan

    /jsonrpc on D-Link DIR-841 3.03 and 3.04 devices allows authenticated command injection via ping, ping6, or traceroute (under System Tools).

    HighCVSS 8.0No exploitEPSS 47%

    dlink · dir-841 firmwareMar 11, 2021

  • CVE-2021-21056
    38Monitor

    Adobe FrameMaker Out-of-Bounds Read Vulnerability Could Lead To Remote Code Execution

    HighCVSS 7.8No exploitEPSS 22%

    adobe · framemakerMar 12, 2021

  • CVE-2021-27890
    38Monitor

    SQL Injection vulnerablity in MyBB before 1.8.26 via theme properties included in theme XML files.

    HighCVSS 8.8Proof of conceptEPSS 10%

    mybb · mybbMar 15, 2021

  • CVE-2021-21193
    68This week

    Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafte

    HighCVSS 8.8KEVWeaponizedEPSS 9%

    google · chromeMar 16, 2021

  • CVE-2021-28295
    35Monitor

    Online Ordering System 1.0 is vulnerable to unauthenticated SQL injection through /onlineordering/GPST/admin/design.php, which may lead to d

    HighCVSS 7.5No exploitEPSS 15%

    online ordering system project · online ordering systemMar 16, 2021

  • CVE-2020-17525
    42Plan

    Remote unauthenticated denial-of-service in Subversion mod_authz_svn

    HighCVSS 7.5No exploitEPSS 40%

    apache · subversionMar 17, 2021

  • CVE-2021-28419
    31Monitor

    The "order_col" parameter in archive.php of SEO Panel 4.8.0 is vulnerable to time-based blind SQL injection, which leads to the ability to r

    HighCVSS 7.2Proof of conceptEPSS 10%

    seopanel · seo panelMar 18, 2021

  • CVE-2021-28133
    23Monitor

    Zoom through 5.5.4 sometimes allows attackers to read private information on a participant's screen, even though the participant never attem

    MediumCVSS 4.3No exploitEPSS 19%

    zoom · zoomMar 18, 2021

  • CVE-2021-24145
    54Plan

    Modern Events Calendar Lite < 5.16.5 - Authenticated Arbitrary File Upload leading to RCE

    HighCVSS 7.2WeaponizedEPSS 87%

    webnus · modern events calendar liteMar 18, 2021

  • CVE-2021-24146
    39Monitor

    Modern Events Calendar Lite < 5.16.5 - Unauthenticated Events Export

    HighCVSS 7.5Proof of conceptEPSS 31%

    webnus · modern events calendar liteMar 18, 2021

  • CVE-2021-27358
    55Plan

    The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remot

    HighCVSS 7.5Proof of conceptEPSS 83%

    grafana · grafanaMar 18, 2021

  • CVE-2021-27928
    40Plan

    A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.

    HighCVSS 7.2Proof of conceptEPSS 38%

    mariadb · mariadbMar 18, 2021

  • CVE-2021-26295
    68This week

    RCE vulnerability in latest Apache OFBiz due to Java serialisation using RMI

    CriticalCVSS 9.8WeaponizedEPSS 97%

    apache · ofbizMar 22, 2021

  • CVE-2021-25919
    40Plan

    In OpenEMR, versions 5.0.2 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly.

    MediumCVSS 4.8No exploitEPSS 69%

    open-emr · openemrMar 22, 2021

  • CVE-2021-25921
    48Plan

    In OpenEMR, versions 2.7.3-rc1 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly i

    MediumCVSS 5.4No exploitEPSS 91%

    open-emr · openemrMar 22, 2021

  • CVE-2021-21341
    53Plan

    XStream can cause a Denial of Service

    HighCVSS 7.5Proof of conceptEPSS 77%

    xstream · xstreamMar 23, 2021

  • CVE-2021-21342
    51Plan

    A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or

    CriticalCVSS 9.1No exploitEPSS 49%

    xstream · xstreamMar 23, 2021

  • CVE-2021-21343
    44Plan

    XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights

    HighCVSS 7.5No exploitEPSS 46%

    xstream · xstreamMar 23, 2021

  • CVE-2021-21344
    62This week

    XStream is vulnerable to an Arbitrary Code Execution attack

    CriticalCVSS 9.8No exploitEPSS 75%

    xstream · xstreamMar 23, 2021

  • CVE-2021-21345
    61This week

    XStream is vulnerable to a Remote Command Execution attack

    CriticalCVSS 9.9Proof of conceptEPSS 72%

    xstream · xstreamMar 23, 2021

  • CVE-2021-21346
    62This week

    XStream is vulnerable to an Arbitrary Code Execution attack

    CriticalCVSS 9.8No exploitEPSS 76%

    xstream · xstreamMar 23, 2021

  • CVE-2021-21347
    43Plan

    XStream is vulnerable to an Arbitrary Code Execution attack

    CriticalCVSS 9.8No exploitEPSS 14%

    xstream · xstreamMar 23, 2021

  • CVE-2021-21348
    34Monitor

    XStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos)

    HighCVSS 7.5No exploitEPSS 13%

    xstream · xstreamMar 23, 2021

  • CVE-2021-21349
    48Plan

    A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or

    HighCVSS 8.6Proof of conceptEPSS 46%

    xstream · xstreamMar 23, 2021

  • CVE-2021-21350
    44Plan

    XStream is vulnerable to an Arbitrary Code Execution attack

    CriticalCVSS 9.8No exploitEPSS 15%

    xstream · xstreamMar 23, 2021

  • CVE-2021-21351
    61This week

    XStream is vulnerable to an Arbitrary Code Execution attack

    CriticalCVSS 9.1Proof of conceptEPSS 82%

    xstream · xstreamMar 23, 2021

  • CVE-2021-21402
    50Plan

    Unauthenticated Arbitrary File Access in Jellyfin

    MediumCVSS 6.5Proof of conceptEPSS 79%

    jellyfin · jellyfinMar 23, 2021

  • CVE-2021-29133
    40Plan

    Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents o

    MediumCVSS 5.5WeaponizedEPSS 1%

    haserl project · haserlMar 24, 2021

  • CVE-2021-22192
    39Monitor

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 allowing unauthorized authenticated users to execute

    HighCVSS 8.8Proof of conceptEPSS 13%

    gitlab · gitlabMar 24, 2021

  • CVE-2021-1384
    39Monitor

    Cisco IOx for IOS XE Software Command Injection Vulnerability

    HighCVSS 7.2No exploitEPSS 35%

    cisco · ios xeMar 24, 2021

  • CVE-2021-29156
    53Plan

    ForgeRock OpenAM before 13.5.1 allows LDAP injection via the Webfinger protocol.

    HighCVSS 7.5Proof of conceptEPSS 76%

    forgerock · openamMar 25, 2021

  • CVE-2021-3449
    42Plan

    NULL pointer deref in signature_algorithms processing

    MediumCVSS 5.9Proof of conceptEPSS 63%

    openssl · opensslMar 25, 2021

  • CVE-2021-3450
    35Monitor

    CA certificate check bypass with X509_V_FLAG_X509_STRICT

    HighCVSS 7.4Proof of conceptEPSS 18%

    openssl · opensslMar 25, 2021

  • CVE-2021-22888
    29Monitor

    Revive Adserver before v5.2.0 is vulnerable to a reflected XSS vulnerability in the `status` parameter of campaign-zone-zones.php.

    MediumCVSS 6.1No exploitEPSS 16%

    revive-adserver · revive adserverMar 25, 2021

  • CVE-2021-22889
    33Monitor

    Revive Adserver before v5.2.0 is vulnerable to a reflected XSS vulnerability in the `statsBreakdown` parameter of stats.php (and possibly ot

    MediumCVSS 6.1No exploitEPSS 30%

    revive-adserver · revive adserverMar 25, 2021

  • CVE-2021-22506
    68This week

    Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all versions prior to versio

    HighCVSS 7.5KEVWeaponizedEPSS 25%

    microfocus · access managerMar 26, 2021

  • CVE-2020-19625
    43Plan

    Remote Code Execution Vulnerability in tests/support/stores/test_grid_filter.php in oria gridx 1.3, allows remote attackers to execute arbit

    CriticalCVSS 9.8Proof of conceptEPSS 13%

    gridx project · gridxMar 26, 2021

  • CVE-2021-25369
    52Plan

    An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace.

    MediumCVSS 5.5KEVWeaponizedEPSS 1%

    samsung · androidMar 26, 2021

  • CVE-2021-25370
    47Plan

    An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to k

    MediumCVSS 4.4KEVWeaponizedEPSS 0%

    samsung · androidMar 26, 2021

  • CVE-2021-25371
    56Plan

    A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP.

    MediumCVSS 6.7KEVWeaponizedEPSS 0%

    samsung · androidMar 26, 2021

  • CVE-2021-25372
    56Plan

    An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access.

    MediumCVSS 6.7KEVWeaponizedEPSS 0%

    samsung · androidMar 26, 2021

  • CVE-2021-21389
    39Monitor

    BuddyPress privilege escalation via REST API

    HighCVSS 8.8Proof of conceptEPSS 13%

    buddypress · buddypressMar 26, 2021

  • CVE-2021-27272
    50Plan

    This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System

    HighCVSS 7.1No exploitEPSS 74%

    netgear · prosafe network management systemMar 29, 2021

  • CVE-2021-27273
    55Plan

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System

    HighCVSS 8.8No exploitEPSS 66%

    netgear · prosafe network management systemMar 29, 2021

  • CVE-2021-27275
    55Plan

    This vulnerability allows remote attackers to disclose sensitive information and delete arbitrary files on affected installations of NETGEAR

    HighCVSS 8.3No exploitEPSS 74%

    netgear · prosafe network management systemMar 29, 2021

  • CVE-2021-27276
    50Plan

    This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System

    HighCVSS 7.1No exploitEPSS 73%

    netgear · prosafe network management systemMar 29, 2021

  • CVE-2021-25155
    30Monitor

    A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Ins

    MediumCVSS 6.5Proof of conceptEPSS 12%

    arubanetworks · instantMar 29, 2021

  • CVE-2021-25156
    31Monitor

    A remote arbitrary directory create vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Inst

    MediumCVSS 4.9Proof of conceptEPSS 39%

    arubanetworks · instantMar 29, 2021