Перейти к содержимому
Noroxi

По дате публикации

Эксплуатируемые и новые серьёзные CVE: март 2021 г.

116 записей · 22 KEV. В порядке публикации.

В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.

Границы месяца считаются по UTC, как и дата публикации на странице записи.

Страница 1 из 2

  • CVE-2021-25122
    35Наблюдать

    Apache Tomcat h2c request mix-up

    ВысокаяCVSS 7,5Эксплойта нетEPSS 18 %

    apache · tomcat1 мар. 2021 г.

  • CVE-2021-25830
    43В плане

    A file extension handling issue was found in [core] module of ONLYOFFICE DocumentServer v4.2.0.236-v5.6.4.13.

    КритическаяCVSS 9,8Эксплойта нетEPSS 11 %

    onlyoffice · document server1 мар. 2021 г.

  • CVE-2021-25831
    42В плане

    A file extension handling issue was found in [core] module of ONLYOFFICE DocumentServer v4.0.0-9-v5.6.3.

    КритическаяCVSS 9,8Эксплойта нетEPSS 11 %

    onlyoffice · document server1 мар. 2021 г.

  • CVE-2021-25832
    43В плане

    A heap buffer overflow vulnerability inside of BMP image processing was found at [core] module of ONLYOFFICE DocumentServer v4.0.0-9-v6.0.0.

    КритическаяCVSS 9,8Эксплойта нетEPSS 12 %

    onlyoffice · document server1 мар. 2021 г.

  • CVE-2021-25833
    52В плане

    A file extension handling issue was found in [server] module of ONLYOFFICE DocumentServer v4.2.0.71-v5.6.0.21.

    КритическаяCVSS 9,8Эксплойта нетEPSS 43 %

    onlyoffice · document server1 мар. 2021 г.

  • CVE-2021-27876
    66На этой неделе

    An issue was discovered in Veritas Backup Exec before 21.2.

    ВысокаяCVSS 8,1KEVГотовый эксплойтEPSS 13 %

    veritas · backup exec1 мар. 2021 г.

  • CVE-2021-27877
    88Срочно

    An issue was discovered in Veritas Backup Exec before 21.2.

    КритическаяCVSS 9,8KEVГотовый эксплойтEPSS 64 %

    veritas · backup exec1 мар. 2021 г.

  • CVE-2021-27878
    72На этой неделе

    An issue was discovered in Veritas Backup Exec before 21.2.

    ВысокаяCVSS 8,8KEVГотовый эксплойтEPSS 23 %

    veritas · backup exec1 мар. 2021 г.

  • CVE-2021-27886
    53В плане

    rakibtg Docker Dashboard before 2021-02-28 allows command injection in backend/utilities/terminal.js via shell metacharacters in the command

    КритическаяCVSS 9,8Эксплойта нетEPSS 45 %

    docker dashboard project · docker dashboard1 мар. 2021 г.

  • CVE-2021-26412
    46В плане

    Microsoft Exchange Server Remote Code Execution Vulnerability

    КритическаяCVSS 9,1Proof of conceptEPSS 33 %

    microsoft · exchange server2 мар. 2021 г.

  • CVE-2021-26854
    33Наблюдать

    Microsoft Exchange Server Remote Code Execution Vulnerability

    СредняяCVSS 6,6Proof of conceptEPSS 24 %

    microsoft · exchange server2 мар. 2021 г.

  • CVE-2021-26855
    96Срочно

    Microsoft Exchange Server Remote Code Execution Vulnerability

    КритическаяCVSS 9,1KEVГотовый эксплойтEPSS 99 %

    microsoft · exchange server2 мар. 2021 г.

  • CVE-2021-26857
    90Срочно

    Microsoft Exchange Server Remote Code Execution Vulnerability

    ВысокаяCVSS 7,8KEVГотовый эксплойтEPSS 95 %

    microsoft · exchange server2 мар. 2021 г.

  • CVE-2021-27078
    42В плане

    Microsoft Exchange Server Remote Code Execution Vulnerability

    КритическаяCVSS 9,1Proof of conceptEPSS 21 %

    microsoft · exchange server2 мар. 2021 г.

  • CVE-2021-26858
    89Срочно

    Microsoft Exchange Server Remote Code Execution Vulnerability

    ВысокаяCVSS 7,8KEVГотовый эксплойтEPSS 93 %

    microsoft · exchange server3 мар. 2021 г.

  • CVE-2021-27065
    91Срочно

    Microsoft Exchange Server Remote Code Execution Vulnerability

    ВысокаяCVSS 7,8KEVГотовый эксплойтEPSS 99 %

    microsoft · exchange server3 мар. 2021 г.

  • CVE-2020-29047
    44В плане

    The wp-hotel-booking plugin through 1.10.2 for WordPress allows remote attackers to execute arbitrary code because of an unserialize operati

    КритическаяCVSS 9,8Proof of conceptEPSS 16 %

    thimpress · wp hotel booking3 мар. 2021 г.

  • CVE-2021-21978
    69На этой неделе

    VMware View Planner 4.x prior to 4.6 Security Patch 1 contains a remote code execution vulnerability.

    КритическаяCVSS 9,8Готовый эксплойтEPSS 99 %

    vmware · view planner3 мар. 2021 г.

  • CVE-2021-22681
    88Срочно

    Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix cont

    КритическаяCVSS 9,8KEVГотовый эксплойтEPSS 63 %

    rockwellautomation · factorytalk services platform3 мар. 2021 г.

  • CVE-2021-22883
    53В плане

    Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connection attempts with an

    ВысокаяCVSS 7,5Эксплойта нетEPSS 77 %

    nodejs · node.js3 мар. 2021 г.

  • CVE-2021-22884
    41В плане

    Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to DNS rebinding attacks as the whitelist includes “localhost6”.

    ВысокаяCVSS 7,5Эксплойта нетEPSS 36 %

    nodejs · node.js3 мар. 2021 г.

  • CVE-2021-27931
    41В плане

    LumisXP (aka Lumis Experience Platform) before 10.0.0 allows unauthenticated blind XXE via an API request to PageControllerXml.jsp.

    КритическаяCVSS 9,1Proof of conceptEPSS 18 %

    lumis · lumis experience platform3 мар. 2021 г.

  • CVE-2020-24913
    51В плане

    A SQL injection vulnerability in qcubed (all versions including 3.1.1) in profile.php via the strQuery parameter allows an unauthenticated a

    КритическаяCVSS 9,8Proof of conceptEPSS 40 %

    qcubed · qcubed4 мар. 2021 г.

  • CVE-2020-28601
    40В плане

    A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.

    КритическаяCVSS 9,8Эксплойта нетEPSS 2 %

    cgal · computational geometry algorithms library4 мар. 2021 г.

  • CVE-2020-8298
    42В плане

    fs-path node module before 0.0.25 is vulnerable to command injection by way of user-supplied inputs via the `copy`, `copySync`, `remove`, an

    КритическаяCVSS 9,8Эксплойта нетEPSS 11 %

    fs-path project · fs-path4 мар. 2021 г.

  • CVE-2021-25337
    59В плане

    Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to read

    ВысокаяCVSS 7,1KEVГотовый эксплойтEPSS 2 %

    samsung · android4 мар. 2021 г.

  • CVE-2021-27314
    43В плане

    SQL injection in admin.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via username

    КритическаяCVSS 9,8Proof of conceptEPSS 12 %

    doctor appointment system project · doctor appointment system4 мар. 2021 г.

  • CVE-2021-27964
    53В плане

    SonLogger before 6.4.1 is affected by Unauthenticated Arbitrary File Upload.

    КритическаяCVSS 9,8Proof of conceptEPSS 47 %

    sfcyazilim · sonlogger4 мар. 2021 г.

  • CVE-2021-27965
    43В плане

    The MsIo64.sys driver before 1.1.19.1016 in MSI Dragon Center before 2.0.98.0 has a buffer overflow that allows privilege escalation via a c

    КритическаяCVSS 9,8Proof of conceptEPSS 11 %

    msi · dragon center4 мар. 2021 г.

  • CVE-2021-27907
    47В плане

    Apache Superset stored XSS on Dashboard markdown

    СредняяCVSS 5,4Эксплойта нетEPSS 86 %

    apache · superset5 мар. 2021 г.

  • CVE-2020-29134
    42В плане

    The TOTVS Fluig platform allows path traversal through the parameter "file = ..

    ВысокаяCVSS 8,6Proof of conceptEPSS 27 %

    totvs · fluig5 мар. 2021 г.

  • CVE-2021-26294
    35Наблюдать

    An issue was discovered in AfterLogic Aurora through 7.7.9 and WebMail Pro through 7.7.9.

    ВысокаяCVSS 7,5Proof of conceptEPSS 16 %

    afterlogic · aurora7 мар. 2021 г.

  • CVE-2020-27838
    31Наблюдать

    A flaw was found in keycloak in versions prior to 13.0.0.

    СредняяCVSS 6,5Proof of conceptEPSS 17 %

    redhat · keycloak8 мар. 2021 г.

  • CVE-2021-21480
    51В плане

    SAP MII allows users to create dashboards and save them as JSP through the SSCE (Self Service Composition Environment).

    ВысокаяCVSS 8,8Эксплойта нетEPSS 52 %

    sap · manufacturing integration and intelligence9 мар. 2021 г.

  • CVE-2021-21166
    72На этой неделе

    Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM

    ВысокаяCVSS 8,8KEVГотовый эксплойтEPSS 24 %

    google · chrome9 мар. 2021 г.

  • CVE-2021-21177
    31Наблюдать

    Insufficient policy enforcement in Autofill in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive

    СредняяCVSS 6,5Эксплойта нетEPSS 17 %

    google · chrome9 мар. 2021 г.

  • CVE-2021-21300
    60На этой неделе

    malicious repositories can execute remote code while cloning

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 88 %

    git-scm · git9 мар. 2021 г.

  • CVE-2021-28116
    25Наблюдать

    Squid through 4.14 and 5.x through 5.0.5, in some configurations, allows information disclosure because of an out-of-bounds read in WCCP pro

    СредняяCVSS 5,3Эксплойта нетEPSS 12 %

    squid-cache · squid9 мар. 2021 г.

  • CVE-2021-21295
    29Наблюдать

    Possible request smuggling in HTTP/2 due missing validation

    СредняяCVSS 5,9Эксплойта нетEPSS 18 %

    netty · netty9 мар. 2021 г.

  • CVE-2020-29238
    35Наблюдать

    An integer buffer overflow in the Nginx webserver of ExpressVPN Router version 1 allows remote attackers to obtain sensitive information whe

    ВысокаяCVSS 7,5Proof of conceptEPSS 16 %

    expressvpn · expressvpn9 мар. 2021 г.

  • CVE-2020-13936
    42В плане

    Velocity Sandbox Bypass

    ВысокаяCVSS 8,8Эксплойта нетEPSS 22 %

    apache · velocity engine10 мар. 2021 г.

  • CVE-2021-26863
    32Наблюдать

    Windows Win32k Elevation of Privilege Vulnerability

    ВысокаяCVSS 7,0Эксплойта нетEPSS 11 %

    microsoft · windows 1011 мар. 2021 г.

  • CVE-2021-26877
    44В плане

    Windows DNS Server Remote Code Execution Vulnerability

    КритическаяCVSS 9,8Эксплойта нетEPSS 17 %

    microsoft · windows server 200811 мар. 2021 г.

  • CVE-2021-26897
    42В плане

    Windows DNS Server Remote Code Execution Vulnerability

    КритическаяCVSS 9,8Эксплойта нетEPSS 11 %

    microsoft · windows server 200811 мар. 2021 г.

  • CVE-2021-27059
    62На этой неделе

    Microsoft Office Remote Code Execution Vulnerability

    ВысокаяCVSS 7,6KEVГотовый эксплойтEPSS 6 %

    microsoft · office11 мар. 2021 г.

  • CVE-2021-27076
    40В плане

    Microsoft SharePoint Server Remote Code Execution Vulnerability

    ВысокаяCVSS 8,8Эксплойта нетEPSS 15 %

    microsoft · business productivity servers11 мар. 2021 г.

  • CVE-2021-27083
    50В плане

    Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability

    ВысокаяCVSS 7,8Эксплойта нетEPSS 62 %

    microsoft · remote development11 мар. 2021 г.

  • CVE-2021-27084
    50В плане

    Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability

    ВысокаяCVSS 7,8Эксплойта нетEPSS 62 %

    microsoft · maven for java11 мар. 2021 г.

  • CVE-2021-27085
    67На этой неделе

    Internet Explorer Remote Code Execution Vulnerability

    ВысокаяCVSS 8,8KEVГотовый эксплойтEPSS 5 %

    microsoft · internet explorer11 мар. 2021 г.

  • CVE-2020-29045
    48В плане

    The food-and-drink-menu plugin through 2.2.0 for WordPress allows remote attackers to execute arbitrary code because of an unserialize opera

    КритическаяCVSS 9,8Эксплойта нетEPSS 30 %

    fivestarplugins · five star restaurant menu11 мар. 2021 г.

  • CVE-2021-26411
    89Срочно

    Internet Explorer Memory Corruption Vulnerability

    ВысокаяCVSS 8,8KEVГотовый эксплойтEPSS 80 %

    microsoft · edge11 мар. 2021 г.

  • CVE-2016-20009
    40В плане

    A DNS client stack-based buffer overflow in ipdnsc_decode_name() affects Wind River VxWorks 6.5 through 7.

    КритическаяCVSS 9,8Эксплойта нетEPSS 1 %

    windriver · vxworks11 мар. 2021 г.

  • CVE-2021-28143
    46В плане

    /jsonrpc on D-Link DIR-841 3.03 and 3.04 devices allows authenticated command injection via ping, ping6, or traceroute (under System Tools).

    ВысокаяCVSS 8,0Эксплойта нетEPSS 47 %

    dlink · dir-841 firmware11 мар. 2021 г.

  • CVE-2021-21056
    38Наблюдать

    Adobe FrameMaker Out-of-Bounds Read Vulnerability Could Lead To Remote Code Execution

    ВысокаяCVSS 7,8Эксплойта нетEPSS 22 %

    adobe · framemaker12 мар. 2021 г.

  • CVE-2021-27890
    38Наблюдать

    SQL Injection vulnerablity in MyBB before 1.8.26 via theme properties included in theme XML files.

    ВысокаяCVSS 8,8Proof of conceptEPSS 10 %

    mybb · mybb15 мар. 2021 г.

  • CVE-2021-21193
    68На этой неделе

    Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafte

    ВысокаяCVSS 8,8KEVГотовый эксплойтEPSS 9 %

    google · chrome16 мар. 2021 г.

  • CVE-2021-28295
    35Наблюдать

    Online Ordering System 1.0 is vulnerable to unauthenticated SQL injection through /onlineordering/GPST/admin/design.php, which may lead to d

    ВысокаяCVSS 7,5Эксплойта нетEPSS 15 %

    online ordering system project · online ordering system16 мар. 2021 г.

  • CVE-2020-17525
    42В плане

    Remote unauthenticated denial-of-service in Subversion mod_authz_svn

    ВысокаяCVSS 7,5Эксплойта нетEPSS 40 %

    apache · subversion17 мар. 2021 г.

  • CVE-2021-28419
    31Наблюдать

    The "order_col" parameter in archive.php of SEO Panel 4.8.0 is vulnerable to time-based blind SQL injection, which leads to the ability to r

    ВысокаяCVSS 7,2Proof of conceptEPSS 10 %

    seopanel · seo panel18 мар. 2021 г.

  • CVE-2021-28133
    23Наблюдать

    Zoom through 5.5.4 sometimes allows attackers to read private information on a participant's screen, even though the participant never attem

    СредняяCVSS 4,3Эксплойта нетEPSS 19 %

    zoom · zoom18 мар. 2021 г.

  • CVE-2021-24145
    54В плане

    Modern Events Calendar Lite < 5.16.5 - Authenticated Arbitrary File Upload leading to RCE

    ВысокаяCVSS 7,2Готовый эксплойтEPSS 87 %

    webnus · modern events calendar lite18 мар. 2021 г.

  • CVE-2021-24146
    39Наблюдать

    Modern Events Calendar Lite < 5.16.5 - Unauthenticated Events Export

    ВысокаяCVSS 7,5Proof of conceptEPSS 31 %

    webnus · modern events calendar lite18 мар. 2021 г.

  • CVE-2021-27358
    55В плане

    The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remot

    ВысокаяCVSS 7,5Proof of conceptEPSS 83 %

    grafana · grafana18 мар. 2021 г.

  • CVE-2021-27928
    40В плане

    A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.

    ВысокаяCVSS 7,2Proof of conceptEPSS 38 %

    mariadb · mariadb18 мар. 2021 г.

  • CVE-2021-26295
    68На этой неделе

    RCE vulnerability in latest Apache OFBiz due to Java serialisation using RMI

    КритическаяCVSS 9,8Готовый эксплойтEPSS 97 %

    apache · ofbiz22 мар. 2021 г.

  • CVE-2021-25919
    40В плане

    In OpenEMR, versions 5.0.2 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly.

    СредняяCVSS 4,8Эксплойта нетEPSS 69 %

    open-emr · openemr22 мар. 2021 г.

  • CVE-2021-25921
    48В плане

    In OpenEMR, versions 2.7.3-rc1 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly i

    СредняяCVSS 5,4Эксплойта нетEPSS 91 %

    open-emr · openemr22 мар. 2021 г.

  • CVE-2021-21341
    53В плане

    XStream can cause a Denial of Service

    ВысокаяCVSS 7,5Proof of conceptEPSS 77 %

    xstream · xstream23 мар. 2021 г.

  • CVE-2021-21342
    51В плане

    A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or

    КритическаяCVSS 9,1Эксплойта нетEPSS 49 %

    xstream · xstream23 мар. 2021 г.

  • CVE-2021-21343
    44В плане

    XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights

    ВысокаяCVSS 7,5Эксплойта нетEPSS 46 %

    xstream · xstream23 мар. 2021 г.

  • CVE-2021-21344
    62На этой неделе

    XStream is vulnerable to an Arbitrary Code Execution attack

    КритическаяCVSS 9,8Эксплойта нетEPSS 75 %

    xstream · xstream23 мар. 2021 г.

  • CVE-2021-21345
    61На этой неделе

    XStream is vulnerable to a Remote Command Execution attack

    КритическаяCVSS 9,9Proof of conceptEPSS 72 %

    xstream · xstream23 мар. 2021 г.

  • CVE-2021-21346
    62На этой неделе

    XStream is vulnerable to an Arbitrary Code Execution attack

    КритическаяCVSS 9,8Эксплойта нетEPSS 76 %

    xstream · xstream23 мар. 2021 г.

  • CVE-2021-21347
    43В плане

    XStream is vulnerable to an Arbitrary Code Execution attack

    КритическаяCVSS 9,8Эксплойта нетEPSS 14 %

    xstream · xstream23 мар. 2021 г.

  • CVE-2021-21348
    34Наблюдать

    XStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos)

    ВысокаяCVSS 7,5Эксплойта нетEPSS 13 %

    xstream · xstream23 мар. 2021 г.

  • CVE-2021-21349
    48В плане

    A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or

    ВысокаяCVSS 8,6Proof of conceptEPSS 46 %

    xstream · xstream23 мар. 2021 г.

  • CVE-2021-21350
    44В плане

    XStream is vulnerable to an Arbitrary Code Execution attack

    КритическаяCVSS 9,8Эксплойта нетEPSS 15 %

    xstream · xstream23 мар. 2021 г.

  • CVE-2021-21351
    61На этой неделе

    XStream is vulnerable to an Arbitrary Code Execution attack

    КритическаяCVSS 9,1Proof of conceptEPSS 82 %

    xstream · xstream23 мар. 2021 г.

  • CVE-2021-21402
    50В плане

    Unauthenticated Arbitrary File Access in Jellyfin

    СредняяCVSS 6,5Proof of conceptEPSS 79 %

    jellyfin · jellyfin23 мар. 2021 г.

  • CVE-2021-29133
    40В плане

    Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents o

    СредняяCVSS 5,5Готовый эксплойтEPSS 1 %

    haserl project · haserl24 мар. 2021 г.

  • CVE-2021-22192
    39Наблюдать

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 allowing unauthorized authenticated users to execute

    ВысокаяCVSS 8,8Proof of conceptEPSS 13 %

    gitlab · gitlab24 мар. 2021 г.

  • CVE-2021-1384
    39Наблюдать

    Cisco IOx for IOS XE Software Command Injection Vulnerability

    ВысокаяCVSS 7,2Эксплойта нетEPSS 35 %

    cisco · ios xe24 мар. 2021 г.

  • CVE-2021-29156
    53В плане

    ForgeRock OpenAM before 13.5.1 allows LDAP injection via the Webfinger protocol.

    ВысокаяCVSS 7,5Proof of conceptEPSS 76 %

    forgerock · openam25 мар. 2021 г.

  • CVE-2021-3449
    42В плане

    NULL pointer deref in signature_algorithms processing

    СредняяCVSS 5,9Proof of conceptEPSS 63 %

    openssl · openssl25 мар. 2021 г.

  • CVE-2021-3450
    35Наблюдать

    CA certificate check bypass with X509_V_FLAG_X509_STRICT

    ВысокаяCVSS 7,4Proof of conceptEPSS 18 %

    openssl · openssl25 мар. 2021 г.

  • CVE-2021-22888
    29Наблюдать

    Revive Adserver before v5.2.0 is vulnerable to a reflected XSS vulnerability in the `status` parameter of campaign-zone-zones.php.

    СредняяCVSS 6,1Эксплойта нетEPSS 16 %

    revive-adserver · revive adserver25 мар. 2021 г.

  • CVE-2021-22889
    33Наблюдать

    Revive Adserver before v5.2.0 is vulnerable to a reflected XSS vulnerability in the `statsBreakdown` parameter of stats.php (and possibly ot

    СредняяCVSS 6,1Эксплойта нетEPSS 30 %

    revive-adserver · revive adserver25 мар. 2021 г.

  • CVE-2021-22506
    68На этой неделе

    Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all versions prior to versio

    ВысокаяCVSS 7,5KEVГотовый эксплойтEPSS 25 %

    microfocus · access manager26 мар. 2021 г.

  • CVE-2020-19625
    43В плане

    Remote Code Execution Vulnerability in tests/support/stores/test_grid_filter.php in oria gridx 1.3, allows remote attackers to execute arbit

    КритическаяCVSS 9,8Proof of conceptEPSS 13 %

    gridx project · gridx26 мар. 2021 г.

  • CVE-2021-25369
    52В плане

    An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace.

    СредняяCVSS 5,5KEVГотовый эксплойтEPSS 1 %

    samsung · android26 мар. 2021 г.

  • CVE-2021-25370
    47В плане

    An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to k

    СредняяCVSS 4,4KEVГотовый эксплойтEPSS 0 %

    samsung · android26 мар. 2021 г.

  • CVE-2021-25371
    56В плане

    A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP.

    СредняяCVSS 6,7KEVГотовый эксплойтEPSS 0 %

    samsung · android26 мар. 2021 г.

  • CVE-2021-25372
    56В плане

    An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access.

    СредняяCVSS 6,7KEVГотовый эксплойтEPSS 0 %

    samsung · android26 мар. 2021 г.

  • CVE-2021-21389
    39Наблюдать

    BuddyPress privilege escalation via REST API

    ВысокаяCVSS 8,8Proof of conceptEPSS 13 %

    buddypress · buddypress26 мар. 2021 г.

  • CVE-2021-27272
    50В плане

    This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System

    ВысокаяCVSS 7,1Эксплойта нетEPSS 74 %

    netgear · prosafe network management system29 мар. 2021 г.

  • CVE-2021-27273
    55В плане

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System

    ВысокаяCVSS 8,8Эксплойта нетEPSS 66 %

    netgear · prosafe network management system29 мар. 2021 г.

  • CVE-2021-27275
    55В плане

    This vulnerability allows remote attackers to disclose sensitive information and delete arbitrary files on affected installations of NETGEAR

    ВысокаяCVSS 8,3Эксплойта нетEPSS 74 %

    netgear · prosafe network management system29 мар. 2021 г.

  • CVE-2021-27276
    50В плане

    This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System

    ВысокаяCVSS 7,1Эксплойта нетEPSS 73 %

    netgear · prosafe network management system29 мар. 2021 г.

  • CVE-2021-25155
    30Наблюдать

    A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Ins

    СредняяCVSS 6,5Proof of conceptEPSS 12 %

    arubanetworks · instant29 мар. 2021 г.

  • CVE-2021-25156
    31Наблюдать

    A remote arbitrary directory create vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Inst

    СредняяCVSS 4,9Proof of conceptEPSS 39 %

    arubanetworks · instant29 мар. 2021 г.