İçeriğe atla
Noroxi

Yayın tarihine göre

Mart 2021: sömürülen ve yeni ciddi CVE kayıtları

116 kayıt · 22 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 2

  • CVE-2021-25122
    35İzleyin

    Apache Tomcat h2c request mix-up

    YüksekCVSS 7,5İstismar yokEPSS %18

    apache · tomcat1 Mar 2021

  • CVE-2021-25830
    43Planlayın

    A file extension handling issue was found in [core] module of ONLYOFFICE DocumentServer v4.2.0.236-v5.6.4.13.

    KritikCVSS 9,8İstismar yokEPSS %11

    onlyoffice · document server1 Mar 2021

  • CVE-2021-25831
    42Planlayın

    A file extension handling issue was found in [core] module of ONLYOFFICE DocumentServer v4.0.0-9-v5.6.3.

    KritikCVSS 9,8İstismar yokEPSS %11

    onlyoffice · document server1 Mar 2021

  • CVE-2021-25832
    43Planlayın

    A heap buffer overflow vulnerability inside of BMP image processing was found at [core] module of ONLYOFFICE DocumentServer v4.0.0-9-v6.0.0.

    KritikCVSS 9,8İstismar yokEPSS %12

    onlyoffice · document server1 Mar 2021

  • CVE-2021-25833
    52Planlayın

    A file extension handling issue was found in [server] module of ONLYOFFICE DocumentServer v4.2.0.71-v5.6.0.21.

    KritikCVSS 9,8İstismar yokEPSS %43

    onlyoffice · document server1 Mar 2021

  • CVE-2021-27876
    66Bu hafta

    An issue was discovered in Veritas Backup Exec before 21.2.

    YüksekCVSS 8,1KEVSilahlaştırılmışEPSS %13

    veritas · backup exec1 Mar 2021

  • CVE-2021-27877
    88Hemen

    An issue was discovered in Veritas Backup Exec before 21.2.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %64

    veritas · backup exec1 Mar 2021

  • CVE-2021-27878
    72Bu hafta

    An issue was discovered in Veritas Backup Exec before 21.2.

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %23

    veritas · backup exec1 Mar 2021

  • CVE-2021-27886
    53Planlayın

    rakibtg Docker Dashboard before 2021-02-28 allows command injection in backend/utilities/terminal.js via shell metacharacters in the command

    KritikCVSS 9,8İstismar yokEPSS %45

    docker dashboard project · docker dashboard1 Mar 2021

  • CVE-2021-26412
    46Planlayın

    Microsoft Exchange Server Remote Code Execution Vulnerability

    KritikCVSS 9,1Kavram kanıtıEPSS %33

    microsoft · exchange server2 Mar 2021

  • CVE-2021-26854
    33İzleyin

    Microsoft Exchange Server Remote Code Execution Vulnerability

    OrtaCVSS 6,6Kavram kanıtıEPSS %24

    microsoft · exchange server2 Mar 2021

  • CVE-2021-26855
    96Hemen

    Microsoft Exchange Server Remote Code Execution Vulnerability

    KritikCVSS 9,1KEVSilahlaştırılmışEPSS %99

    microsoft · exchange server2 Mar 2021

  • CVE-2021-26857
    90Hemen

    Microsoft Exchange Server Remote Code Execution Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %95

    microsoft · exchange server2 Mar 2021

  • CVE-2021-27078
    42Planlayın

    Microsoft Exchange Server Remote Code Execution Vulnerability

    KritikCVSS 9,1Kavram kanıtıEPSS %21

    microsoft · exchange server2 Mar 2021

  • CVE-2021-26858
    89Hemen

    Microsoft Exchange Server Remote Code Execution Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %93

    microsoft · exchange server3 Mar 2021

  • CVE-2021-27065
    91Hemen

    Microsoft Exchange Server Remote Code Execution Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %99

    microsoft · exchange server3 Mar 2021

  • CVE-2020-29047
    44Planlayın

    The wp-hotel-booking plugin through 1.10.2 for WordPress allows remote attackers to execute arbitrary code because of an unserialize operati

    KritikCVSS 9,8Kavram kanıtıEPSS %16

    thimpress · wp hotel booking3 Mar 2021

  • CVE-2021-21978
    69Bu hafta

    VMware View Planner 4.x prior to 4.6 Security Patch 1 contains a remote code execution vulnerability.

    KritikCVSS 9,8SilahlaştırılmışEPSS %99

    vmware · view planner3 Mar 2021

  • CVE-2021-22681
    88Hemen

    Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix cont

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %63

    rockwellautomation · factorytalk services platform3 Mar 2021

  • CVE-2021-22883
    53Planlayın

    Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connection attempts with an

    YüksekCVSS 7,5İstismar yokEPSS %77

    nodejs · node.js3 Mar 2021

  • CVE-2021-22884
    41Planlayın

    Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to DNS rebinding attacks as the whitelist includes “localhost6”.

    YüksekCVSS 7,5İstismar yokEPSS %36

    nodejs · node.js3 Mar 2021

  • CVE-2021-27931
    41Planlayın

    LumisXP (aka Lumis Experience Platform) before 10.0.0 allows unauthenticated blind XXE via an API request to PageControllerXml.jsp.

    KritikCVSS 9,1Kavram kanıtıEPSS %18

    lumis · lumis experience platform3 Mar 2021

  • CVE-2020-24913
    51Planlayın

    A SQL injection vulnerability in qcubed (all versions including 3.1.1) in profile.php via the strQuery parameter allows an unauthenticated a

    KritikCVSS 9,8Kavram kanıtıEPSS %40

    qcubed · qcubed4 Mar 2021

  • CVE-2020-28601
    40Planlayın

    A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.

    KritikCVSS 9,8İstismar yokEPSS %2

    cgal · computational geometry algorithms library4 Mar 2021

  • CVE-2020-8298
    42Planlayın

    fs-path node module before 0.0.25 is vulnerable to command injection by way of user-supplied inputs via the `copy`, `copySync`, `remove`, an

    KritikCVSS 9,8İstismar yokEPSS %11

    fs-path project · fs-path4 Mar 2021

  • CVE-2021-25337
    59Planlayın

    Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to read

    YüksekCVSS 7,1KEVSilahlaştırılmışEPSS %2

    samsung · android4 Mar 2021

  • CVE-2021-27314
    43Planlayın

    SQL injection in admin.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via username

    KritikCVSS 9,8Kavram kanıtıEPSS %12

    doctor appointment system project · doctor appointment system4 Mar 2021

  • CVE-2021-27964
    53Planlayın

    SonLogger before 6.4.1 is affected by Unauthenticated Arbitrary File Upload.

    KritikCVSS 9,8Kavram kanıtıEPSS %47

    sfcyazilim · sonlogger4 Mar 2021

  • CVE-2021-27965
    43Planlayın

    The MsIo64.sys driver before 1.1.19.1016 in MSI Dragon Center before 2.0.98.0 has a buffer overflow that allows privilege escalation via a c

    KritikCVSS 9,8Kavram kanıtıEPSS %11

    msi · dragon center4 Mar 2021

  • CVE-2021-27907
    47Planlayın

    Apache Superset stored XSS on Dashboard markdown

    OrtaCVSS 5,4İstismar yokEPSS %86

    apache · superset5 Mar 2021

  • CVE-2020-29134
    42Planlayın

    The TOTVS Fluig platform allows path traversal through the parameter "file = ..

    YüksekCVSS 8,6Kavram kanıtıEPSS %27

    totvs · fluig5 Mar 2021

  • CVE-2021-26294
    35İzleyin

    An issue was discovered in AfterLogic Aurora through 7.7.9 and WebMail Pro through 7.7.9.

    YüksekCVSS 7,5Kavram kanıtıEPSS %16

    afterlogic · aurora7 Mar 2021

  • CVE-2020-27838
    31İzleyin

    A flaw was found in keycloak in versions prior to 13.0.0.

    OrtaCVSS 6,5Kavram kanıtıEPSS %17

    redhat · keycloak8 Mar 2021

  • CVE-2021-21480
    51Planlayın

    SAP MII allows users to create dashboards and save them as JSP through the SSCE (Self Service Composition Environment).

    YüksekCVSS 8,8İstismar yokEPSS %52

    sap · manufacturing integration and intelligence9 Mar 2021

  • CVE-2021-21166
    72Bu hafta

    Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %24

    google · chrome9 Mar 2021

  • CVE-2021-21177
    31İzleyin

    Insufficient policy enforcement in Autofill in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive

    OrtaCVSS 6,5İstismar yokEPSS %17

    google · chrome9 Mar 2021

  • CVE-2021-21300
    57Planlayın

    malicious repositories can execute remote code while cloning

    YüksekCVSS 7,5SilahlaştırılmışEPSS %88

    git-scm · git9 Mar 2021

  • CVE-2021-28116
    25İzleyin

    Squid through 4.14 and 5.x through 5.0.5, in some configurations, allows information disclosure because of an out-of-bounds read in WCCP pro

    OrtaCVSS 5,3İstismar yokEPSS %12

    squid-cache · squid9 Mar 2021

  • CVE-2021-21295
    29İzleyin

    Possible request smuggling in HTTP/2 due missing validation

    OrtaCVSS 5,9İstismar yokEPSS %18

    netty · netty9 Mar 2021

  • CVE-2020-29238
    35İzleyin

    An integer buffer overflow in the Nginx webserver of ExpressVPN Router version 1 allows remote attackers to obtain sensitive information whe

    YüksekCVSS 7,5Kavram kanıtıEPSS %16

    expressvpn · expressvpn9 Mar 2021

  • CVE-2020-13936
    42Planlayın

    Velocity Sandbox Bypass

    YüksekCVSS 8,8İstismar yokEPSS %22

    apache · velocity engine10 Mar 2021

  • CVE-2021-26863
    32İzleyin

    Windows Win32k Elevation of Privilege Vulnerability

    YüksekCVSS 7,0İstismar yokEPSS %11

    microsoft · windows 1011 Mar 2021

  • CVE-2021-26877
    44Planlayın

    Windows DNS Server Remote Code Execution Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %17

    microsoft · windows server 200811 Mar 2021

  • CVE-2021-26897
    42Planlayın

    Windows DNS Server Remote Code Execution Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %11

    microsoft · windows server 200811 Mar 2021

  • CVE-2021-27059
    62Bu hafta

    Microsoft Office Remote Code Execution Vulnerability

    YüksekCVSS 7,6KEVSilahlaştırılmışEPSS %6

    microsoft · office11 Mar 2021

  • CVE-2021-27076
    40Planlayın

    Microsoft SharePoint Server Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %15

    microsoft · business productivity servers11 Mar 2021

  • CVE-2021-27083
    50Planlayın

    Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %62

    microsoft · remote development11 Mar 2021

  • CVE-2021-27084
    50Planlayın

    Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %62

    microsoft · maven for java11 Mar 2021

  • CVE-2021-27085
    67Bu hafta

    Internet Explorer Remote Code Execution Vulnerability

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %5

    microsoft · internet explorer11 Mar 2021

  • CVE-2020-29045
    48Planlayın

    The food-and-drink-menu plugin through 2.2.0 for WordPress allows remote attackers to execute arbitrary code because of an unserialize opera

    KritikCVSS 9,8İstismar yokEPSS %30

    fivestarplugins · five star restaurant menu11 Mar 2021

  • CVE-2021-26411
    89Hemen

    Internet Explorer Memory Corruption Vulnerability

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %80

    microsoft · edge11 Mar 2021

  • CVE-2016-20009
    40Planlayın

    A DNS client stack-based buffer overflow in ipdnsc_decode_name() affects Wind River VxWorks 6.5 through 7.

    KritikCVSS 9,8İstismar yokEPSS %1

    windriver · vxworks11 Mar 2021

  • CVE-2021-28143
    46Planlayın

    /jsonrpc on D-Link DIR-841 3.03 and 3.04 devices allows authenticated command injection via ping, ping6, or traceroute (under System Tools).

    YüksekCVSS 8,0İstismar yokEPSS %47

    dlink · dir-841 firmware11 Mar 2021

  • CVE-2021-21056
    38İzleyin

    Adobe FrameMaker Out-of-Bounds Read Vulnerability Could Lead To Remote Code Execution

    YüksekCVSS 7,8İstismar yokEPSS %22

    adobe · framemaker12 Mar 2021

  • CVE-2021-27890
    38İzleyin

    SQL Injection vulnerablity in MyBB before 1.8.26 via theme properties included in theme XML files.

    YüksekCVSS 8,8Kavram kanıtıEPSS %10

    mybb · mybb15 Mar 2021

  • CVE-2021-21193
    68Bu hafta

    Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafte

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %9

    google · chrome16 Mar 2021

  • CVE-2021-28295
    35İzleyin

    Online Ordering System 1.0 is vulnerable to unauthenticated SQL injection through /onlineordering/GPST/admin/design.php, which may lead to d

    YüksekCVSS 7,5İstismar yokEPSS %15

    online ordering system project · online ordering system16 Mar 2021

  • CVE-2020-17525
    42Planlayın

    Remote unauthenticated denial-of-service in Subversion mod_authz_svn

    YüksekCVSS 7,5İstismar yokEPSS %40

    apache · subversion17 Mar 2021

  • CVE-2021-28419
    31İzleyin

    The "order_col" parameter in archive.php of SEO Panel 4.8.0 is vulnerable to time-based blind SQL injection, which leads to the ability to r

    YüksekCVSS 7,2Kavram kanıtıEPSS %10

    seopanel · seo panel18 Mar 2021

  • CVE-2021-28133
    23İzleyin

    Zoom through 5.5.4 sometimes allows attackers to read private information on a participant's screen, even though the participant never attem

    OrtaCVSS 4,3İstismar yokEPSS %19

    zoom · zoom18 Mar 2021

  • CVE-2021-24145
    54Planlayın

    Modern Events Calendar Lite < 5.16.5 - Authenticated Arbitrary File Upload leading to RCE

    YüksekCVSS 7,2SilahlaştırılmışEPSS %87

    webnus · modern events calendar lite18 Mar 2021

  • CVE-2021-24146
    39İzleyin

    Modern Events Calendar Lite < 5.16.5 - Unauthenticated Events Export

    YüksekCVSS 7,5Kavram kanıtıEPSS %31

    webnus · modern events calendar lite18 Mar 2021

  • CVE-2021-27358
    55Planlayın

    The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remot

    YüksekCVSS 7,5Kavram kanıtıEPSS %83

    grafana · grafana18 Mar 2021

  • CVE-2021-27928
    40Planlayın

    A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.

    YüksekCVSS 7,2Kavram kanıtıEPSS %38

    mariadb · mariadb18 Mar 2021

  • CVE-2021-26295
    68Bu hafta

    RCE vulnerability in latest Apache OFBiz due to Java serialisation using RMI

    KritikCVSS 9,8SilahlaştırılmışEPSS %97

    apache · ofbiz22 Mar 2021

  • CVE-2021-25919
    40Planlayın

    In OpenEMR, versions 5.0.2 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly.

    OrtaCVSS 4,8İstismar yokEPSS %69

    open-emr · openemr22 Mar 2021

  • CVE-2021-25921
    48Planlayın

    In OpenEMR, versions 2.7.3-rc1 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly i

    OrtaCVSS 5,4İstismar yokEPSS %91

    open-emr · openemr22 Mar 2021

  • CVE-2021-21341
    53Planlayın

    XStream can cause a Denial of Service

    YüksekCVSS 7,5Kavram kanıtıEPSS %77

    xstream · xstream23 Mar 2021

  • CVE-2021-21342
    51Planlayın

    A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or

    KritikCVSS 9,1İstismar yokEPSS %49

    xstream · xstream23 Mar 2021

  • CVE-2021-21343
    44Planlayın

    XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights

    YüksekCVSS 7,5İstismar yokEPSS %46

    xstream · xstream23 Mar 2021

  • CVE-2021-21344
    62Bu hafta

    XStream is vulnerable to an Arbitrary Code Execution attack

    KritikCVSS 9,8İstismar yokEPSS %75

    xstream · xstream23 Mar 2021

  • CVE-2021-21345
    61Bu hafta

    XStream is vulnerable to a Remote Command Execution attack

    KritikCVSS 9,9Kavram kanıtıEPSS %72

    xstream · xstream23 Mar 2021

  • CVE-2021-21346
    62Bu hafta

    XStream is vulnerable to an Arbitrary Code Execution attack

    KritikCVSS 9,8İstismar yokEPSS %76

    xstream · xstream23 Mar 2021

  • CVE-2021-21347
    43Planlayın

    XStream is vulnerable to an Arbitrary Code Execution attack

    KritikCVSS 9,8İstismar yokEPSS %14

    xstream · xstream23 Mar 2021

  • CVE-2021-21348
    34İzleyin

    XStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos)

    YüksekCVSS 7,5İstismar yokEPSS %13

    xstream · xstream23 Mar 2021

  • CVE-2021-21349
    48Planlayın

    A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or

    YüksekCVSS 8,6Kavram kanıtıEPSS %46

    xstream · xstream23 Mar 2021

  • CVE-2021-21350
    44Planlayın

    XStream is vulnerable to an Arbitrary Code Execution attack

    KritikCVSS 9,8İstismar yokEPSS %15

    xstream · xstream23 Mar 2021

  • CVE-2021-21351
    61Bu hafta

    XStream is vulnerable to an Arbitrary Code Execution attack

    KritikCVSS 9,1Kavram kanıtıEPSS %82

    xstream · xstream23 Mar 2021

  • CVE-2021-21402
    50Planlayın

    Unauthenticated Arbitrary File Access in Jellyfin

    OrtaCVSS 6,5Kavram kanıtıEPSS %79

    jellyfin · jellyfin23 Mar 2021

  • CVE-2021-29133
    22İzleyin

    Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents o

    OrtaCVSS 5,5SilahlaştırılmışEPSS %1

    haserl project · haserl24 Mar 2021

  • CVE-2021-22192
    39İzleyin

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 allowing unauthorized authenticated users to execute

    YüksekCVSS 8,8Kavram kanıtıEPSS %13

    gitlab · gitlab24 Mar 2021

  • CVE-2021-1384
    39İzleyin

    Cisco IOx for IOS XE Software Command Injection Vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %35

    cisco · ios xe24 Mar 2021

  • CVE-2021-29156
    53Planlayın

    ForgeRock OpenAM before 13.5.1 allows LDAP injection via the Webfinger protocol.

    YüksekCVSS 7,5Kavram kanıtıEPSS %76

    forgerock · openam25 Mar 2021

  • CVE-2021-3449
    42Planlayın

    NULL pointer deref in signature_algorithms processing

    OrtaCVSS 5,9Kavram kanıtıEPSS %63

    openssl · openssl25 Mar 2021

  • CVE-2021-3450
    35İzleyin

    CA certificate check bypass with X509_V_FLAG_X509_STRICT

    YüksekCVSS 7,4Kavram kanıtıEPSS %18

    openssl · openssl25 Mar 2021

  • CVE-2021-22888
    29İzleyin

    Revive Adserver before v5.2.0 is vulnerable to a reflected XSS vulnerability in the `status` parameter of campaign-zone-zones.php.

    OrtaCVSS 6,1İstismar yokEPSS %16

    revive-adserver · revive adserver25 Mar 2021

  • CVE-2021-22889
    33İzleyin

    Revive Adserver before v5.2.0 is vulnerable to a reflected XSS vulnerability in the `statsBreakdown` parameter of stats.php (and possibly ot

    OrtaCVSS 6,1İstismar yokEPSS %30

    revive-adserver · revive adserver25 Mar 2021

  • CVE-2021-22506
    68Bu hafta

    Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all versions prior to versio

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %25

    microfocus · access manager26 Mar 2021

  • CVE-2020-19625
    43Planlayın

    Remote Code Execution Vulnerability in tests/support/stores/test_grid_filter.php in oria gridx 1.3, allows remote attackers to execute arbit

    KritikCVSS 9,8Kavram kanıtıEPSS %13

    gridx project · gridx26 Mar 2021

  • CVE-2021-25369
    52Planlayın

    An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace.

    OrtaCVSS 5,5KEVSilahlaştırılmışEPSS %1

    samsung · android26 Mar 2021

  • CVE-2021-25370
    47Planlayın

    An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to k

    OrtaCVSS 4,4KEVSilahlaştırılmışEPSS %0

    samsung · android26 Mar 2021

  • CVE-2021-25371
    56Planlayın

    A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP.

    OrtaCVSS 6,7KEVSilahlaştırılmışEPSS %0

    samsung · android26 Mar 2021

  • CVE-2021-25372
    56Planlayın

    An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access.

    OrtaCVSS 6,7KEVSilahlaştırılmışEPSS %0

    samsung · android26 Mar 2021

  • CVE-2021-21389
    39İzleyin

    BuddyPress privilege escalation via REST API

    YüksekCVSS 8,8Kavram kanıtıEPSS %13

    buddypress · buddypress26 Mar 2021

  • CVE-2021-27272
    50Planlayın

    This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System

    YüksekCVSS 7,1İstismar yokEPSS %73

    netgear · prosafe network management system29 Mar 2021

  • CVE-2021-27273
    54Planlayın

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System

    YüksekCVSS 8,8İstismar yokEPSS %64

    netgear · prosafe network management system29 Mar 2021

  • CVE-2021-27275
    55Planlayın

    This vulnerability allows remote attackers to disclose sensitive information and delete arbitrary files on affected installations of NETGEAR

    YüksekCVSS 8,3İstismar yokEPSS %73

    netgear · prosafe network management system29 Mar 2021

  • CVE-2021-27276
    50Planlayın

    This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System

    YüksekCVSS 7,1İstismar yokEPSS %72

    netgear · prosafe network management system29 Mar 2021

  • CVE-2021-25155
    30İzleyin

    A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Ins

    OrtaCVSS 6,5Kavram kanıtıEPSS %12

    arubanetworks · instant29 Mar 2021

  • CVE-2021-25156
    31İzleyin

    A remote arbitrary directory create vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Inst

    OrtaCVSS 4,9Kavram kanıtıEPSS %39

    arubanetworks · instant29 Mar 2021