# CVEs published 2021-04-25

6 CVEs were published on April 25, 2021: 0 critical, 0 high. Days are UTC.

- [CVE-2021-31718](https://cve.now/CVE-2021-31718.md): The server in npupnp before 4.1.4 is affected by DNS rebinding in the embedded web server (including UPnP SOAP and GENA endpoints)… (no CVSS)
- [CVE-2021-31762](https://cve.now/CVE-2021-31762.md): Webmin 1.973 is affected by Cross Site Request Forgery (CSRF) to create a privileged user through Webmin's add users feature, and then get… (no CVSS)
- [CVE-2021-31761](https://cve.now/CVE-2021-31761.md): Webmin 1.973 is affected by reflected Cross Site Scripting (XSS) to achieve Remote Command Execution through Webmin's running process… (no CVSS)
- [CVE-2021-31760](https://cve.now/CVE-2021-31760.md): Webmin 1.973 is affected by Cross Site Request Forgery (CSRF) to achieve Remote Command Execution (RCE) through Webmin's running process… (no CVSS)
- [CVE-2021-31726](https://cve.now/CVE-2021-31726.md): Akuvox C315 115.116.2613 allows remote command Injection via the cfgd\_server service. (no CVSS)
- [CVE-2021-30502](https://cve.now/CVE-2021-30502.md): The unofficial vscode-ghc-simple (aka Simple Glasgow Haskell Compiler) extension before 0.2.3 for Visual Studio Code allows remote code… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2021-04-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.