CVEs published March 12, 2021
43 CVEs were published on March 12, 2021: 4 critical, 14 high.
- Published
- 43
- Critical
- 4
- High
- 14
- Medium
- 9
- Low
- 0
- Unrated
- 16
- Now in CISA KEV
- 0
- Fix available
- 17
Most affected products
- Adobe Animate
- 7
- Adobe Connect
- 3
- Adobe Creative Cloud
- 3
- fltk
- 3
- Synology DiskStation Manager
- 3
- Adobe Photoshop
- 2
- gnutls
- 2
- <ZXONE 9700 , ZXONE 8700, ZXONE 19700>
- 1
- Adobe FrameMaker
- 1
- com.rabbitmq.jms:rabbitmq-jms
- 1
Critical 4
- CVE-2021-20232A flaw was found in gnutls.gnutls
- CVE-2021-27646Use After Free vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers Synology DiskStation Manager
- CVE-2021-26569Race Condition within a Thread vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows rSynology DiskStation Manager
- CVE-2021-27647Out-of-bounds Read vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackSynology DiskStation Manager
High 14
- CVE-2021-21518Dell SupportAssist Client for Consumer PCs versions 3.7.x, 3.6.x, 3.4.x, 3.3.x, Dell SupportAssist Client for Business PCs versions 2.0.x, 2Dell SupportAssist Client
- CVE-2021-21082Adobe Photoshop Memory CorruptionAdobe Photoshop
- CVE-2021-21074Adobe Animate out-of-bounds read vulnerabilityAdobe Animate
- CVE-2021-21056Adobe FrameMaker Out-of-Bounds Read Vulnerability Could Lead To Remote Code ExecutionAdobe FrameMaker
- CVE-2021-21085Adobe Connect CSV injection via export feature could lead to code executionAdobe Connect
- CVE-2021-21071Adobe Animate memory corruption vulnerabilityAdobe Animate
- CVE-2021-21067Adobe Photoshop CoolType arbitrary stack manipulation in Type 1/Multiple MasterAdobe Photoshop
- CVE-2021-21075Adobe Animate out-of-bounds read vulnerabilityAdobe Animate
- CVE-2021-21076Adobe Animate out-of-bounds read vulnerabilityAdobe Animate
- CVE-2021-21077Adobe Animate heap-based overflow vulnerabilityAdobe Animate
- CVE-2021-21069Adobe Creative Cloud Privilege Escalation VulnerabilityAdobe Creative Cloud
- CVE-2021-21073Adobe Animate out-of-bounds read vulnerabilityAdobe Animate
- CVE-2021-21072Adobe Animate out-of-bounds read vulnerabilityAdobe Animate
- CVE-2021-21379It's possible to execute anything with the rights of the author of a macro which uses the {{wikimacrocontent}} macroxwiki-platform · org.xwiki.platform:xwiki-platform-renderin…
Medium, low and unrated 25
- CVE-2021-27290ssri 5.2.2-8.0.0, fixed in 8.0.1, processes SRIs using a regular expression which is vulnerable to a denial of service.ssri
- CVE-2021-28162In Eclipse Theia versions up to and including 0.16.0, in the notification messages there is no HTML escaping, so Javascript code can run.The Eclipse Foundation Eclipse Theia · @theia/messages
- CVE-2021-28161In Eclipse Theia versions up to and including 1.8.0, in the debug console there is no HTML escaping, so arbitrary Javascript code can be injThe Eclipse Foundation Eclipse Theia · @theia/console
- CVE-2021-28092The is-svg package 2.1.0 through 4.2.1 for Node.js uses a regular expression that is vulnerable to Regular Expression Denial of Service (ReDis-svg
- CVE-2021-20231A flaw was found in gnutls.gnutls
- CVE-2021-21078Adobe Creative Cloud Unquoted Service Path in CCXProcessAdobe Creative Cloud
- CVE-2021-21080Adobe Connect Reflected Cross-site Scripting via query parameterAdobe Connect
- CVE-2021-21068Adobe Creative Cloud installer arbitrary file overwrite vulnerabilityAdobe Creative Cloud
- CVE-2021-21079Adobe Connect Reflected Cross-site Scripting via archiveOffset parameterAdobe Connect
- CVE-2021-21726Some ZTE products have an input verification vulnerability in the diagnostic function interface.<ZXONE 9700 , ZXONE 8700, ZXONE 19700>
- CVE-2021-21368Prototype poisoningmcollina msgpack5 · msgpack5
- CVE-2020-4831IBM DataPower Gateway 10.0.0.0 through 10.0.1.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt hIBM DataPower Gateway
- CVE-2021-21367Incorrect Authorization in switchboard-plug-bluetoothelementary switchboard-plug-bluetooth
- CVE-2021-23354Regular Expression Denial of Service (ReDoS)printf
- CVE-2021-28302A stack overflow in pupnp before version 1.14.5 can cause the denial of service through the Parser_parseDocument() function.
- CVE-2021-28305An issue was discovered in the diesel crate before 1.4.6 for Rust.diesel
- CVE-2021-28306An issue was discovered in the fltk crate before 0.15.3 for Rust.fltk
- CVE-2021-28307An issue was discovered in the fltk crate before 0.15.3 for Rust.fltk
- CVE-2021-28308An issue was discovered in the fltk crate before 0.15.3 for Rust.fltk
- CVE-2021-20674Untrusted search path vulnerability in Installer of MagicConnect Client program distributed before 2021 March 1 allows an attacker to gain pNTT TechnoCross Installer of MagicConnect Client program
- CVE-2020-36282JMS Client for RabbitMQ 1.x before 1.15.2 and 2.x before 2.2.0 is vulnerable to unsafe deserialization that can result in code execution viacom.rabbitmq.jms:rabbitmq-jms
- CVE-2020-36281Leptonica before 1.80.0 allows a heap-based buffer over-read in pixFewColorsOctcubeQuantMixed in colorquant1.c.
- CVE-2020-36280Leptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to tiffio.c.
- CVE-2020-36279Leptonica before 1.80.0 allows a heap-based buffer over-read in rasteropGeneralLow, related to adaptmap_reg.c and adaptmap.c.
- CVE-2021-21366Misinterpretation of malicious XML inputxmldom