CVEs published March 24, 2021
86 CVEs were published on March 24, 2021: 8 critical, 17 high.
- Published
- 86
- Critical
- 8
- High
- 17
- Medium
- 36
- Low
- 1
- Unrated
- 24
- Now in CISA KEV
- 0
- Fix available
- 12
Most affected products
- Cisco IOS XE Software
- 30
- GitLab
- 8
- Cisco IOS
- 5
- Cisco Jabber
- 5
- Cisco Aironet Access Point Software
- 4
- go-ipfs · github.com/ipfs/go-ipfs
- 2
- Cisco IOS XE ROMMON Software
- 1
- dwisiswant0 apkleaks · apkleaks
- 1
- HumanTalk DaviewIndy
- 1
- IBM Elastic Storage Server
- 1
Critical 8
- CVE-2021-21386Improper Neutralization of Argument Delimiters in a Decompiling Package Processdwisiswant0 apkleaks · apkleaks
- CVE-2021-1418Cisco Jabber Desktop and Mobile Client Software VulnerabilitiesCisco Jabber
- CVE-2021-1417Cisco Jabber Desktop and Mobile Client Software VulnerabilitiesCisco Jabber
- CVE-2021-1411Cisco Jabber Desktop and Mobile Client Software VulnerabilitiesCisco Jabber
- CVE-2021-1471Cisco Jabber Desktop and Mobile Client Software VulnerabilitiesCisco Jabber
- CVE-2021-1469Cisco Jabber Desktop and Mobile Client Software VulnerabilitiesCisco Jabber
- CVE-2021-22192An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 allowing unauthorized authenticated users to execute GitLab
- CVE-2020-36283HID OMNIKEY 5427 and OMNIKEY 5127 readers are vulnerable to CSRF when using the EEM driver (Ethernet Emulation Mode).
High 17
- CVE-2020-7852DaviewIndy Heap Overflow VulnerabilitiesHumanTalk DaviewIndy
- CVE-2021-21385Disabled hostname verification and accepting self-signed certificatesopenMF mifos-mobile
- CVE-2020-26279Path traversalgo-ipfs · github.com/ipfs/go-ipfs
- CVE-2021-1352Cisco IOS XE Software DECnet Phase IV/OSI Denial of Service VulnerabilityCisco IOS XE Software
- CVE-2021-1373Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service VulnerabilityCisco IOS XE Software
- CVE-2021-1392Cisco IOS and IOS XE Software Common Industrial Protocol Privilege Escalation VulnerabilityCisco IOS
- CVE-2021-1403Cisco IOS XE Software Web UI Cross-Site WebSocket Hijacking VulnerabilityCisco IOS XE Software
- CVE-2021-1451Cisco IOS XE Software Easy Virtual Switching System Arbitrary Code Execution VulnerabilityCisco IOS XE Software
- CVE-2021-1446Cisco IOS XE Software DNS NAT Protocol Application Layer Gateway Denial of Service VulnerabilityCisco IOS XE Software
- CVE-2021-1442Cisco IOS XE Software Plug-and-Play Privilege Escalation VulnerabilityCisco IOS XE Software
- CVE-2021-1439Cisco Aironet Access Points FlexConnect Multicast DNS Denial of Service VulnerabilityCisco Aironet Access Point Software
- CVE-2021-1437Cisco Aironet Access Points FlexConnect Upgrade Information Disclosure VulnerabilityCisco Aironet Access Point Software
- CVE-2021-1433Cisco IOS XE SD-WAN Software vDaemon Buffer Overflow VulnerabilityCisco IOS XE Software
- CVE-2021-1432Cisco IOS XE SD-WAN Software Arbitrary Command Execution VulnerabilityCisco IOS XE Software
- CVE-2021-1431Cisco IOS XE SD-WAN Software vDaemon Denial of Service VulnerabilityCisco IOS XE Software
- CVE-2020-7839MarkAny MaEPSBroker Command Injection VulnerabilityMarkAny MaEPSBroker
- CVE-2020-5015IBM Elastic Storage System 6.0.0 through 6.0.1.2 and IBM Elastic Storage Server 5.3.0 through 5.3.6.2 could allow a remote attacker to causeIBM Elastic Storage Server
Medium, low and unrated 61
- CVE-2020-7853TOBESOFT XPLATFORM Out-of-Bounds Read/Write VulnerabilitiesTobesoft Xplatform
- CVE-2020-26283Control character injection in console outputgo-ipfs · github.com/ipfs/go-ipfs
- CVE-2021-1423Cisco Aironet Access Points Arbitrary File Overwrite VulnerabilityCisco Aironet Access Point Software
- CVE-2021-1381Cisco IOS XE Software Active Debug Code VulnerabilityCisco IOS XE Software
- CVE-2021-1220Cisco IOS XE Software Web UI Denial of Service VulnerabilitiesCisco IOS XE Software
- CVE-2021-1281Cisco IOS XE SD-WAN Software Privilege Escalation VulnerabilityCisco IOS XE Software
- CVE-2021-1356Cisco IOS XE Software Web UI Denial of Service VulnerabilitiesCisco IOS XE Software
- CVE-2021-1371Cisco IOS XE SD-WAN Software Console Privilege Escalation VulnerabilityCisco IOS XE Software
- CVE-2021-1374Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family Stored Cross-Site Scripting VulnerabilityCisco IOS XE Software
- CVE-2021-1375Cisco IOS XE Software Fast Reload VulnerabilitiesCisco IOS XE Software
- CVE-2021-1376Cisco IOS XE Software Fast Reload VulnerabilitiesCisco IOS XE Software
- CVE-2021-1377Cisco IOS and IOS XE Software ARP Resource Management Exhaustion Denial of Service VulnerabilityCisco IOS
- CVE-2021-1382Cisco IOS XE SD-WAN Software Command Injection VulnerabilityCisco IOS XE Software
- CVE-2021-1383Cisco IOS XE SD-WAN Software Parameter Injection VulnerabilitiesCisco IOS XE Software
- CVE-2021-1384Cisco IOx for IOS XE Software Command Injection VulnerabilityCisco IOS XE Software
- CVE-2021-1385Cisco IOx Application Environment Path Traversal VulnerabilityCisco IOS
- CVE-2021-1390Cisco IOS XE Software Local Privilege Escalation VulnerabilityCisco IOS XE Software
- CVE-2021-1391Cisco IOS and IOS XE Software Privilege Escalation VulnerabilityCisco IOS
- CVE-2021-1394Cisco IOS XE Software for Network Convergence System 520 Routers Denial of Service VulnerabilityCisco IOS XE Software
- CVE-2021-1398Cisco IOS XE Software Arbitrary Code Execution VulnerabilityCisco IOS XE Software
- CVE-2021-1460Cisco IOx Application Framework Denial of Service VulnerabilityCisco IOS
- CVE-2021-1454Cisco IOS XE SD-WAN Software Parameter Injection VulnerabilitiesCisco IOS XE Software
- CVE-2021-1453Cisco IOS XE Software for the Catalyst 9000 Family Arbitrary Code Execution VulnerabilityCisco IOS XE Software
- CVE-2021-1452Cisco IOS XE ROM Monitor Software for Cisco Industrial Switches OS Command Injection VulnerabilityCisco IOS XE ROMMON Software
- CVE-2021-1449Cisco Access Point Software Arbitrary Code Execution VulnerabilityCisco Aironet Access Point Software
- CVE-2021-1443Cisco IOS XE Software Web UI OS Command Injection VulnerabilityCisco IOS XE Software
- CVE-2021-1441Cisco IOS XE Software Hardware Initialization Routines Arbitrary Code Execution VulnerabilityCisco IOS XE Software
- CVE-2021-1436Cisco IOS XE SD-WAN Software Path Traversal VulnerabilityCisco IOS XE Software
- CVE-2021-1435Cisco IOS XE Software Web UI Command Injection VulnerabilityCisco IOS XE Software
- CVE-2021-1434Cisco IOS XE SD-WAN Software Arbitrary File Corruption VulnerabilityCisco IOS XE Software
- CVE-2021-22169An issue was identified in GitLab EE 13.4 or later which leaked internal IP address via error messages.GitLab
- CVE-2021-22178An issue has been discovered in GitLab affecting all versions starting from 13.2.GitLab
- CVE-2021-22193An issue has been discovered in GitLab affecting all versions starting with 7.1.GitLab
- CVE-2020-15809spxmanage on certain SpinetiX devices allows requests that access unintended resources because of SSRF and Path Traversal.
- CVE-2021-22179A vulnerability was discovered in GitLab versions before 12.2.GitLab
- CVE-2021-22176An issue has been discovered in GitLab affecting all versions starting with 3.0.1.GitLab
- CVE-2021-22186An authorization issue in GitLab CE/EE version 9.4 and up allowed a group maintainer to modify group CI/CD variables which should be restricGitLab
- CVE-2021-22185Insufficient input sanitization in wikis in GitLab version 13.8 and up allows an attacker to exploit a stored cross-site scripting vulnerabiGitLab
- CVE-2019-19354An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/hadoop as shipped in Red Hat Openshift 4.operator-framework/hadoop
- CVE-2019-19353An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/hive as shipped in Red Hat Openshift 4.operator-framework/hive
- CVE-2019-19352An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/presto as shipped in Red Hat Openshift 4.operator-framework/presto
- CVE-2020-35337ThinkSAAS before 3.38 contains a SQL injection vulnerability through app/topic/action/admin/topic.php via the title parameter, which allows
- CVE-2019-19350An insecure modification vulnerability in the /etc/passwd file was found in the openshift/ansible-service-broker as shipped in Red Hat Opensopenshift/ansible-service-broker
- CVE-2019-19349An insecure modification vulnerability in the /etc/passwd file was found in the container operator-framework/operator-metering as shipped inoperator-framework/operator-metering
- CVE-2021-29002A stored cross-site scripting (XSS) vulnerability in Plone CMS 5.2.3 exists in site-controlpanel via the "form.widgets.site_title" parameterplone
- CVE-2021-28362An issue was discovered in Contiki through 3.0.
- CVE-2021-27320Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via
- CVE-2021-27319Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via
- CVE-2021-27316Blind SQL injection in contactus.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via
- CVE-2021-27315Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via
- CVE-2021-29033A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/edit
- CVE-2021-29032A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/preference
- CVE-2021-29031A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/user
- CVE-2021-29030A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/inde
- CVE-2021-29029A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/edit_perso
- CVE-2021-29028A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/user
- CVE-2021-29027A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/index.php
- CVE-2021-29026A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/perm
- CVE-2021-29025A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/my_images.
- CVE-2021-29133Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents o
- CVE-2021-28967The unofficial MATLAB extension before 2.0.1 for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace becau