CVEs published April 2, 2021
178 CVEs were published on April 2, 2021: 3 critical, 7 high. 5 are now in CISA KEV.
- Published
- 178
- Critical
- 3
- High
- 7
- Medium
- 8
- Low
- 3
- Unrated
- 157
- Now in CISA KEV
- 5
- Fix available
- 146
Most affected products
- Apple iOS and iPadOS · Apple macOS
- 46
- Apple macOS
- 43
- Apple iOS and iPadOS · Apple tvOS +2
- 12
- Apple tvOS · Apple watchOS +2
- 9
- Apple iOS and iPadOS
- 7
- Apple watchOS · Apple iOS and iPadOS +2
- 7
- GitLab
- 7
- Apple iOS and iPadOS · Apple iOS +1
- 2
- Apple iOS and iPadOS · Apple tvOS +1
- 2
- github.com/pomerium/pomerium
- 2
Critical 3
- CVE-2021-1871A logic issue was addressed with improved restrictions.Apple iOS and iPadOS · Apple macOS
- CVE-2021-1870A logic issue was addressed with improved restrictions.Apple iOS and iPadOS · Apple macOS
- CVE-2021-22201An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.9.GitLab
High 7
- CVE-2021-1789A type confusion issue was addressed with improved state handling.Apple iOS and iPadOS · Apple macOS
- CVE-2021-1782A race condition was addressed with improved locking.Apple iOS and iPadOS · Apple macOS
- CVE-2021-22203An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7.9 before 13.8.7, all versions starting from 13.9 befoGitLab
- CVE-2020-11925An issue was discovered in Luvion Grand Elite 3 Connect through 2020-02-25.
- CVE-2019-20466An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices.
- CVE-2019-20464An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices.
- CVE-2021-21400Entering code in App Lock modal sends input to conversationwireapp wire-webapp
Medium, low and unrated 168
- CVE-2021-21533Wyse Management Suite versions up to 3.2 contains a vulnerability wherein a malicious authenticated user can cause a denial of service in thDell Wyse Management Suite
- CVE-2021-21532Dell Wyse ThinOS 8.6 MR9 contains remediation for an improper management server validation vulnerability that could be potentially exploitedDell Wyse Proprietary OS
- CVE-2021-21529Dell System Update (DSU) 1.9 and earlier versions contain a denial of service vulnerability.DellEMC System Update - DSU
- CVE-2021-30074docsify 4.12.1 is affected by Cross Site Scripting (XSS) because the search component does not appropriately encode Code Blocks and mishandldocsify
- CVE-2020-27600HNAP1/control/SetMasterWLanSettings.php in D-Link D-Link Router DIR-846 DIR-846 A1_100.26 allows remote attackers to execute arbitrary comma
- CVE-2020-21590Directory traversal in coreframe/app/template/admin/index.php in WUZHI CMS 4.1.0 allows attackers to list files in arbitrary directories via
- CVE-2020-21588Buffer overflow in Core FTP LE v2.2 allows local attackers to cause a denial or service (crash) via a long string in the Setup->Users->Usern
- CVE-2020-21585Vulnerability in emlog v6.0.0 allows user to upload webshells via zip plugin module.
- CVE-2021-30072An issue was discovered in prog.cgi on D-Link DIR-878 1.30B08 devices.
- CVE-2021-30126Lightmeter ControlCenter 1.1.0 through 1.5.x before 1.5.1 allows anyone who knows the URL of a publicly available Lightmeter instance to acc
- CVE-2021-30125Jamf Pro before 10.28.0 allows XSS related to inventory history, aka PI-009376.
- CVE-2021-28941Because of no validation on a curl command in MagpieRSS 0.72 in the /extlib/Snoopy.class.inc file, when you send a request to the /scripts/m
- CVE-2021-28940Because of a incorrect escaped exec command in MagpieRSS in 0.72 in the /extlib/Snoopy.class.inc file, it is possible to add a extra command
- CVE-2021-29661Softing AG OPC Toolbox through 4.10.1.13035 allows /en/diag_values.html Stored XSS via the ITEMLISTVALUES##ITEMID parameter, resulting in Ja
- CVE-2021-29660A Cross-Site Request Forgery (CSRF) vulnerability in en/cfg_setpwd.html in Softing AG OPC Toolbox through 4.10.1.13035 allows attackers to r
- CVE-2021-1753An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS
- CVE-2021-27973SQL injection exists in Piwigo before 11.4.0 via the language parameter to admin.php?page=languages.
- CVE-2021-1761This issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS
- CVE-2021-3374Directory traversal in RStudio Shiny Server before 1.5.16 allows attackers to read the application source code, involving an encoded slash.
- CVE-2020-11924An issue was discovered in WiZ Colors A60 1.14.0.
- CVE-2021-1818A logic issue was addressed with improved state management.Apple iOS and iPadOS · Apple macOS
- CVE-2020-11923An issue was discovered in WiZ Colors A60 1.14.0.
- CVE-2021-1879This issue was addressed by improved management of object lifetimes.Apple iOS and iPadOS · Apple iOS +1
- CVE-2021-1844A memory corruption issue was addressed with improved validation.Apple macOS
- CVE-2021-1805An out-of-bounds write was addressed with improved input validation.Apple macOS
- CVE-2021-1801This issue was addressed with improved iframe sandbox enforcement.Apple iOS and iPadOS · Apple macOS
- CVE-2021-1806A race condition was addressed with additional validation.Apple macOS
- CVE-2021-1803The issue was addressed with improved permissions logic.Apple macOS
- CVE-2021-1802A logic issue was addressed with improved state management.Apple macOS
- CVE-2021-1799A port redirection issue was addressed with additional port validation.Apple iOS and iPadOS · Apple macOS
- CVE-2021-1800A path handling issue was addressed with improved validation.Apple Xcode
- CVE-2021-1797The issue was addressed with improved permissions logic.Apple iOS and iPadOS · Apple macOS
- CVE-2021-1796An out-of-bounds write was addressed with improved input validation.Apple iOS and iPadOS
- CVE-2021-1793This issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS
- CVE-2021-1795An out-of-bounds write was addressed with improved input validation.Apple iOS and iPadOS
- CVE-2021-1794An out-of-bounds read was addressed with improved input validation.Apple iOS and iPadOS
- CVE-2021-1790An out-of-bounds read was addressed with improved input validation.Apple macOS
- CVE-2021-1791An out-of-bounds read issue existed that led to the disclosure of kernel memory.Apple iOS and iPadOS · Apple macOS
- CVE-2021-1792An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS
- CVE-2021-1788A use after free issue was addressed with improved memory management.Apple iOS and iPadOS · Apple macOS
- CVE-2021-1787Multiple issues were addressed with improved logic.Apple iOS and iPadOS · Apple macOS
- CVE-2021-1785An out-of-bounds read was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS
- CVE-2021-1783An access issue was addressed with improved memory management.Apple iOS and iPadOS · Apple macOS
- CVE-2021-1786A logic issue was addressed with improved state management.Apple iOS and iPadOS · Apple macOS
- CVE-2021-1781A privacy issue existed in the handling of Contact cards.Apple iOS and iPadOS · Apple macOS
- CVE-2021-1777This issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS
- CVE-2021-1778An out-of-bounds read issue existed in the curl.Apple iOS and iPadOS · Apple macOS
- CVE-2021-1780A memory initialization issue was addressed with improved memory handling.Apple iOS and iPadOS
- CVE-2021-1773A logic issue was addressed with improved state management.Apple iOS and iPadOS · Apple macOS
- CVE-2021-1779A logic error in kext loading was addressed with improved state handling.Apple macOS
- CVE-2021-1776An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS
- CVE-2021-1775This issue was addressed by removing the vulnerable code.Apple macOS
- CVE-2021-1774This issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS
- CVE-2021-1771This issue was addressed with improved checks.Apple macOS
- CVE-2021-1772A stack overflow was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS
- CVE-2021-1769A logic issue was addressed with improved validation.Apple iOS and iPadOS · Apple macOS
- CVE-2021-1768An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS
- CVE-2021-1764A use after free issue was addressed with improved memory management.Apple iOS and iPadOS · Apple macOS
- CVE-2021-1766This issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS
- CVE-2021-1767This issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS
- CVE-2021-1765This issue was addressed with improved iframe sandbox enforcement.Apple macOS
- CVE-2021-1763A buffer overflow was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS
- CVE-2021-1760A memory corruption issue was addressed with improved state management.Apple iOS and iPadOS · Apple macOS
- CVE-2021-1757An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS
- CVE-2021-1758An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS
- CVE-2021-1756A lock screen issue allowed access to contacts on a locked device.Apple iOS and iPadOS
- CVE-2021-1754This issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS
- CVE-2021-1759An out-of-bounds read was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS
- CVE-2021-1750Multiple issues were addressed with improved logic.Apple iOS and iPadOS · Apple macOS
- CVE-2021-1751A logic issue was addressed with improved state management.Apple macOS
- CVE-2021-1755A lock screen issue allowed access to contacts on a locked device.Apple macOS
- CVE-2021-1746This issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS
- CVE-2021-1748A validation issue was addressed with improved input sanitization.Apple iOS and iPadOS · Apple watchOS +1
- CVE-2021-1747An out-of-bounds write was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS
- CVE-2021-1744An out-of-bounds write was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS
- CVE-2021-1743An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS
- CVE-2021-1742This issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS
- CVE-2021-1741An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS
- CVE-2021-1745An out-of-bounds read was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS
- CVE-2020-29633An authentication issue was addressed with improved state management.Apple macOS
- CVE-2021-1738An out-of-bounds write was addressed with improved input validation.Apple macOS
- CVE-2021-1736An out-of-bounds read was addressed with improved input validation.Apple macOS
- CVE-2021-1737An out-of-bounds write was addressed with improved input validation.Apple macOS
- CVE-2020-29624A memory corruption issue existed in the processing of font files.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2020-29625This issue was addressed with improved checks.Apple macOS
- CVE-2020-29639An out-of-bounds read was addressed with improved input validation.Apple iOS and iPadOS
- CVE-2020-29623"Clear History and Website Data" did not clear the history.Apple iOS and iPadOS · Apple tvOS +1
- CVE-2020-29619An out-of-bounds read was addressed with improved input validation.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2020-29621This issue was addressed with improved checks.Apple macOS
- CVE-2020-29617An out-of-bounds read was addressed with improved input validation.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2020-29618An out-of-bounds read was addressed with improved input validation.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2020-29620This issue was addressed with improved entitlements.Apple macOS
- CVE-2020-29615An out-of-bounds read was addressed with improved input validation.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2020-29616A memory corruption issue was addressed with improved input validation.Apple macOS
- CVE-2020-29611An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2020-29614This issue was addressed with improved checks.Apple iOS and iPadOS · Apple tvOS +1
- CVE-2020-29613A logic issue was addressed with improved state management.Apple iOS and iPadOS
- CVE-2020-29608An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2020-29610An out-of-bounds read was addressed with improved input validation.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2020-27949This issue was addressed with improved checks to prevent unauthorized actions.Apple macOS
- CVE-2020-29612An out-of-bounds write issue was addressed with improved bounds checking.Apple macOS
- CVE-2020-27948An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2020-27952An out-of-bounds write was addressed with improved input validation.Apple macOS
- CVE-2020-27951This issue was addressed with improved checks.Apple iOS and iPadOS · Apple iOS +1
- CVE-2020-27946An information disclosure issue was addressed with improved state management.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2020-27947A memory corruption issue was addressed with improved input validation.Apple macOS
- CVE-2020-27944A memory corruption issue existed in the processing of font files.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2020-27945An integer overflow was addressed with improved input validation.Apple macOS
- CVE-2020-27938A logic issue was addressed with improved state management.Apple macOS
- CVE-2020-27943A memory corruption issue existed in the processing of font files.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2020-27941A validation issue was addressed with improved logic.Apple macOS
- CVE-2020-27939This issue was addressed with improved checks.Apple macOS
- CVE-2020-27937A logic issue was addressed with improved state management.Apple macOS
- CVE-2020-27933A memory corruption issue was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS
- CVE-2020-27936An out-of-bounds read issue existed that led to the disclosure of kernel memory.Apple macOS
- CVE-2020-27923An out-of-bounds write was addressed with improved input validation.Apple watchOS · Apple iOS and iPadOS +2
- CVE-2020-27931A memory corruption issue existed in the processing of font files.Apple tvOS · Apple watchOS +2
- CVE-2020-27922A logic issue was addressed with improved state management.Apple watchOS · Apple iOS and iPadOS +2
- CVE-2020-27924An out-of-bounds read was addressed with improved input validation.Apple watchOS · Apple iOS and iPadOS +2
- CVE-2020-27935Multiple issues were addressed with improved logic.Apple watchOS · Apple iOS and iPadOS +2
- CVE-2020-27921A race condition was addressed with improved state handling.Apple macOS
- CVE-2020-27920A use after free issue was addressed with improved memory management.Apple watchOS · Apple iOS and iPadOS +2
- CVE-2020-27908An out-of-bounds read was addressed with improved input validation.Apple watchOS · Apple iOS and iPadOS +2
- CVE-2020-27914A memory corruption issue was addressed with improved input validation.Apple macOS
- CVE-2020-27915A memory corruption issue was addressed with improved input validation.Apple macOS
- CVE-2020-27901A logic issue was addressed with improved restrictions.Apple macOS
- CVE-2020-27919An out-of-bounds write was addressed with improved input validation.Apple macOS
- CVE-2020-27907A memory corruption issue was addressed with improved memory handling.Apple macOS
- CVE-2020-27899A use after free issue was addressed with improved memory management.Apple watchOS · Apple iOS and iPadOS +2
- CVE-2020-27893An issue existed in screen sharing.Apple macOS
- CVE-2020-9975A use after free issue was addressed with improved memory management.Apple tvOS · Apple watchOS +2
- CVE-2020-10015An out-of-bounds write issue was addressed with improved bounds checking.Apple macOS
- CVE-2020-27897An out-of-bounds write issue was addressed with improved bounds checking.Apple macOS
- CVE-2020-9995An issue existed in the parsing of URLs.Apple macOS
- CVE-2020-9978This issue was addressed with improved setting propagation.Apple tvOS · Apple watchOS +2
- CVE-2021-22865Improper access control in GitHub Enterprise Server leading to unauthorized read access to private repository metadataGitHub Enterprise Server
- CVE-2020-10001An input validation issue was addressed with improved memory handling.Apple macOS
- CVE-2020-10008A logic issue was addressed with improved restrictions.Apple macOS
- CVE-2020-9926A use after free issue was addressed with improved memory management.Apple iOS and iPadOS · Apple macOS
- CVE-2020-9956An out-of-bounds read was addressed with improved input validation.Apple tvOS · Apple watchOS +2
- CVE-2020-9971A logic issue was addressed with improved validation.Apple tvOS · Apple watchOS +2
- CVE-2020-9967Multiple memory corruption issues were addressed with improved input validation.Apple tvOS · Apple watchOS +2
- CVE-2020-9962A buffer overflow was addressed with improved size validation.Apple tvOS · Apple watchOS +2
- CVE-2020-9955An out-of-bounds write issue was addressed with improved bounds checking.Apple tvOS · Apple watchOS +2
- CVE-2020-9960An out-of-bounds read was addressed with improved input validation.Apple tvOS · Apple watchOS +2
- CVE-2020-9930An out-of-bounds read was addressed with improved input validation.Apple macOS
- CVE-2021-22202An issue has been discovered in GitLab CE/EE affecting all previous versions.GitLab
- CVE-2021-22200An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.6.GitLab
- CVE-2021-22197An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.6 where an infinite loop exist when an authenticated usGitLab
- CVE-2021-22198An issue has been discovered in GitLab CE/EE affecting all versions from 13.8 and above allowing an authenticated user to delete incident meGitLab
- CVE-2021-22196An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4.GitLab
- CVE-2020-11922An issue was discovered in WiZ Colors A60 1.14.0.
- CVE-2019-20465An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices.
- CVE-2019-20463An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices.
- CVE-2021-28124A man-in-the-middle vulnerability in Cohesity DataPlatform support channel in version 6.3 up to 6.3.1g, 6.4 up to 6.4.1c and 6.5.1 through 6
- CVE-2021-28123Undocumented Default Cryptographic Key Vulnerability in Cohesity DataPlatform version 6.3 prior 6.3.1g, 6.4 up to 6.4.1c and 6.5.1 through 6
- CVE-2021-28113A command injection vulnerability in the cookieDomain and relayDomain parameters of Okta Access Gateway before 2020.9.3 allows attackers (wi
- CVE-2021-29652Pomerium from version 0.10.0-0.13.3 has an Open Redirect in the user sign-in/out processgithub.com/pomerium/pomerium
- CVE-2021-29651Pomerium before 0.13.4 has an Open Redirect (issue 1 of 2).github.com/pomerium/pomerium
- CVE-2021-29011DMA Softlab Radius Manager 4.4.0 is affected by Cross Site Scripting (XSS) via the description, name, or address field (under admin.php).
- CVE-2021-29012DMA Softlab Radius Manager 4.4.0 assigns the same session cookie to every admin session.
- CVE-2021-25894Magnolia CMS from 6.1.3 to 6.2.3 contains a stored cross-site scripting (XSS) vulnerability in the /magnoliaPublic/travel/members/login.html
- CVE-2021-25893Magnolia CMS from 6.1.3 to 6.2.3 contains a stored cross-site scripting (XSS) vulnerability in the setText parameter of /magnoliaAuthor/.mag
- CVE-2021-22696OAuth 2 authorization service vulnerable to DDos attacksApache Software Foundation Apache CXF · org.apache.cxf:c… +1
- CVE-2021-30000An issue was discovered in LATRIX 0.6.0.
- CVE-2021-30003An issue was discovered on Nokia G-120W-F 3FE46606AGAB91 devices.
- CVE-2021-30002An issue was discovered in the Linux kernel before 5.11.3 when a webcam device exists.
- CVE-2021-30004In wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x5