# CVEs published 2021-04-02

178 CVEs were published on April 2, 2021: 3 critical, 7 high. 5 are now in CISA KEV. Days are UTC.

- [CVE-2021-21533](https://cve.now/CVE-2021-21533.md): Wyse Management Suite versions up to 3.2 contains a vulnerability wherein a malicious authenticated user can cause a denial of service in th (CVSS 4.3, Dell Wyse Management Suite)
- [CVE-2021-21532](https://cve.now/CVE-2021-21532.md): Dell Wyse ThinOS 8.6 MR9 contains remediation for an improper management server validation vulnerability that could be potentially exploited (CVSS 5.0, Dell Wyse Proprietary OS)
- [CVE-2021-21529](https://cve.now/CVE-2021-21529.md): Dell System Update (DSU) 1.9 and earlier versions contain a denial of service vulnerability. (CVSS 3.8, DellEMC System Update - DSU)
- [CVE-2021-30074](https://cve.now/CVE-2021-30074.md): docsify 4.12.1 is affected by Cross Site Scripting (XSS) because the search component does not appropriately encode Code Blocks and mishandl (no CVSS, docsify)
- [CVE-2020-27600](https://cve.now/CVE-2020-27600.md): HNAP1/control/SetMasterWLanSettings.php in D-Link D-Link Router DIR-846 DIR-846 A1\_100.26 allows remote attackers to execute arbitrary comma (no CVSS)
- [CVE-2020-21590](https://cve.now/CVE-2020-21590.md): Directory traversal in coreframe/app/template/admin/index.php in WUZHI CMS 4.1.0 allows attackers to list files in arbitrary directories via (no CVSS)
- [CVE-2020-21588](https://cve.now/CVE-2020-21588.md): Buffer overflow in Core FTP LE v2.2 allows local attackers to cause a denial or service (crash) via a long string in the Setup-\>Users-\>Usern (no CVSS)
- [CVE-2020-21585](https://cve.now/CVE-2020-21585.md): Vulnerability in emlog v6.0.0 allows user to upload webshells via zip plugin module. (no CVSS)
- [CVE-2021-30072](https://cve.now/CVE-2021-30072.md): An issue was discovered in prog.cgi on D-Link DIR-878 1.30B08 devices. (no CVSS)
- [CVE-2021-30126](https://cve.now/CVE-2021-30126.md): Lightmeter ControlCenter 1.1.0 through 1.5.x before 1.5.1 allows anyone who knows the URL of a publicly available Lightmeter instance to acc (no CVSS)
- [CVE-2021-30125](https://cve.now/CVE-2021-30125.md): Jamf Pro before 10.28.0 allows XSS related to inventory history, aka PI-009376. (no CVSS)
- [CVE-2021-28941](https://cve.now/CVE-2021-28941.md): Because of no validation on a curl command in MagpieRSS 0.72 in the /extlib/Snoopy.class.inc file, when you send a request to the /scripts/m (no CVSS)
- [CVE-2021-28940](https://cve.now/CVE-2021-28940.md): Because of a incorrect escaped exec command in MagpieRSS in 0.72 in the /extlib/Snoopy.class.inc file, it is possible to add a extra command (no CVSS)
- [CVE-2021-29661](https://cve.now/CVE-2021-29661.md): Softing AG OPC Toolbox through 4.10.1.13035 allows /en/diag\_values.html Stored XSS via the ITEMLISTVALUES##ITEMID parameter, resulting in Ja (no CVSS)
- [CVE-2021-29660](https://cve.now/CVE-2021-29660.md): A Cross-Site Request Forgery (CSRF) vulnerability in en/cfg\_setpwd.html in Softing AG OPC Toolbox through 4.10.1.13035 allows attackers to r (no CVSS)
- [CVE-2021-1753](https://cve.now/CVE-2021-1753.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-27973](https://cve.now/CVE-2021-27973.md): SQL injection exists in Piwigo before 11.4.0 via the language parameter to admin.php?page=languages. (no CVSS)
- [CVE-2021-1761](https://cve.now/CVE-2021-1761.md): This issue was addressed with improved checks. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-3374](https://cve.now/CVE-2021-3374.md): Directory traversal in RStudio Shiny Server before 1.5.16 allows attackers to read the application source code, involving an encoded slash. (no CVSS)
- [CVE-2020-11924](https://cve.now/CVE-2020-11924.md): An issue was discovered in WiZ Colors A60 1.14.0. (no CVSS)
- [CVE-2021-1818](https://cve.now/CVE-2021-1818.md): A logic issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2020-11923](https://cve.now/CVE-2020-11923.md): An issue was discovered in WiZ Colors A60 1.14.0. (no CVSS)
- [CVE-2021-1879](https://cve.now/CVE-2021-1879.md): This issue was addressed by improved management of object lifetimes. (CVSS 6.1, KEV, Apple iOS and iPadOS · Apple iOS +1)
- [CVE-2021-1844](https://cve.now/CVE-2021-1844.md): A memory corruption issue was addressed with improved validation. (no CVSS, Apple macOS)
- [CVE-2021-1871](https://cve.now/CVE-2021-1871.md): A logic issue was addressed with improved restrictions. (CVSS 9.8, KEV, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-1870](https://cve.now/CVE-2021-1870.md): A logic issue was addressed with improved restrictions. (CVSS 9.8, KEV, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-1805](https://cve.now/CVE-2021-1805.md): An out-of-bounds write was addressed with improved input validation. (no CVSS, Apple macOS)
- [CVE-2021-1801](https://cve.now/CVE-2021-1801.md): This issue was addressed with improved iframe sandbox enforcement. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-1806](https://cve.now/CVE-2021-1806.md): A race condition was addressed with additional validation. (no CVSS, Apple macOS)
- [CVE-2021-1803](https://cve.now/CVE-2021-1803.md): The issue was addressed with improved permissions logic. (no CVSS, Apple macOS)
- [CVE-2021-1802](https://cve.now/CVE-2021-1802.md): A logic issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2021-1799](https://cve.now/CVE-2021-1799.md): A port redirection issue was addressed with additional port validation. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-1800](https://cve.now/CVE-2021-1800.md): A path handling issue was addressed with improved validation. (no CVSS, Apple Xcode)
- [CVE-2021-1797](https://cve.now/CVE-2021-1797.md): The issue was addressed with improved permissions logic. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-1796](https://cve.now/CVE-2021-1796.md): An out-of-bounds write was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-1793](https://cve.now/CVE-2021-1793.md): This issue was addressed with improved checks. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-1795](https://cve.now/CVE-2021-1795.md): An out-of-bounds write was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-1794](https://cve.now/CVE-2021-1794.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-1790](https://cve.now/CVE-2021-1790.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple macOS)
- [CVE-2021-1791](https://cve.now/CVE-2021-1791.md): An out-of-bounds read issue existed that led to the disclosure of kernel memory. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-1789](https://cve.now/CVE-2021-1789.md): A type confusion issue was addressed with improved state handling. (CVSS 8.8, KEV, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-1792](https://cve.now/CVE-2021-1792.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-1788](https://cve.now/CVE-2021-1788.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-1787](https://cve.now/CVE-2021-1787.md): Multiple issues were addressed with improved logic. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-1785](https://cve.now/CVE-2021-1785.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-1783](https://cve.now/CVE-2021-1783.md): An access issue was addressed with improved memory management. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-1786](https://cve.now/CVE-2021-1786.md): A logic issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-1782](https://cve.now/CVE-2021-1782.md): A race condition was addressed with improved locking. (CVSS 7.0, KEV, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-1781](https://cve.now/CVE-2021-1781.md): A privacy issue existed in the handling of Contact cards. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-1777](https://cve.now/CVE-2021-1777.md): This issue was addressed with improved checks. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-1778](https://cve.now/CVE-2021-1778.md): An out-of-bounds read issue existed in the curl. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-1780](https://cve.now/CVE-2021-1780.md): A memory initialization issue was addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-1773](https://cve.now/CVE-2021-1773.md): A logic issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-1779](https://cve.now/CVE-2021-1779.md): A logic error in kext loading was addressed with improved state handling. (no CVSS, Apple macOS)
- [CVE-2021-1776](https://cve.now/CVE-2021-1776.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-1775](https://cve.now/CVE-2021-1775.md): This issue was addressed by removing the vulnerable code. (no CVSS, Apple macOS)
- [CVE-2021-1774](https://cve.now/CVE-2021-1774.md): This issue was addressed with improved checks. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-1771](https://cve.now/CVE-2021-1771.md): This issue was addressed with improved checks. (no CVSS, Apple macOS)
- [CVE-2021-1772](https://cve.now/CVE-2021-1772.md): A stack overflow was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-1769](https://cve.now/CVE-2021-1769.md): A logic issue was addressed with improved validation. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-1768](https://cve.now/CVE-2021-1768.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-1764](https://cve.now/CVE-2021-1764.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-1766](https://cve.now/CVE-2021-1766.md): This issue was addressed with improved checks. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-1767](https://cve.now/CVE-2021-1767.md): This issue was addressed with improved checks. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-1765](https://cve.now/CVE-2021-1765.md): This issue was addressed with improved iframe sandbox enforcement. (no CVSS, Apple macOS)
- [CVE-2021-1763](https://cve.now/CVE-2021-1763.md): A buffer overflow was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-1760](https://cve.now/CVE-2021-1760.md): A memory corruption issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-1757](https://cve.now/CVE-2021-1757.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-1758](https://cve.now/CVE-2021-1758.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-1756](https://cve.now/CVE-2021-1756.md): A lock screen issue allowed access to contacts on a locked device. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-1754](https://cve.now/CVE-2021-1754.md): This issue was addressed with improved checks. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-1759](https://cve.now/CVE-2021-1759.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-1750](https://cve.now/CVE-2021-1750.md): Multiple issues were addressed with improved logic. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-1751](https://cve.now/CVE-2021-1751.md): A logic issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2021-1755](https://cve.now/CVE-2021-1755.md): A lock screen issue allowed access to contacts on a locked device. (no CVSS, Apple macOS)
- [CVE-2021-1746](https://cve.now/CVE-2021-1746.md): This issue was addressed with improved checks. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-1748](https://cve.now/CVE-2021-1748.md): A validation issue was addressed with improved input sanitization. (no CVSS, Apple iOS and iPadOS · Apple watchOS +1)
- [CVE-2021-1747](https://cve.now/CVE-2021-1747.md): An out-of-bounds write was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-1744](https://cve.now/CVE-2021-1744.md): An out-of-bounds write was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-1743](https://cve.now/CVE-2021-1743.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-1742](https://cve.now/CVE-2021-1742.md): This issue was addressed with improved checks. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-1741](https://cve.now/CVE-2021-1741.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-1745](https://cve.now/CVE-2021-1745.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2020-29633](https://cve.now/CVE-2020-29633.md): An authentication issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2021-1738](https://cve.now/CVE-2021-1738.md): An out-of-bounds write was addressed with improved input validation. (no CVSS, Apple macOS)
- [CVE-2021-1736](https://cve.now/CVE-2021-1736.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple macOS)
- [CVE-2021-1737](https://cve.now/CVE-2021-1737.md): An out-of-bounds write was addressed with improved input validation. (no CVSS, Apple macOS)
- [CVE-2020-29624](https://cve.now/CVE-2020-29624.md): A memory corruption issue existed in the processing of font files. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2020-29625](https://cve.now/CVE-2020-29625.md): This issue was addressed with improved checks. (no CVSS, Apple macOS)
- [CVE-2020-29639](https://cve.now/CVE-2020-29639.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS)
- [CVE-2020-29623](https://cve.now/CVE-2020-29623.md): "Clear History and Website Data" did not clear the history. (no CVSS, Apple iOS and iPadOS · Apple tvOS +1)
- [CVE-2020-29619](https://cve.now/CVE-2020-29619.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2020-29621](https://cve.now/CVE-2020-29621.md): This issue was addressed with improved checks. (no CVSS, Apple macOS)
- [CVE-2020-29617](https://cve.now/CVE-2020-29617.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2020-29618](https://cve.now/CVE-2020-29618.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2020-29620](https://cve.now/CVE-2020-29620.md): This issue was addressed with improved entitlements. (no CVSS, Apple macOS)
- [CVE-2020-29615](https://cve.now/CVE-2020-29615.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2020-29616](https://cve.now/CVE-2020-29616.md): A memory corruption issue was addressed with improved input validation. (no CVSS, Apple macOS)
- [CVE-2020-29611](https://cve.now/CVE-2020-29611.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2020-29614](https://cve.now/CVE-2020-29614.md): This issue was addressed with improved checks. (no CVSS, Apple iOS and iPadOS · Apple tvOS +1)
- [CVE-2020-29613](https://cve.now/CVE-2020-29613.md): A logic issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS)
- [CVE-2020-29608](https://cve.now/CVE-2020-29608.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2020-29610](https://cve.now/CVE-2020-29610.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2020-27949](https://cve.now/CVE-2020-27949.md): This issue was addressed with improved checks to prevent unauthorized actions. (no CVSS, Apple macOS)
- [CVE-2020-29612](https://cve.now/CVE-2020-29612.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2020-27948](https://cve.now/CVE-2020-27948.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2020-27952](https://cve.now/CVE-2020-27952.md): An out-of-bounds write was addressed with improved input validation. (no CVSS, Apple macOS)
- [CVE-2020-27951](https://cve.now/CVE-2020-27951.md): This issue was addressed with improved checks. (no CVSS, Apple iOS and iPadOS · Apple iOS +1)
- [CVE-2020-27946](https://cve.now/CVE-2020-27946.md): An information disclosure issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2020-27947](https://cve.now/CVE-2020-27947.md): A memory corruption issue was addressed with improved input validation. (no CVSS, Apple macOS)
- [CVE-2020-27944](https://cve.now/CVE-2020-27944.md): A memory corruption issue existed in the processing of font files. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2020-27945](https://cve.now/CVE-2020-27945.md): An integer overflow was addressed with improved input validation. (no CVSS, Apple macOS)
- [CVE-2020-27938](https://cve.now/CVE-2020-27938.md): A logic issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2020-27943](https://cve.now/CVE-2020-27943.md): A memory corruption issue existed in the processing of font files. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2020-27941](https://cve.now/CVE-2020-27941.md): A validation issue was addressed with improved logic. (no CVSS, Apple macOS)
- [CVE-2020-27939](https://cve.now/CVE-2020-27939.md): This issue was addressed with improved checks. (no CVSS, Apple macOS)
- [CVE-2020-27937](https://cve.now/CVE-2020-27937.md): A logic issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2020-27933](https://cve.now/CVE-2020-27933.md): A memory corruption issue was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2020-27936](https://cve.now/CVE-2020-27936.md): An out-of-bounds read issue existed that led to the disclosure of kernel memory. (no CVSS, Apple macOS)
- [CVE-2020-27923](https://cve.now/CVE-2020-27923.md): An out-of-bounds write was addressed with improved input validation. (no CVSS, Apple watchOS · Apple iOS and iPadOS +2)
- [CVE-2020-27931](https://cve.now/CVE-2020-27931.md): A memory corruption issue existed in the processing of font files. (no CVSS, Apple tvOS · Apple watchOS +2)
- [CVE-2020-27922](https://cve.now/CVE-2020-27922.md): A logic issue was addressed with improved state management. (no CVSS, Apple watchOS · Apple iOS and iPadOS +2)
- [CVE-2020-27924](https://cve.now/CVE-2020-27924.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple watchOS · Apple iOS and iPadOS +2)
- [CVE-2020-27935](https://cve.now/CVE-2020-27935.md): Multiple issues were addressed with improved logic. (no CVSS, Apple watchOS · Apple iOS and iPadOS +2)
- [CVE-2020-27921](https://cve.now/CVE-2020-27921.md): A race condition was addressed with improved state handling. (no CVSS, Apple macOS)
- [CVE-2020-27920](https://cve.now/CVE-2020-27920.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple watchOS · Apple iOS and iPadOS +2)
- [CVE-2020-27908](https://cve.now/CVE-2020-27908.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple watchOS · Apple iOS and iPadOS +2)
- [CVE-2020-27914](https://cve.now/CVE-2020-27914.md): A memory corruption issue was addressed with improved input validation. (no CVSS, Apple macOS)
- [CVE-2020-27915](https://cve.now/CVE-2020-27915.md): A memory corruption issue was addressed with improved input validation. (no CVSS, Apple macOS)
- [CVE-2020-27901](https://cve.now/CVE-2020-27901.md): A logic issue was addressed with improved restrictions. (no CVSS, Apple macOS)
- [CVE-2020-27919](https://cve.now/CVE-2020-27919.md): An out-of-bounds write was addressed with improved input validation. (no CVSS, Apple macOS)
- [CVE-2020-27907](https://cve.now/CVE-2020-27907.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple macOS)
- [CVE-2020-27899](https://cve.now/CVE-2020-27899.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple watchOS · Apple iOS and iPadOS +2)
- [CVE-2020-27893](https://cve.now/CVE-2020-27893.md): An issue existed in screen sharing. (no CVSS, Apple macOS)
- [CVE-2020-9975](https://cve.now/CVE-2020-9975.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple tvOS · Apple watchOS +2)
- [CVE-2020-10015](https://cve.now/CVE-2020-10015.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2020-27897](https://cve.now/CVE-2020-27897.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2020-9995](https://cve.now/CVE-2020-9995.md): An issue existed in the parsing of URLs. (no CVSS, Apple macOS)
- [CVE-2020-9978](https://cve.now/CVE-2020-9978.md): This issue was addressed with improved setting propagation. (no CVSS, Apple tvOS · Apple watchOS +2)
- [CVE-2021-22865](https://cve.now/CVE-2021-22865.md): Improper access control in GitHub Enterprise Server leading to unauthorized read access to private repository metadata (no CVSS, GitHub Enterprise Server)
- [CVE-2020-10001](https://cve.now/CVE-2020-10001.md): An input validation issue was addressed with improved memory handling. (no CVSS, Apple macOS)
- [CVE-2020-10008](https://cve.now/CVE-2020-10008.md): A logic issue was addressed with improved restrictions. (no CVSS, Apple macOS)
- [CVE-2020-9926](https://cve.now/CVE-2020-9926.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2020-9956](https://cve.now/CVE-2020-9956.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple tvOS · Apple watchOS +2)
- [CVE-2020-9971](https://cve.now/CVE-2020-9971.md): A logic issue was addressed with improved validation. (no CVSS, Apple tvOS · Apple watchOS +2)
- [CVE-2020-9967](https://cve.now/CVE-2020-9967.md): Multiple memory corruption issues were addressed with improved input validation. (no CVSS, Apple tvOS · Apple watchOS +2)
- [CVE-2020-9962](https://cve.now/CVE-2020-9962.md): A buffer overflow was addressed with improved size validation. (no CVSS, Apple tvOS · Apple watchOS +2)
- [CVE-2020-9955](https://cve.now/CVE-2020-9955.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple tvOS · Apple watchOS +2)
- [CVE-2020-9960](https://cve.now/CVE-2020-9960.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple tvOS · Apple watchOS +2)
- [CVE-2020-9930](https://cve.now/CVE-2020-9930.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple macOS)
- [CVE-2021-22202](https://cve.now/CVE-2021-22202.md): An issue has been discovered in GitLab CE/EE affecting all previous versions. (CVSS 2.4, GitLab)
- [CVE-2021-22200](https://cve.now/CVE-2021-22200.md): An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.6. (CVSS 5.9, GitLab)
- [CVE-2021-22197](https://cve.now/CVE-2021-22197.md): An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.6 where an infinite loop exist when an authenticated us (CVSS 3.5, GitLab)
- [CVE-2021-22198](https://cve.now/CVE-2021-22198.md): An issue has been discovered in GitLab CE/EE affecting all versions from 13.8 and above allowing an authenticated user to delete incident me (CVSS 4.3, GitLab)
- [CVE-2021-22201](https://cve.now/CVE-2021-22201.md): An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.9. (CVSS 9.6, GitLab)
- [CVE-2021-22203](https://cve.now/CVE-2021-22203.md): An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7.9 before 13.8.7, all versions starting from 13.9 befo (CVSS 7.5, GitLab)
- [CVE-2021-22196](https://cve.now/CVE-2021-22196.md): An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4. (CVSS 6.3, GitLab)
- [CVE-2020-11922](https://cve.now/CVE-2020-11922.md): An issue was discovered in WiZ Colors A60 1.14.0. (no CVSS)
- [CVE-2020-11925](https://cve.now/CVE-2020-11925.md): An issue was discovered in Luvion Grand Elite 3 Connect through 2020-02-25. (CVSS 8.8)
- [CVE-2019-20466](https://cve.now/CVE-2019-20466.md): An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. (CVSS 7.8)
- [CVE-2019-20465](https://cve.now/CVE-2019-20465.md): An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. (no CVSS)
- [CVE-2019-20464](https://cve.now/CVE-2019-20464.md): An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. (CVSS 7.5)
- [CVE-2019-20463](https://cve.now/CVE-2019-20463.md): An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. (no CVSS)
- [CVE-2021-28124](https://cve.now/CVE-2021-28124.md): A man-in-the-middle vulnerability in Cohesity DataPlatform support channel in version 6.3 up to 6.3.1g, 6.4 up to 6.4.1c and 6.5.1 through 6 (no CVSS)
- [CVE-2021-21400](https://cve.now/CVE-2021-21400.md): Entering code in App Lock modal sends input to conversation (CVSS 7.1, wireapp wire-webapp)
- [CVE-2021-28123](https://cve.now/CVE-2021-28123.md): Undocumented Default Cryptographic Key Vulnerability in Cohesity DataPlatform version 6.3 prior 6.3.1g, 6.4 up to 6.4.1c and 6.5.1 through 6 (no CVSS)
- [CVE-2021-28113](https://cve.now/CVE-2021-28113.md): A command injection vulnerability in the cookieDomain and relayDomain parameters of Okta Access Gateway before 2020.9.3 allows attackers (wi (CVSS 6.7)
- [CVE-2021-29652](https://cve.now/CVE-2021-29652.md): Pomerium from version 0.10.0-0.13.3 has an Open Redirect in the user sign-in/out process (no CVSS, github.com/pomerium/pomerium)
- [CVE-2021-29651](https://cve.now/CVE-2021-29651.md): Pomerium before 0.13.4 has an Open Redirect (issue 1 of 2). (no CVSS, github.com/pomerium/pomerium)
- [CVE-2021-29011](https://cve.now/CVE-2021-29011.md): DMA Softlab Radius Manager 4.4.0 is affected by Cross Site Scripting (XSS) via the description, name, or address field (under admin.php). (no CVSS)
- [CVE-2021-29012](https://cve.now/CVE-2021-29012.md): DMA Softlab Radius Manager 4.4.0 assigns the same session cookie to every admin session. (no CVSS)
- [CVE-2021-25894](https://cve.now/CVE-2021-25894.md): Magnolia CMS from 6.1.3 to 6.2.3 contains a stored cross-site scripting (XSS) vulnerability in the /magnoliaPublic/travel/members/login.html (no CVSS)
- [CVE-2021-25893](https://cve.now/CVE-2021-25893.md): Magnolia CMS from 6.1.3 to 6.2.3 contains a stored cross-site scripting (XSS) vulnerability in the setText parameter of /magnoliaAuthor/.mag (no CVSS)
- [CVE-2021-22696](https://cve.now/CVE-2021-22696.md): OAuth 2 authorization service vulnerable to DDos attacks (no CVSS, Apache Software Foundation Apache CXF · org.apache.cxf:c… +1)
- [CVE-2021-30000](https://cve.now/CVE-2021-30000.md): An issue was discovered in LATRIX 0.6.0. (no CVSS)
- [CVE-2021-30003](https://cve.now/CVE-2021-30003.md): An issue was discovered on Nokia G-120W-F 3FE46606AGAB91 devices. (no CVSS)
- [CVE-2021-30002](https://cve.now/CVE-2021-30002.md): An issue was discovered in the Linux kernel before 5.11.3 when a webcam device exists. (no CVSS)
- [CVE-2021-30004](https://cve.now/CVE-2021-30004.md): In wpa\_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x5 (CVSS 4.3)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-04-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.