CVEs published April 6, 2021
93 CVEs were published on April 6, 2021: 2 critical, 4 high.
- Published
- 93
- Critical
- 2
- High
- 4
- Medium
- 37
- Low
- 0
- Unrated
- 50
- Now in CISA KEV
- 0
- Fix available
- 9
Most affected products
- ASUS BMC firmware for Z10PR-D16 · ASUS BMC firmware for… +1
- 18
- ASUS BMC firmware for ASMB9-iKVM · ASUS BMC firmware fo… +42
- 17
- Vangene deltaFlow E-platform
- 3
- django
- 1
- Facebook WhatsApp Business for Android · Facebook WhatsApp…
- 1
- Facebook WhatsApp Business for iOS · Facebook WhatsApp f… +2
- 1
- github.com/opencontainers/umoci
- 1
- Linux
- 1
- MongoDB Compass
- 1
- phpseclib/phpseclib
- 1
Critical 2
High 4
- CVE-2021-21404Crash due to malformed relay protocol messagesyncthing · github.com/syncthing/syncthing
- CVE-2021-28172Vangene deltaFlow E-platform - Path TraversalVangene deltaFlow E-platform
- CVE-2021-28204ASUS BMC's firmware: command injection - Modify user’s information functionASUS BMC firmware for Z10PR-D16 · ASUS BMC firmware for… +1
- CVE-2021-28203ASUS BMC's firmware: command injection - Web Set Media Image functionASUS BMC firmware for Z10PR-D16 · ASUS BMC firmware for… +1
Medium, low and unrated 87
- CVE-2020-36310An issue was discovered in the Linux kernel before 5.8.
- CVE-2021-30178An issue was discovered in the Linux kernel through 5.11.11.
- CVE-2020-36311An issue was discovered in the Linux kernel before 5.9.
- CVE-2020-36312An issue was discovered in the Linux kernel before 5.8.10.
- CVE-2020-36313An issue was discovered in the Linux kernel before 5.7.
- CVE-2021-27900The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) is missing an authorization check on several pages in the Web Co
- CVE-2021-22158The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) is vulnerable to XML external entity (XXE) injection in the Web
- CVE-2021-27899The Proofpoint Insider Threat Management Agents (formerly ObserveIT Agent) for MacOS and Linux perform improper validation of the ITM Server
- CVE-2021-22157Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.11.1 allows stored XSS.
- CVE-2020-13422OpenIAM before 4.2.0.3 does not verify if a user has permissions to perform /webconsole/rest/api/* administrative actions.
- CVE-2020-13421OpenIAM before 4.2.0.3 has Incorrect Access Control for the Create User, Modify User Permissions, and Password Reset actions.
- CVE-2020-13419OpenIAM before 4.2.0.3 allows Directory Traversal in the Batch task.
- CVE-2020-13418OpenIAM before 4.2.0.3 allows XSS in the Add New User feature.
- CVE-2020-13420OpenIAM before 4.2.0.3 allows remote attackers to execute arbitrary code via Groovy Script.
- CVE-2021-25692Sensitive smart card data is logged in default INFO logs by Teradici's PCoIP Connection Manager and Security Gateway prior to version 21.01.Teradici PCoIP Connection Manager and Security Gateway
- CVE-2021-21423Exposure of Version-Control Repository to an Unauthorized Control Sphere in projenprojen
- CVE-2021-28688The fix for XSA-365 includes initialization of pointers such that subsequent cleanup code wouldn't use uninitialized or stale values.Linux
- CVE-2020-36309ngx_http_lua_module (aka lua-nginx-module) before 0.10.16 in OpenResty allows unsafe characters in an argument when using the API to mutate
- CVE-2021-20334Local privilege escalation in MongoDB Compass for WindowsMongoDB Compass
- CVE-2021-24026A missing bounds check within the audio decoding pipeline for WhatsApp calls in WhatsApp for Android prior to v2.21.3, WhatsApp Business forFacebook WhatsApp Business for iOS · Facebook WhatsApp f… +2
- CVE-2021-24027A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for Android v2.21.4.18 may have allowed a third pFacebook WhatsApp Business for Android · Facebook WhatsApp…
- CVE-2021-29136Open Container Initiative umoci before 0.4.7 allows attackers to overwrite arbitrary host paths via a crafted image that causes symlink travgithub.com/opencontainers/umoci
- CVE-2021-30146Seafile 7.0.5 (2019) allows Persistent XSS via the "share of library functionality."
- CVE-2021-30140LiquidFiles 3.4.15 has stored XSS through the "send email" functionality when sending a file via email to an administrator.
- CVE-2021-26833Cleartext Storage in a File or on Disk in TimelyBills <= 1.7.0 for iOS and versions <= 1.21.115 for Android allows attacker who can locally
- CVE-2020-36285Union Pay up to 3.3.12, for iOS mobile apps, contains a CWE-347: Improper Verification of Cryptographic Signature vulnerability, allows atta
- CVE-2020-36284Union Pay up to 3.4.93.4.9, for android, contains a CWE-347: Improper Verification of Cryptographic Signature vulnerability, allows attacker
- CVE-2020-23533Union Pay up to 1.2.0, for web based versions contains a CWE-347: Improper Verification of Cryptographic Signature vulnerability, allows att
- CVE-2021-28658In Django 2.2 before 2.2.20, 3.0 before 3.0.14, and 3.1 before 3.1.8, MultiPartParser allowed directory traversal via uploaded files with sudjango
- CVE-2021-28142CITSmart before 9.1.2.28 mishandles the "filtro de autocomplete."
- CVE-2021-30046VIGRA Computer Vision Library Version-1-11-1 contains a segmentation fault vulnerability in the impex.hxx read_image_band() function, in whi
- CVE-2021-30045SerenityOS 2021-03-27 contains a buffer overflow vulnerability in the EndOfCentralDirectory::read() function.
- CVE-2021-28874SerenityOS fixed as of c9f25bca048443e317f1994ba9b106f2386688c3 contains a buffer overflow vulnerability in LibTextCode through opening a cr
- CVE-2021-28075iKuaiOS 3.4.8 Build 202012291059 has an arbitrary file download vulnerability, which can be exploited by attackers to obtain sensitive infor
- CVE-2021-27698RIOT-OS 2021.01 contains a buffer overflow vulnerability in /sys/net/gnrc/routing/rpl/gnrc_rpl_control_messages.c through the _parse_options
- CVE-2021-27697RIOT-OS 2021.01 contains a buffer overflow vulnerability in sys/net/gnrc/routing/rpl/gnrc_rpl_validation.c through the gnrc_rpl_validation_o
- CVE-2021-27357RIOT-OS 2020.01 contains a buffer overflow vulnerability in /sys/net/gnrc/routing/rpl/gnrc_rpl_control_messages.c.
- CVE-2021-27343SerenityOS Unspecified is affected by: Buffer Overflow.
- CVE-2021-30163Redmine before 4.0.8 and 4.1.x before 4.1.2 allows attackers to discover the names of private projects if issue-journal details exist that h
- CVE-2020-36306Redmine before 4.0.7 and 4.1.x before 4.1.1 has XSS via the back_url field.
- CVE-2020-36307Redmine before 4.0.7 and 4.1.x before 4.1.1 has stored XSS via textile inline links.
- CVE-2020-36308Redmine before 4.0.7 and 4.1.x before 4.1.1 allows attackers to discover the subject of a non-visible issue by performing a CSV export and r
- CVE-2019-25026Redmine before 3.4.13 and 4.x before 4.0.6 mishandles markup data during Textile formatting.
- CVE-2021-30164Redmine before 4.0.8 and 4.1.x before 4.1.2 allows attackers to bypass the add_issue_notes permission requirement by leveraging the Issues A
- CVE-2021-30161An issue was discovered on LG mobile devices with Android OS 11 software.
- CVE-2021-30162An issue was discovered on LG mobile devices with Android OS 4.4 through 11 software.
- CVE-2021-30154An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2.
- CVE-2021-30157An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2.
- CVE-2021-30158An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2.
- CVE-2021-30149Composr 10.0.36 allows upload and execution of PHP files.
- CVE-2021-30150Composr 10.0.36 allows XSS in an XML script.
- CVE-2021-28209ASUS BMC's firmware: path traversal - Delete video file functionASUS BMC firmware for ASMB9-iKVM · ASUS BMC firmware fo… +42
- CVE-2021-28208ASUS BMC's firmware: path traversal - Get video file functionASUS BMC firmware for ASMB9-iKVM · ASUS BMC firmware fo… +42
- CVE-2021-28207ASUS BMC's firmware: path traversal - Get Help file functionASUS BMC firmware for ASMB9-iKVM · ASUS BMC firmware fo… +42
- CVE-2021-28206ASUS BMC's firmware: path traversal - Record video file functionASUS BMC firmware for ASMB9-iKVM · ASUS BMC firmware fo… +42
- CVE-2021-28205ASUS BMC's firmware: path traversal - Delete SOL video file functionASUS BMC firmware for Z10PR-D16 · ASUS BMC firmware for… +1
- CVE-2021-28202ASUS BMC's firmware: buffer overflow - Service configuration-2 functionASUS BMC firmware for ASMB9-iKVM · ASUS BMC firmware fo… +42
- CVE-2021-28201ASUS BMC's firmware: buffer overflow - Service configuration-1 functionASUS BMC firmware for ASMB9-iKVM · ASUS BMC firmware fo… +42
- CVE-2021-28200ASUS BMC's firmware: buffer overflow - CD media configuration functionASUS BMC firmware for ASMB9-iKVM · ASUS BMC firmware fo… +42
- CVE-2021-28199ASUS BMC's firmware: buffer overflow - Modify user’s information functionASUS BMC firmware for ASMB9-iKVM · ASUS BMC firmware fo… +42
- CVE-2021-28198ASUS BMC's firmware: buffer overflow - Firmware protocol configurationASUS BMC firmware for ASMB9-iKVM · ASUS BMC firmware fo… +42
- CVE-2021-28197ASUS BMC's firmware: buffer overflow - Active Directory configuration functionASUS BMC firmware for ASMB9-iKVM · ASUS BMC firmware fo… +42
- CVE-2021-28196ASUS BMC's firmware: buffer overflow - Generate SSL certificate functionASUS BMC firmware for ASMB9-iKVM · ASUS BMC firmware fo… +42
- CVE-2021-28195ASUS BMC's firmware: buffer overflow - Radius configuration functionASUS BMC firmware for ASMB9-iKVM · ASUS BMC firmware fo… +42
- CVE-2021-28194ASUS BMC's firmware: buffer overflow - Remote image configuration settingASUS BMC firmware for ASMB9-iKVM · ASUS BMC firmware fo… +42
- CVE-2021-28193ASUS BMC's firmware: buffer overflow - SMTP configuration functionASUS BMC firmware for ASMB9-iKVM · ASUS BMC firmware fo… +42
- CVE-2021-28192ASUS BMC's firmware: buffer overflow - Remote video storage functionASUS BMC firmware for ASMB9-iKVM · ASUS BMC firmware fo… +42
- CVE-2021-28191ASUS BMC's firmware: buffer overflow - Firmware update functionASUS BMC firmware for ASMB9-iKVM · ASUS BMC firmware fo… +42
- CVE-2021-28190ASUS BMC's firmware: buffer overflow - Generate new certificate functionASUS BMC firmware for ASMB9-iKVM · ASUS BMC firmware fo… +42
- CVE-2021-28189ASUS BMC's firmware: buffer overflow - SMTP configuration functionASUS BMC firmware for Z10PR-D16 · ASUS BMC firmware for… +1
- CVE-2021-28188ASUS BMC's firmware: buffer overflow - Modify user’s information functionASUS BMC firmware for Z10PR-D16 · ASUS BMC firmware for… +1
- CVE-2021-28187ASUS BMC's firmware: buffer overflow - Generate new SSL certificateASUS BMC firmware for Z10PR-D16 · ASUS BMC firmware for… +1
- CVE-2021-28186ASUS BMC's firmware: buffer overflow - ActiveX configuration-2 acquisitionASUS BMC firmware for Z10PR-D16 · ASUS BMC firmware for… +1
- CVE-2021-28185ASUS BMC's firmware: buffer overflow - ActiveX configuration-1 acquisitionASUS BMC firmware for Z10PR-D16 · ASUS BMC firmware for… +1
- CVE-2021-28184ASUS BMC's firmware: buffer overflow - Active Directory configuration functionASUS BMC firmware for Z10PR-D16 · ASUS BMC firmware for… +1
- CVE-2021-28183ASUS BMC's firmware: buffer overflow - Web License configuration settingASUS BMC firmware for Z10PR-D16 · ASUS BMC firmware for… +1
- CVE-2021-28182ASUS BMC's firmware: buffer overflow - Web Service configuration functionASUS BMC firmware for Z10PR-D16 · ASUS BMC firmware for… +1
- CVE-2021-28181ASUS BMC's firmware: buffer overflow - Remote video configuration settingASUS BMC firmware for Z10PR-D16 · ASUS BMC firmware for… +1
- CVE-2021-28180ASUS BMC's firmware: buffer overflow - Audit log configuration settingASUS BMC firmware for Z10PR-D16 · ASUS BMC firmware for… +1
- CVE-2021-28179ASUS BMC's firmware: buffer overflow - Media support configuration settingASUS BMC firmware for Z10PR-D16 · ASUS BMC firmware for… +1
- CVE-2021-28178ASUS BMC's firmware: buffer overflow - UEFI configuration functionASUS BMC firmware for Z10PR-D16 · ASUS BMC firmware for… +1
- CVE-2021-28177ASUS BMC's firmware: buffer overflow - LDAP configuration functionASUS BMC firmware for Z10PR-D16 · ASUS BMC firmware for… +1
- CVE-2021-28176ASUS BMC's firmware: buffer overflow - DNS configuration functionASUS BMC firmware for Z10PR-D16 · ASUS BMC firmware for… +1
- CVE-2021-28175ASUS BMC's firmware: buffer overflow - Radius configuration functionASUS BMC firmware for Z10PR-D16 · ASUS BMC firmware for… +1
- CVE-2021-30144The Dashboard plugin through 1.0.2 for GLPI allows remote low-privileged users to bypass access control on viewing information about the las
- CVE-2021-30130phpseclib before 2.0.31 and 3.x before 3.0.7 mishandles RSA PKCS#1 v1.5 signature verification.phpseclib/phpseclib
- CVE-2021-30151Sidekiq through 5.1.3 and 6.x through 6.2.0 allows XSS via the queue name of the live-poll feature when Internet Explorer is used.sidekiq