CVEs published April 8, 2021
64 CVEs were published on April 8, 2021: 1 critical, 11 high.
- Published
- 64
- Critical
- 1
- High
- 11
- Medium
- 20
- Low
- 0
- Unrated
- 32
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- Cisco Small Business RV Series Router Firmware
- 9
- Cisco Unity Connection
- 5
- Micro Focus Application Automation Tools Plugin - Jenkins p…
- 4
- Cisco ClamAV
- 3
- Cisco SD-WAN Solution
- 3
- Cisco Umbrella Insights Virtual Appliance
- 2
- Cisco Unified Communications Manager
- 2
- Cisco Webex Meetings
- 2
- Cisco AMP for Endpoints
- 1
- Cisco IOS XR Software
- 1
Critical 1
High 11
- CVE-2021-1404Clam AntiVirus (ClamAV) Email Parser Denial of Service VulnerabilityCisco ClamAV
- CVE-2021-1405Clam AntiVirus (ClamAV) PDF Parser Denial of Service VulnerabilityCisco ClamAV
- CVE-2021-1252Clam AntiVirus (ClamAV) Excel XLM Parser Denial of Service VulnerabilityCisco ClamAV
- CVE-2021-1480Cisco SD-WAN vManage Software VulnerabilitiesCisco SD-WAN Solution
- CVE-2021-1479Cisco SD-WAN vManage Software VulnerabilitiesCisco SD-WAN Solution
- CVE-2021-1386Cisco Advanced Malware Protection for Endpoints Windows Connector, ClamAV for Windows, and Immunet DLL Hijacking VulnerabilityCisco AMP for Endpoints
- CVE-2021-1362Cisco Unified Communications Products Remote Code Execution VulnerabilityCisco Unity Connection
- CVE-2021-1309Cisco Small Business RV Series Routers Link Layer Discovery Protocol VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1308Cisco Small Business RV Series Routers Link Layer Discovery Protocol VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1251Cisco Small Business RV Series Routers Link Layer Discovery Protocol VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1137Cisco SD-WAN vManage Software VulnerabilitiesCisco SD-WAN Solution
Medium, low and unrated 52
- CVE-2021-3413A flaw was found in Red Hat Satellite in tfm-rubygem-foreman_azure_rm in versions before 2.2.0.Satellite
- CVE-2021-3448A flaw was found in dnsmasq in versions before 2.85.dnsmasq
- CVE-2021-3482A flaw was found in Exiv2 in versions before and including 0.27.4-RC1.exiv2
- CVE-2020-6590Forcepoint Web Security Content Gateway versions prior to 8.5.4 improperly process XML input, leading to information disclosure.Forcepoint Web Security Content Gateway
- CVE-2021-22512Cross-Site Request Forgery (CSRF) vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin.Micro Focus Application Automation Tools Plugin - Jenkins p…
- CVE-2021-22511Improper Certificate Validation vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin.Micro Focus Application Automation Tools Plugin - Jenkins p…
- CVE-2021-22510Reflected XSS vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin.Micro Focus Application Automation Tools Plugin - Jenkins p…
- CVE-2021-22513Missing Authorization vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin.Micro Focus Application Automation Tools Plugin - Jenkins p…
- CVE-2020-14106The application in the mobile phone can unauthorized access to the list of running processes in the mobile phone, Xiaomi Mobile Phone MIUI <Xiaomi Mobile Phone
- CVE-2020-14103The application in the mobile phone can read the SNO information of the device, Xiaomi 10 MIUI < 2020.01.15.Xiaomi
- CVE-2021-3146The Dolby Audio X2 (DAX2) API service before 0.8.8.90 on Windows allows local users to gain privileges.
- CVE-2021-22312There is a memory leak vulnerability in some Huawei products.IPS Module;NGFW Module;Secospace USG6300;Secospace USG6500;…
- CVE-2020-14099On Xiaomi router AX1800 rom version < 1.0.336 and RM1800 root version < 1.0.26, the encryption scheme for a user's backup files uses hard-coXiaomi Router AX1800,Xiaomi Rourer RM1800
- CVE-2020-14104A RACE CONDITION on XQBACKUP causes a decompression path error on Xiaomi router AX3600 with ROM version =1.0.50.Xiaomi router AX3600
- CVE-2021-22507Authentication bypass vulnerability in Micro Focus Operations Bridge Manager affects versions 2019.05, 2019.11, 2020.05 and 2020.10.Operations Bridge Manager
- CVE-2021-22115Cloud Controller API versions prior to 1.106.0 logs service broker credentials if the default value of db logging config field is changed.Cloud Control API
- CVE-2021-3328An issue was discovered in Aprelium Abyss Web Server X1 2.12.1 and 2.14.
- CVE-2021-27945The Squirro Insights Engine was affected by a Reflected Cross-Site Scripting (XSS) vulnerability affecting versions 2.0.0 up to and includin
- CVE-2020-23539An issue was discovered in Realtek rtl8723de BLE Stack <= 4.1 that allows remote attackers to cause a Denial of Service via the interval fie
- CVE-2021-27522Learnsite 1.2.5.0 contains a remote privilege escalation vulnerability in /Manager/index.aspx through the JudgIsAdmin() function.
- CVE-2020-23426zzcms 201910 contains an access control vulnerability through escalation of privileges in /user/adv.php, which allows an attacker to modify
- CVE-2021-30462VestaCP through 0.9.8-24 allows the admin user to escalate privileges to root because the Sudo configuration does not require a password to
- CVE-2021-30463VestaCP through 0.9.8-24 allows attackers to gain privileges by creating symlinks to files for which they lack permissions.
- CVE-2021-28924Self Authenticated XSS in Nagios Network Analyzer before 2.4.2 via the nagiosna/groups/queries page.
- CVE-2021-28925SQL injection vulnerability in Nagios Network Analyzer before 2.4.3 via the o[col] parameter to api/checks/read/.
- CVE-2021-20480IBM WebSphere Application Server 7.0, 8.0, and 8.5 is vulnerable to server-side request forgery (SSRF).IBM WebSphere Application Server
- CVE-2021-30111A stored XSS vulnerability exists in Web-School ERP V 5.0 via (Add Events) in the event name and description fields.
- CVE-2021-30112Web-School ERP V 5.0 contains a cross-site request forgery (CSRF) vulnerability that allows a remote attacker to create a student_leave_appl
- CVE-2021-30113A blind XSS vulnerability exists in Web-School ERP V 5.0 via (Add Events) in event name and description fields.
- CVE-2021-30114Web-School ERP V 5.0 contains a cross-site request forgery (CSRF) vulnerability that allows a remote attacker to create a voucher payment re
- CVE-2021-28686AsIO2_64.sys and AsIO2_32.sys in ASUS GPUTweak II before 2.3.0.3 allow low-privileged users to trigger a stack-based buffer overflow.
- CVE-2021-28685AsIO2_64.sys and AsIO2_32.sys in ASUS GPUTweak II before 2.3.0.3 allow low-privileged users to interact directly with physical memory (by ca
- CVE-2021-3012A cross-site scripting (XSS) vulnerability in the Document Link of documents in ESRI Enterprise before 10.9 allows remote authenticated user
- CVE-2021-1485Cisco IOS XR Software Command Injection VulnerabilityCisco IOS XR Software
- CVE-2021-1475Cisco Umbrella Link and CSV Formula Injection VulnerabilitiesCisco Umbrella Insights Virtual Appliance
- CVE-2021-1474Cisco Umbrella Link and CSV Formula Injection VulnerabilitiesCisco Umbrella Insights Virtual Appliance
- CVE-2021-1473Cisco Small Business RV Series Routers VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1472Cisco Small Business RV Series Routers VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1467Cisco Webex Meetings for Android Avatar Modification VulnerabilityCisco Webex Meetings
- CVE-2021-1463Cisco Unified Intelligence Center Reflected Cross-Site Scripting VulnerabilityCisco Unified Contact Center Express
- CVE-2021-1420Cisco Webex Meetings HTML Injection VulnerabilityCisco Webex Meetings
- CVE-2021-1415Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Authenticated Remote Code Execution VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1414Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Authenticated Remote Code Execution VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1413Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Authenticated Remote Code Execution VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-1409Cisco Unified Communications Products Cross-Site Scripting VulnerabilitiesCisco Unity Connection
- CVE-2021-1408Cisco Unified Communications Products Cross-Site Scripting VulnerabilitiesCisco Unity Connection
- CVE-2021-1407Cisco Unified Communications Products Cross-Site Scripting VulnerabilitiesCisco Unity Connection
- CVE-2021-1406Cisco Unified Communications Manager Information Disclosure VulnerabilityCisco Unified Communications Manager
- CVE-2021-1399Cisco Unified Communications Manager Self Care Portal Authorization Bypass VulnerabilityCisco Unified Communications Manager
- CVE-2021-1380Cisco Unified Communications Products Cross-Site Scripting VulnerabilitiesCisco Unity Connection
- CVE-2021-28174Mitake Smart Stock Selection System - Broken AuthenticationMitake Smart Stock Selection System
- CVE-2021-29154BPF JIT compilers in the Linux kernel through 5.11.12 have incorrect computation of branch displacements, allowing them to execute arbitrary