CVEs published April 16, 2021
19 CVEs were published on April 16, 2021: 1 critical, 4 high.
- Published
- 19
- Critical
- 1
- High
- 4
- Medium
- 8
- Low
- 0
- Unrated
- 6
- Now in CISA KEV
- 0
- Fix available
- 10
Most affected products
- Adobe GoCart
- 3
- Atlassian Connect Express · atlassian-connect-express
- 1
- Atlassian Connect Spring Boot · com.atlassian.connect:atlas…
- 1
- curveball a12n-server · @curveball/a12n-server
- 1
- Google VSCode-Bazel
- 1
- IBM Spectrum Protect Server
- 1
- ManyDesigns Portofino · com.manydesigns:portofino-dispat… +1
- 1
- panva jose · jose
- 1
- panva jose · jose-browser-runtime
- 1
- panva jose-node-cjs-runtime · jose-node-cjs-runtime
- 1
Critical 1
High 4
- CVE-2021-29452Any logged in user could edit any other logged in user.curveball a12n-server · @curveball/a12n-server
- CVE-2020-9668AGSService program mishandling symbolic linksAdobe GoCart
- CVE-2021-22539Code execution in VSCode-bazel via malicious Bazel config filesGoogle VSCode-Bazel
- CVE-2021-26073Broken Authentication in Atlassian Connect Express (ACE) from version 3.0.2 before version 6.6.0: Atlassian Connect Express is a Node.js pacAtlassian Connect Express · atlassian-connect-express
Medium, low and unrated 14
- CVE-2021-29446Padding Oracle Attack due to Observable Timing Discrepancy in jose-node-cjs-runtimepanva jose-node-cjs-runtime · jose-node-cjs-runtime
- CVE-2021-29445Padding Oracle Attack due to Observable Timing Discrepancy in jose-node-esm-runtimepanva jose-node-esm-runtime · jose-node-esm-runtime
- CVE-2021-29444Padding Oracle Attack due to Observable Timing Discrepancy in jose-browser-runtimepanva jose · jose-browser-runtime
- CVE-2021-27394A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.19), Mendix Applications using Mendix 8 (AllSiemens Mendix Applications using Mendix
- CVE-2021-31348An issue was discovered in libezxml.a in ezXML 0.8.6.
- CVE-2021-29443Padding Oracle Attack due to Observable Timing Discrepancy in josepanva jose · jose
- CVE-2021-31347An issue was discovered in libezxml.a in ezXML 0.8.6.
- CVE-2021-26830SQL Injection in Tribalsystems Zenario CMS 8.8.52729 allows remote attackers to access the database or delete the plugin.tribalsystems/zenario
- CVE-2020-9681Adobe Genuine Service privilege escalation vulnerabilityAdobe GoCart
- CVE-2020-9667Uncontrolled Search Path Element in AGSService.exeAdobe GoCart
- CVE-2021-20491IBM Spectrum Protect Server 7.1 and 8.1 is subject to a stack-based buffer overflow caused by improper bounds checking during the parsing ofIBM Spectrum Protect Server
- CVE-2021-31414The unofficial vscode-rpm-spec extension before 0.3.2 for Visual Studio Code allows remote code execution via a crafted workspace configurat
- CVE-2021-26074Broken Authentication in Atlassian Connect Spring Boot (ACSB) from version 1.1.0 before version 2.1.3: Atlassian Connect Spring Boot is a JaAtlassian Connect Spring Boot · com.atlassian.connect:atlas…
- CVE-2018-19942Cross-site Scripting Vulnerability in File StationQNAP Systems QTS · QNAP Systems QuTS hero +1