# CVEs published 2021-04-18

8 CVEs were published on April 18, 2021: 3 critical, 4 high. Days are UTC.

- [CVE-2021-23379](https://cve.now/CVE-2021-23379.md): Arbitrary Command Injection (CVSS 7.3, portkiller)
- [CVE-2021-23380](https://cve.now/CVE-2021-23380.md): Arbitrary Command Injection (CVSS 5.6, roar-pidusage)
- [CVE-2021-23381](https://cve.now/CVE-2021-23381.md): Arbitrary Command Injection (CVSS 7.3, killing)
- [CVE-2021-23374](https://cve.now/CVE-2021-23374.md): Arbitrary Command Injection (CVSS 7.3, ps-visitor)
- [CVE-2021-23375](https://cve.now/CVE-2021-23375.md): Arbitrary Command Injection (CVSS 7.3, psnode)
- [CVE-2021-23376](https://cve.now/CVE-2021-23376.md): Arbitrary Command Injection (CVSS 9.8, ffmpegdotjs)
- [CVE-2021-23377](https://cve.now/CVE-2021-23377.md): Arbitrary Command Injection (CVSS 9.8, onion-oled-js)
- [CVE-2021-23378](https://cve.now/CVE-2021-23378.md): Arbitrary Command Injection (CVSS 9.8, picotts)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-04-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.