# CVEs published 2021-04-25

6 CVEs were published on April 25, 2021: 0 critical, 0 high. Days are UTC.

- [CVE-2021-31718](https://cve.now/CVE-2021-31718.md): The server in npupnp before 4.1.4 is affected by DNS rebinding in the embedded web server (including UPnP SOAP and GENA endpoints), leading (no CVSS)
- [CVE-2021-31762](https://cve.now/CVE-2021-31762.md): Webmin 1.973 is affected by Cross Site Request Forgery (CSRF) to create a privileged user through Webmin's add users feature, and then get a (no CVSS)
- [CVE-2021-31761](https://cve.now/CVE-2021-31761.md): Webmin 1.973 is affected by reflected Cross Site Scripting (XSS) to achieve Remote Command Execution through Webmin's running process featur (no CVSS)
- [CVE-2021-31760](https://cve.now/CVE-2021-31760.md): Webmin 1.973 is affected by Cross Site Request Forgery (CSRF) to achieve Remote Command Execution (RCE) through Webmin's running process fea (no CVSS)
- [CVE-2021-31726](https://cve.now/CVE-2021-31726.md): Akuvox C315 115.116.2613 allows remote command Injection via the cfgd\_server service. (no CVSS)
- [CVE-2021-30502](https://cve.now/CVE-2021-30502.md): The unofficial vscode-ghc-simple (aka Simple Glasgow Haskell Compiler) extension before 0.2.3 for Visual Studio Code allows remote code exec (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-04-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.