Archive

11 March 2021

Vulnerabilities first published on this day (UTC), newest first.

← February 2021 2021 / March /11 April 2021 →

All Critical High Medium Low Exploited only Public exploit

121 results · Feed

Unscored —

CVE-2020-36278

Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c.

leptonlib leptonlib Debian Ubuntu

Mar 11, 2021
Unscored —

CVE-2021-28143 EPSS 47%

/jsonrpc on D-Link DIR-841 3.03 and 3.04 devices allows authenticated command injection via ping, ping6, or traceroute …

Mar 11, 2021
Unscored —

CVE-2020-24983

An issue was discovered in Quadbase EspressReports ES 7 Update 9. An unauthenticated attacker can create a malicious HT…

Mar 11, 2021
Unscored —

CVE-2016-20009

A DNS client stack-based buffer overflow in ipdnsc_decode_name() affects Wind River VxWorks 6.5 through 7. NOTE: This v…

Mar 11, 2021
Unscored —

CVE-2021-28154

Camunda Modeler (aka camunda-modeler) through 4.6.0 allows arbitrary file access. A remote attacker may send a crafted …

Mar 11, 2021
Unscored —

CVE-2020-24984

An issue was discovered in Quadbase EspressReports ES 7 Update 9. It allows CSRF, whereby an attacker may be able to tr…

Mar 11, 2021
Unscored —

CVE-2021-28153

An issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATI…

glib2.0 glib2.0 glib Debian Ubuntu Alpine

Mar 11, 2021
Unscored —

CVE-2021-22709

A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive G…

Mar 11, 2021
Unscored —

CVE-2021-22710

A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive G…

Mar 11, 2021
Unscored —

CVE-2021-22712

A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive G…

Mar 11, 2021
Unscored —

CVE-2020-36277

Leptonica before 1.80.0 allows a denial of service (application crash) via an incorrect left shift in pixConvert2To8 in…

leptonlib leptonlib Debian Ubuntu

Mar 11, 2021
Unscored —

CVE-2021-22711

A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive G…

Mar 11, 2021
High 7.5

CVE-2021-22713

A CWE-119:Improper restriction of operations within the bounds of a memory buffer vulnerability exists in PowerLogic IO…

Mar 11, 2021
Unscored —

CVE-2021-22714

A CWE-119:Improper restriction of operations within the bounds of a memory buffer vulnerability exists in PowerLogic IO…

Mar 11, 2021
Unscored —

CVE-2021-20261

A race condition was found in the Linux kernels implementation of the floppy disk drive controller driver software. The…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Mar 11, 2021
Unscored —

CVE-2020-29045 EPSS 31%

The food-and-drink-menu plugin through 2.2.0 for WordPress allows remote attackers to execute arbitrary code because of…

Mar 11, 2021
Unscored —

CVE-2020-14989

An issue was discovered in Bloomreach Experience Manager (brXM) 4.1.0 through 14.2.2. It allows CSRF if the attacker us…

Mar 11, 2021
Unscored —

CVE-2020-14988

An issue was discovered in Bloomreach Experience Manager (brXM) 4.1.0 through 14.2.2. It allows XSS in the login page v…

Mar 11, 2021
Unscored —

CVE-2020-14987

An issue was discovered in Bloomreach Experience Manager (brXM) 4.1.0 through 14.2.2. It allows remote attackers to exe…

Mar 11, 2021
High —

GHSA-7vwg-39h8-8qp8

/user/sessions endpoint allows detecting valid accounts

This Security Advisory is about a vulnerability in eZ Platform v1.13, v2.5, and v3.2, and in Ibexa DXP and Ibexa Open Source v3.3. The /user/sessions endpoint can let an attacker detect if a given username or email refers to a valid account. This can be detec…

ezsystems/ezplatform-rest Packagist

Mar 11, 2021
Unscored —

CVE-2021-28141

An issue was discovered in Progress Telerik UI for ASP.NET AJAX 2021.1.224. It allows unauthorized access to MicrosoftA…

Mar 11, 2021
Medium —

CVE-2021-28088

Cross-site scripting (XSS)

Cross-site scripting (XSS) in modules/content/admin/content.php in ImpressCMS profile 1.4.2 allows remote attackers to inject arbitrary web script or HTML parameters through the "Display Name" field.

impresscms/impresscms Packagist

Mar 11, 2021
Unscored —

CVE-2021-27679

Cross-site scripting (XSS) vulnerability in Navigation in Batflat CMS 1.3.6 allows remote attackers to inject arbitrary…

Mar 11, 2021
Unscored —

CVE-2021-27678

Cross-site scripting (XSS) vulnerability in Snippets in Batflat CMS 1.3.6 allows remote attackers to inject arbitrary w…

Mar 11, 2021
Unscored —

CVE-2021-27677

Cross-site scripting (XSS) vulnerability in Galleries in Batflat CMS 1.3.6 allows remote attackers to inject arbitrary …

Mar 11, 2021
Unscored —

CVE-2021-26776

CSZ CMS 1.2.9 is affected by a cross-site scripting (XSS) vulnerability in multiple pages through the field name.

Mar 11, 2021
Unscored —

CVE-2021-28144

prog.cgi on D-Link DIR-3060 devices before 1.11b04 HF2 allows remote authenticated users to inject arbitrary commands i…

Mar 11, 2021
High 7.8

CVE-2021-27077

Windows Win32k Elevation of Privilege Vulnerability

Windows Win32k Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 11, 2021
High 8.8

CVE-2021-27076 EPSS 15%

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Foundation 2013 Service Pack 1

Mar 11, 2021
Medium 6.8

CVE-2021-27075

Azure Virtual Machine Information Disclosure Vulnerability

Azure Virtual Machine Information Disclosure Vulnerability

Microsoft Azure Kubernetes Service Azure Service Fabric Azure Container Instance

Mar 11, 2021
Medium 6.2

CVE-2021-27074

Azure Sphere Unsigned Code Execution Vulnerability

Azure Sphere Unsigned Code Execution Vulnerability

Microsoft Azure Sphere

Mar 11, 2021
High 7.3

CVE-2021-27070

Windows 10 Update Assistant Elevation of Privilege Vulnerability

Windows 10 Update Assistant Elevation of Privilege Vulnerability

Microsoft Windows 10 Version 20H2 Windows Server version 20H2 Windows 10 Version 2004 Windows

Mar 11, 2021
Medium 4.3

CVE-2021-27066

Windows Admin Center Security Feature Bypass Vulnerability

Windows Admin Center Security Feature Bypass Vulnerability

Microsoft Windows Admin Center Windows

Mar 11, 2021
High 7.5

CVE-2021-27063

Windows DNS Server Denial of Service Vulnerability

Windows DNS Server Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2016 Windows

Mar 11, 2021
High 7.8

CVE-2021-27062

HEVC Video Extensions Remote Code Execution Vulnerability

HEVC Video Extensions Remote Code Execution Vulnerability

Microsoft HEVC Video Extensions

Mar 11, 2021
High 7.8

CVE-2021-27061

HEVC Video Extensions Remote Code Execution Vulnerability

HEVC Video Extensions Remote Code Execution Vulnerability

Microsoft HEVC Video Extensions

Mar 11, 2021
High 7.8

CVE-2021-27060

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Microsoft Visual Studio Code

Mar 11, 2021
High 7.6

CVE-2021-27059 Exploited

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office Remote Code Execution Vulnerability

Microsoft Microsoft Office 2016 Microsoft Office 2013 Service Pack 1 Microsoft Office 2010 Service Pack 2

Mar 11, 2021
KEV Nov 3, 2021
High 7.8

CVE-2021-27058

Microsoft Office ClickToRun Remote Code Execution Vulnerability

Microsoft Office ClickToRun Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise

Mar 11, 2021
High 7.8

CVE-2021-27057

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft Excel 2016

Mar 11, 2021