Archive

12 March 2021

Vulnerabilities first published on this day (UTC), newest first.

← February 2021 2021 / March /12 April 2021 →

All Critical High Medium Low Exploited only Public exploit

47 results · Feed

Critical 9.8

CVE-2021-27647

Out-of-bounds Read vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM) before 6.2.3-25426-3…

Synology Synology DiskStation Manager (DSM)

Mar 12, 2021
Unscored —

CVE-2021-20674

Untrusted search path vulnerability in Installer of MagicConnect Client program distributed before 2021 March 1 allows …

NTT TechnoCross Installer of MagicConnect Client program

Mar 12, 2021
High —

CVE-2020-36282

Unsafe Deserialization that can Result in Code Execution

JMS Client for RabbitMQ 1.x before 1.15.2 and 2.x before 2.2.0 is vulnerable to unsafe deserialization that can result in code execution via crafted StreamMessage data.

com.rabbitmq.jms:rabbitmq-jms Maven

Mar 12, 2021
Unscored —

CVE-2020-36281

Leptonica before 1.80.0 allows a heap-based buffer over-read in pixFewColorsOctcubeQuantMixed in colorquant1.c.

leptonlib leptonlib Debian Ubuntu

Mar 12, 2021
Unscored —

CVE-2020-36280

Leptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to tiffio.c.

leptonlib leptonlib Debian Ubuntu

Mar 12, 2021
Unscored —

CVE-2020-36279

Leptonica before 1.80.0 allows a heap-based buffer over-read in rasteropGeneralLow, related to adaptmap_reg.c and adapt…

leptonlib leptonlib Debian Ubuntu

Mar 12, 2021
Medium 4.3

CVE-2021-21366

Misinterpretation of malicious XML input

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. xmldom versions 0.4.0 and older do not correctly preserve system identifiers, FPIs or namespaces when repeatedly parsing and serializing maliciously craf…

xmldom xmldom node-xmldom node-xmldom Debian Ubuntu npm

Mar 12, 2021