Skip to content
OpenAdvisories

Archive

25 March 2021

Vulnerabilities first published on this day (UTC), newest first.

← February 2021 2021 / March /25 April 2021 →
  1. 130
  2. 239
  3. 357
  4. 467
  5. 561
  6. 61
  7. 76
  8. 826
  9. 990
  10. 10102
  11. 11121
  12. 1247
  13. 135
  14. 14 
  15. 1565
  16. 1622
  17. 1739
  18. 1896
  19. 1942
  20. 206
  21. 216
  22. 2251
  23. 2366
  24. 2486
  25. 2571
  26. 2672
  27. 272
  28. 28 
  29. 2945
  30. 3078
  31. 3156
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 6.4
    CVE-2021-29095

    ArcGIS Server image service and raster analytics security update: uninitialized pointer

    Multiple uninitialized pointer vulnerabilities when parsing a specially crafted file in Esri ArcGIS Server 10.8.1 (and earlier) allows an authenticated attacker with specialized permissions to achieve arbitrary code execution in the context of the service acc…

    Esri ArcGIS Server
  • Medium 6.4
    CVE-2021-29094

    ArcGIS Server image service and raster analytics security update: buffer overflow

    Multiple buffer overflow vulnerabilities when parsing a specially crafted file in Esri ArcGIS Server 10.8.1 (and earlier) allows an authenticated attacker with specialized permissions to achieve arbitrary code execution in the context of the service account.

    Esri ArcGIS Server
  • Medium 6.4
    CVE-2021-29093

    ArcGIS Server image service and raster analytics security update: use-after-free

    A use-after-free vulnerability when parsing a specially crafted file in Esri ArcGIS Server 10.8.1 (and earlier) allows an authenticated attacker with specialized permissions to achieve arbitrary code execution in the context of the service account.

    Esri ArcGIS Server
  • Medium 5.5
    CVE-2021-25355

    Using unsafe PendingIntent in Samsung Notes prior to version 4.2.00.22 allows local attackers unauthorized action witho…

    Samsung Mobile Samsung Notes
  • Medium 5.5
    CVE-2021-25353

    Using empty PendingIntent in Galaxy Themes prior to version 5.2.00.1215 allows local attackers to read/write private fi…

    Samsung Mobile Galaxy Themes
  • Medium 5.5
    CVE-2021-25352

    Using PendingIntent with implicit intent in Bixby Voice prior to version 3.0.52.14 allows attackers to execute privileg…

    Samsung Mobile Bixby Voice
  • Medium 5.5
    CVE-2021-25349

    Using unsafe PendingIntent in Slow Motion Editor prior to version 3.5.18.5 allows local attackers unauthorized action w…

    Samsung Mobile Slow Motion Editor
  • Medium 6.6
    CVE-2021-1492

    Duo Authentication Proxy Installer Denial of Service Vulnerability

    The Duo Authentication Proxy installer prior to 5.2.1 did not properly validate file installation paths. This allows an attacker with local user privileges to coerce the installer to write to arbitrary privileged directories. If successful, an attacker can ma…

    Cisco Duo Authentication Proxy Network devices
  • Medium 5.9
    CVE-2021-3449 Public exploit EPSS 64%

    NULL pointer deref in signature_algorithms processing

    An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a si…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine crates.io