Skip to content
OpenAdvisories

Archive

29 March 2021

Vulnerabilities first published on this day (UTC), newest first.

← February 2021 2021 / March /29 April 2021 →
  1. 130
  2. 239
  3. 357
  4. 467
  5. 561
  6. 61
  7. 76
  8. 826
  9. 990
  10. 10102
  11. 11121
  12. 1247
  13. 135
  14. 14 
  15. 1565
  16. 1622
  17. 1739
  18. 1896
  19. 1942
  20. 206
  21. 216
  22. 2251
  23. 2366
  24. 2486
  25. 2571
  26. 2672
  27. 272
  28. 28 
  29. 2945
  30. 3078
  31. 3156
All Critical High Medium Low Exploited only Public exploit

45 results · Feed

  • Unscored —
    CVE-2021-25149

    A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): …

  • Unscored —
    CVE-2021-25148

    A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in …

  • Unscored —
    CVE-2021-25145

    A remote unauthorized disclosure of information vulnerability was discovered in some Aruba Instant Access Point (IAP) p…

  • Unscored —
    CVE-2021-29424

    The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at the beginning o…

    libnetwork-ipv4addr-perl perl-net-netmask libnet-netmask-perl libnet-netmask-perl Debian Ubuntu Alpine
  • Medium 6.5
    CVE-2021-27244

    This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desk…

    Parallels Desktop
  • High 8.1
    CVE-2021-27245

    This vulnerability allows a firewall bypass on affected installations of TP-Link Archer A7 prior to Archer C7(US)_V5_21…

    TP-Link Archer A7 Network devices
  • High 8.8
    CVE-2021-27243

    This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.0.1-…

    Parallels Desktop
  • Medium 6.1
    CVE-2021-27241

    This vulnerability allows local attackers to delete arbitrary directories on affected installations of Avast Premium Se…

    Avast Premium Security
  • High 8.8
    CVE-2021-27242

    This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.0.1-…

    Parallels Desktop
  • High 7.8
    CVE-2021-27240

    This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Patch Manager …

    SolarWinds Patch Manager
  • High 8.8
    CVE-2021-27239

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R64…

    NETGEAR Multiple Routers Network devices
  • High 7.1
    CVE-2021-27276 EPSS 73%

    This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Netwo…

    NETGEAR ProSAFE Network Management System Network devices
  • High 8.3
    CVE-2021-27275 EPSS 74%

    This vulnerability allows remote attackers to disclose sensitive information and delete arbitrary files on affected ins…

    NETGEAR ProSAFE Network Management System Network devices
  • High 8.8
    CVE-2021-27273 EPSS 66%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Netwo…

    NETGEAR ProSAFE Network Management System Network devices
  • Critical 9.8
    CVE-2021-27274

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Netwo…

    NETGEAR ProSAFE Network Management System Network devices
  • High 7.1
    CVE-2021-27272 EPSS 75%

    This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Netwo…

    NETGEAR ProSAFE Network Management System Network devices
  • Unscored —
    CVE-2021-28671

    Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51 and 65.59.11 (Bridge), VersaLi…

  • Unscored —
    CVE-2021-28672

    Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51 and 65.59.11 (Bridge), VersaLi…

  • Unscored —
    CVE-2020-25583

    In FreeBSD 12.2-STABLE before r368250, 11.4-STABLE before r368253, 12.2-RELEASE before p1, 12.1-RELEASE before p11 and …

  • Unscored —
    CVE-2020-25577

    In FreeBSD 12.2-STABLE before r368250, 11.4-STABLE before r368253, 12.2-RELEASE before p1, 12.1-RELEASE before p11 and …

  • Unscored —
    CVE-2021-3391

    MobileIron Mobile@Work through 2021-03-22 allows attackers to distinguish among valid, disabled, and nonexistent user a…

  • Unscored —
    CVE-2020-35138

    The MobileIron agents through 2021-03-22 for Android and iOS contain a hardcoded encryption key, used to encrypt the su…

  • Unscored —
    CVE-2021-28668

    Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.231…

  • Unscored —
    CVE-2021-28669

    Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.231…

  • Unscored —
    CVE-2021-26714 Public exploit

    The Enterprise License Manager portal in Mitel MiContact Center Enterprise before 9.4 could allow a user to access rest…

  • Unscored —
    CVE-2020-24636

    A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products…

  • Unscored —
    CVE-2021-25144

    A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): …

  • Unscored —
    CVE-2020-24635

    A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products…

  • Unscored —
    CVE-2021-25143

    A remote denial of service (dos) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in vers…

  • Unscored —
    CVE-2021-28673

    Xerox Phaser 6510 before 64.61.23 and 64.59.11 (Bridge), WorkCentre 6515 before 65.61.23 and 65.59.11 (Bridge), VersaLi…

  • Critical 9.8
    CVE-2021-29417

    gitjacker arbitrary code execution

    gitjacker before 0.1.0 allows remote attackers to execute arbitrary code via a crafted .git directory because of directory traversal.

    github.com/liamg/gitjacker Go
  • Unscored —
    CVE-2021-29416

    An issue was discovered in PortSwigger Burp Suite before 2021.2. During viewing of a malicious request, it can be manip…

  • Unscored —
    CVE-2021-28670

    Xerox AltaLink B8045/B8090 before 103.008.030.32000, C8030/C8035 before 103.001.030.32000, C8045/C8055 before 103.002.0…

  • Unscored —
    CVE-2020-25217

    Grandstream GRP261x VoIP phone running firmware version 1.0.3.6 (Base) allows Command Injection as root in its administ…

  • Unscored —
    CVE-2020-25218

    Grandstream GRP261x VoIP phone running firmware version 1.0.3.6 (Base) allow Authentication Bypass in its administrativ…

  • Unscored —
    CVE-2019-5317

    A local authentication bypass vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version…

  • High 7.8
    CVE-2020-7850

    Douzone ActiveX File Download and Execution Vulnerability

    NBBDownloader.ocx ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the activex method. A remote attacker could induce a user to access a crafted web page, causing dam…

    DOUZONE ICT GROUP. NBBDownloader.ocx
  • Unscored —
    CVE-2021-21727

    A ZTE product has a DoS vulnerability. A remote attacker can amplify traffic by sending carefully constructed IPv6 pack…

  • Unscored —
    CVE-2021-27352

    An open redirect vulnerability in Ilch CMS version 2.1.42 allows attackers to redirect users to an attacker's site afte…

  • Unscored —
    CVE-2021-29267 Public exploit

    Sherlock SherlockIM through 2021-03-29 allows Cross Site Scripting (XSS) by leveraging the api/Files/Attachment URI to …