Archive

30 March 2021

Vulnerabilities first published on this day (UTC), newest first.

← February 2021 2021 / March /30 April 2021 →

All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

High 8.0

CVE-2021-21413 Public exploit

Misuse of `Reference` and other transferable APIs may lead to access to nodejs isolate

isolated-vm is a library for nodejs which gives you access to v8's Isolate interface. Versions of isolated-vm before v4.0.0 have API pitfalls which may make it easy for implementers to expose supposed secure isolates to the permissions of the main nodejs isol…

laverdet isolated-vm isolated-vm npm

Mar 30, 2021
High 7.1

CVE-2021-20502

IBM Jazz Foundation Products are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. …

IBM Rational Engineering Lifecycle Manager Rational Team Concert Engineering Lifecycle Optimization

Mar 30, 2021
High 7.1

CVE-2021-20482

IBM Cloud Pak for Automation 20.0.2 and 20.0.3 IF002 are vulnerable to an XML External Entity Injection (XXE) attack wh…

IBM Cloud Pak for Automation

Mar 30, 2021
High 7.8

CVE-2021-27271

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1…

Foxit PhantomPDF

Mar 30, 2021
High 7.8

CVE-2021-27270

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1…

Foxit PhantomPDF

Mar 30, 2021
High 7.8

CVE-2021-27269

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1…

Foxit PhantomPDF

Mar 30, 2021
High 7.8

CVE-2021-27268

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1…

Foxit PhantomPDF

Mar 30, 2021
High 7.8

CVE-2021-27267

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1…

Foxit PhantomPDF

Mar 30, 2021
High 7.8

CVE-2021-27261

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1…

Foxit PhantomPDF

Mar 30, 2021
High 8.8

CVE-2021-21638

CSRF vulnerability in Jenkins Team Foundation Server Plugin allow capturing credentials

A cross-site request forgery (CSRF) vulnerability in Jenkins Team Foundation Server Plugin 5.157.1 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credent…

Jenkins Project Jenkins Team Foundation Server Plugin org.jenkins-ci.plugins:tfs Web / CMS Maven

Mar 30, 2021
High 8.8

CVE-2021-21633

CSRF vulnerability and in Jenkins OWASP Dependency-Track Plugin allow capturing credentials

A cross-site request forgery (CSRF) vulnerability in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows attackers to connect to an attacker-specified URL, capturing credentials stored in Jenkins.

Jenkins Project Jenkins OWASP Dependency-Track Plugin org.jenkins-ci.plugins:dependency-track Web / CMS Maven

Mar 30, 2021
High 8.8

CVE-2021-21629

CSRF vulnerability in Jenkins Build With Parameters Plugin

A cross-site request forgery (CSRF) vulnerability in Jenkins Build With Parameters Plugin 1.5 and earlier allows attackers to build a project with attacker-specified parameters.

Jenkins Project Jenkins Build With Parameters Plugin org.jenkins-ci.plugins:build-with-parameters Web / CMS Maven

Mar 30, 2021
High 8.8

CVE-2021-26919 EPSS 35%

Apache Druid Authenticated users can execute arbitrary code from malicious MySQL database systems.

Apache Druid allows users to read data from other database systems using JDBC. This functionality is to allow trusted users with the proper permissions to set up lookups or submit ingestion tasks. The MySQL JDBC driver supports certain properties, which, if l…

Apache Software Foundation Apache Druid org.apache.druid:druid Maven

Mar 30, 2021