March 2021

97 results · Clear filters · Feed

• Unscored —
  CVE-2021-23132 Public exploit

  [20210306] - Core - com_media allowed paths that are not intended for image uploads

  An issue was discovered in Joomla! 3.0.0 through 3.9.24. com_media allowed paths that are not intended for image uploads

  Joomla! Project Joomla! CMS Web / CMS
  Mar 4, 2021
• Critical 9.8
  CVE-2020-24913 Public exploit EPSS 41%

  qcubed SQL injection vulnerability in profile.php via the strQuery parameter

  A SQL injection vulnerability in qcubed (all versions including 3.1.1) in profile.php via the strQuery parameter allows an unauthenticated attacker to access the database by injecting SQL code via a crafted POST request.

  qcubed/qcubed Packagist
  Mar 4, 2021
• Critical 9.8
  CVE-2021-22681 Exploited Public exploit EPSS 64%

  Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key…

  Mar 3, 2021

  KEV Mar 5, 2026
• Unscored —
  CVE-2021-21978 Public exploit EPSS 99%

  VMware View Planner 4.x prior to 4.6 Security Patch 1 contains a remote code execution vulnerability. Improper input va…

  Mar 3, 2021
• Unscored —
  CVE-2021-20233 Public exploit

  A flaw was found in grub2 in versions prior to 2.06. Setparam_prefix() in the menu rendering code performs a length cal…

  grub2 grub2-signed grub2-unsigned grub Debian Ubuntu Alpine
  Mar 3, 2021
• Unscored —
  CVE-2020-25632 Public exploit

  A flaw was found in grub2 in versions prior to 2.06. The rmmod implementation allows the unloading of a module used as …

  grub2 grub2-signed grub2-unsigned grub Debian Ubuntu Alpine
  Mar 3, 2021
• Unscored —
  CVE-2020-14372 Public exploit

  A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of the ACPI command when Se…

  grub2 grub2-signed grub2-unsigned grub Debian Ubuntu Alpine
  Mar 3, 2021
• Medium 6.8
  CVE-2021-21353 Public exploit

  Remote code execution in pug

  Pug is an npm package which is a high-performance template engine. In pug before version 3.0.1, if a remote attacker was able to control the `pretty` option of the pug compiler, e.g. if you spread a user provided object such as the query parameters of a reque…

  pugjs pug pug-code-gen pug npm
  Mar 3, 2021
• High 7.8
  CVE-2021-27065 Exploited · Ransomware Public exploit EPSS 100%

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 19 Microsoft Exchange Server 2019 Cumulative Update 8
  Mar 2, 2021

  KEV Nov 3, 2021
• Critical 9.1
  CVE-2021-26855 Exploited · Ransomware Public exploit EPSS 100%

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 19 Microsoft Exchange Server 2019 Cumulative Update 8
  Mar 2, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-26857 Exploited · Ransomware Public exploit EPSS 96%

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 19 Microsoft Exchange Server 2019 Cumulative Update 8
  Mar 2, 2021

  KEV Nov 3, 2021
• Unscored —
  CVE-2021-27885 Public exploit

  usersettings.php in e107 through 2.3.0 lacks a certain e_TOKEN protection mechanism.

  Mar 2, 2021
• Unscored —
  CVE-2020-23518 Public exploit

  Cross Site Scripting (XSS) vulnerability in UltimateKode Neo Billing - Accounting, Invoicing And CRM Software up to ver…

  Mar 2, 2021
• Medium 4.9
  CVE-2021-21514 Public exploit

  Dell EMC OpenManage Server Administrator (OMSA) versions 9.5 and prior contain a path traversal vulnerability. A remote…

  Dell Dell Open Manage Server Administrator
  Mar 2, 2021
• High 8.2
  CVE-2021-27877 Exploited · Ransomware Public exploit EPSS 65%

  An issue was discovered in Veritas Backup Exec before 21.2. It supports multiple authentication schemes: SHA authentica…

  Mar 1, 2021

  KEV Apr 7, 2023
• High 8.8
  CVE-2021-27878 Exploited · Ransomware Public exploit EPSS 24%

  An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires su…

  Mar 1, 2021

  KEV Apr 7, 2023
• High 8.1
  CVE-2021-27876 Exploited · Ransomware Public exploit EPSS 14%

  An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires su…

  Mar 1, 2021

  KEV Apr 7, 2023