Skip to content
OpenAdvisories

Archive

March 2021

Vulnerabilities first published in this month (UTC), newest first.

1,455 results · Feed

  • Unscored —

    A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): …

  • Unscored —
    CVE-2021-25161 Public exploit Scanner template EPSS 16%

    A remote cross-site scripting (xss) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in v…

  • Unscored —
    CVE-2021-25162 Public exploit EPSS 26%

    A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products…

  • Unscored —
    CVE-2021-25160 Public exploit

    A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in …

  • Unscored —
    CVE-2021-25159 Public exploit EPSS 13%

    A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in …

  • Unscored —
    CVE-2021-25157 Public exploit EPSS 10%

    A remote arbitrary file read vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(…

  • Unscored —
    CVE-2021-25158 Public exploit EPSS 30%

    A remote arbitrary file read vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(…

  • Unscored —
    CVE-2021-25156 Public exploit EPSS 40%

    A remote arbitrary directory create vulnerability was discovered in some Aruba Instant Access Point (IAP) products in v…

  • Unscored —
    CVE-2021-25155 Public exploit EPSS 12%

    A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in …

  • Unscored —

    A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products…

  • Unscored —

    A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products…

  • Unscored —

    A flaw was found in OpenEXR's B44 uncompression functionality in versions before 3.0.0-beta. An attacker who is able to…

  • Unscored —

    There's a flaw in OpenEXR in versions before 3.0.0-beta. A crafted input file that is processed by OpenEXR could cause …

  • Unscored —

    There is a flaw in OpenEXR in versions before 3.0.0-beta. An attacker who can submit a crafted file to be processed by …

  • Unscored —

    A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): …

  • Unscored —

    A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in …

  • Unscored —

    A remote unauthorized disclosure of information vulnerability was discovered in some Aruba Instant Access Point (IAP) p…

  • Unscored —

    The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at the beginning o…

  • Medium 6.5

    This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desk…

  • High 8.1

    This vulnerability allows a firewall bypass on affected installations of TP-Link Archer A7 prior to Archer C7(US)_V5_21…

  • High 8.8

    This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.0.1-…

  • Medium 6.1

    This vulnerability allows local attackers to delete arbitrary directories on affected installations of Avast Premium Se…

  • High 8.8

    This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.0.1-…

  • High 7.8

    This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Patch Manager …

  • High 8.8

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R64…

  • High 7.1
    CVE-2021-27276 EPSS 73%

    This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Netwo…

  • High 8.3
    CVE-2021-27275 EPSS 74%

    This vulnerability allows remote attackers to disclose sensitive information and delete arbitrary files on affected ins…

  • High 8.8
    CVE-2021-27273 EPSS 66%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Netwo…

  • Critical 9.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Netwo…

  • High 7.1
    CVE-2021-27272 EPSS 75%

    This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Netwo…

  • Unscored —

    Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51 and 65.59.11 (Bridge), VersaLi…

  • Unscored —

    Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51 and 65.59.11 (Bridge), VersaLi…

  • Unscored —

    In FreeBSD 12.2-STABLE before r368250, 11.4-STABLE before r368253, 12.2-RELEASE before p1, 12.1-RELEASE before p11 and …

  • Unscored —

    In FreeBSD 12.2-STABLE before r368250, 11.4-STABLE before r368253, 12.2-RELEASE before p1, 12.1-RELEASE before p11 and …

  • Unscored —

    MobileIron Mobile@Work through 2021-03-22 allows attackers to distinguish among valid, disabled, and nonexistent user a…

  • Unscored —

    The MobileIron agents through 2021-03-22 for Android and iOS contain a hardcoded encryption key, used to encrypt the su…

  • Unscored —

    Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.231…

  • Unscored —

    Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.231…

  • Unscored —
    CVE-2021-26714 Public exploit

    The Enterprise License Manager portal in Mitel MiContact Center Enterprise before 9.4 could allow a user to access rest…

  • Unscored —

    A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products…