Archive
2 April 2021
Vulnerabilities first published on this day (UTC), newest first.
178 results · Feed
-
Medium 4.3
Wyse Management Suite versions up to 3.2 contains a vulnerability wherein a malicious authenticated user can cause a de…
-
Medium 5.0
Dell Wyse ThinOS 8.6 MR9 contains remediation for an improper management server validation vulnerability that could be …
-
Low 3.8
Dell System Update (DSU) 1.9 and earlier versions contain a denial of service vulnerability. A local authenticated mali…
-
Medium 6.1
Docsify vulnerable to cross-site scripting due to mishandled encoding
docsify 4.12.1 is affected by Cross Site Scripting (XSS) because the search component does not appropriately encode Code Blocks and mishandles the " character.
-
Unscored —CVE-2020-27600 EPSS 14%
HNAP1/control/SetMasterWLanSettings.php in D-Link D-Link Router DIR-846 DIR-846 A1_100.26 allows remote attackers to ex…
-
Unscored —
Directory traversal in coreframe/app/template/admin/index.php in WUZHI CMS 4.1.0 allows attackers to list files in arbi…
-
Unscored —
Buffer overflow in Core FTP LE v2.2 allows local attackers to cause a denial or service (crash) via a long string in th…
-
Unscored —
Vulnerability in emlog v6.0.0 allows user to upload webshells via zip plugin module.
-
Unscored —
An issue was discovered in prog.cgi on D-Link DIR-878 1.30B08 devices. Because strcat is misused, there is a stack-base…
-
Unscored —
Lightmeter ControlCenter 1.1.0 through 1.5.x before 1.5.1 allows anyone who knows the URL of a publicly available Light…
-
Unscored —
Jamf Pro before 10.28.0 allows XSS related to inventory history, aka PI-009376.
-
Unscored —
Because of no validation on a curl command in MagpieRSS 0.72 in the /extlib/Snoopy.class.inc file, when you send a requ…
-
Unscored —
Because of a incorrect escaped exec command in MagpieRSS in 0.72 in the /extlib/Snoopy.class.inc file, it is possible t…
-
Unscored —
Softing AG OPC Toolbox through 4.10.1.13035 allows /en/diag_values.html Stored XSS via the ITEMLISTVALUES##ITEMID param…
-
Unscored —
A Cross-Site Request Forgery (CSRF) vulnerability in en/cfg_setpwd.html in Softing AG OPC Toolbox through 4.10.1.13035 …
-
Unscored —
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security …
-
Unscored —
SQL injection exists in Piwigo before 11.4.0 via the language parameter to admin.php?page=languages.
-
Unscored —
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Cata…
-
Unscored —
Directory traversal in RStudio Shiny Server before 1.5.16 allows attackers to read the application source code, involvi…
-
Unscored —
An issue was discovered in WiZ Colors A60 1.14.0. Wi-Fi credentials are stored in cleartext in flash memory, which pres…
-
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update …
-
Unscored —
An issue was discovered in WiZ Colors A60 1.14.0. API credentials are locally logged.
-
Medium 6.1CVE-2021-1879 Exploited
This issue was addressed by improved management of object lifetimes. This issue is fixed in iOS 12.5.2, iOS 14.4.2 and …
KEV Nov 3, 2021 -
Unscored —
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 14.4.1 and iPadOS 14.4.1, …
-
Critical 9.8CVE-2021-1871 Exploited
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021…
KEV Nov 3, 2021 -
Critical 9.8CVE-2021-1870 Exploited
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021…
KEV Nov 3, 2021 -
Unscored —
An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2.1, macOS…
-
Unscored —
This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS Big Sur 11.2, Security …
-
Unscored —
A race condition was addressed with additional validation. This issue is fixed in macOS Big Sur 11.2.1, macOS Catalina …
-
Unscored —
The issue was addressed with improved permissions logic. This issue is fixed in macOS Big Sur 11.0.1. A local applicati…
-
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update …
-
Unscored —
A port redirection issue was addressed with additional port validation. This issue is fixed in macOS Big Sur 11.2, Secu…
-
Unscored —
A path handling issue was addressed with improved validation. This issue is fixed in Xcode 12.4. A malicious applicatio…
-
Unscored —
The issue was addressed with improved permissions logic. This issue is fixed in macOS Big Sur 11.2, Security Update 202…
-
Unscored —
An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.4 and iPadOS 14.4. A…
-
Unscored —
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Cata…
-
Unscored —
An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.4 and iPadOS 14.4. A…
-
Unscored —
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.4 and iPadOS 14.4. A …
-
Unscored —
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security…
-
Unscored —
An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input…