Archive

13 April 2021

Vulnerabilities first published on this day (UTC), newest first.

← March 2021 2021 / April /13 May 2021 →

All Critical High Medium Low Exploited only Public exploit

207 results · Feed

Unscored —

CVE-2021-24028

An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code …

Facebook Facebook Thrift

Apr 13, 2021
Unscored —

CVE-2021-29370

A UXSS was discovered in the Thanos-Soft Cheetah Browser in Android 1.2.0 due to the inadequate filter of the intent sc…

Apr 13, 2021
Critical 9.4

CVE-2019-10881

Default hidden Privileged Account Vulnerability in multiple XEROX devices

Xerox AltaLink B8045/B8055/B8065/B8075/B8090, AltaLink C8030/C8035/C8045/C8055/C8070 with software releases before 103.xxx.030.32000 includes two accounts with weak hard-coded passwords which can be exploited and allow unauthorized access which cannot be disa…

Xerox Phaser 6700 WorkCentre 7220/7225 WorkCentre 5735/5740/5745/5755/5765/5775/5790

Apr 13, 2021
Medium 4.5

CVE-2021-3473

An internal product security audit of Lenovo XClarity Controller (XCC) discovered that the XCC configuration backup/res…

Lenovo XClarity Controller (XCC)

Apr 13, 2021
Medium 5.5

CVE-2021-3462

A privilege escalation vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54, tha…

Lenovo Power Management Driver for Windows 10 Windows

Apr 13, 2021
Medium 4.2

CVE-2021-3463

A null pointer dereference vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54,…

Lenovo Power Management Driver for Windows 10 Windows

Apr 13, 2021
High 8.1

CVE-2021-3460

The Motorola MH702x devices, prior to version 2.0.0.301, do not properly verify the server certificate during communica…

Motorola MH702x

Apr 13, 2021
High 8.4

CVE-2021-29440 Public exploit EPSS 30%

Twig allowing dangerous PHP functions by default

Grav is a file based Web-platform. Twig processing of static pages can be enabled in the front matter by any administrative user allowed to create or edit pages. As the Twig processor runs unsandboxed, this behavior can be used to gain arbitrary code executio…

getgrav grav getgrav/grav Packagist

Apr 13, 2021
High 7.2

CVE-2021-29439

Plugins can be installed with minimal admin privileges

The Grav admin plugin prior to version 1.10.11 does not correctly verify caller's privileges. As a consequence, users with the permission `admin.login` can install third-party plugins and their dependencies. By installing the right plugin, an attacker can obt…

getgrav grav-plugin-admin

Apr 13, 2021
Critical 9.0

CVE-2021-28483

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 8 Microsoft Exchange Server 2016 Cumulative Update 19

Apr 13, 2021
High 8.8

CVE-2021-28482 Public exploit EPSS 83%

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 19 Microsoft Exchange Server 2019 Cumulative Update 8

Apr 13, 2021
Critical 9.8

CVE-2021-28481 Scanner template EPSS 36%

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 19 Microsoft Exchange Server 2019 Cumulative Update 8

Apr 13, 2021
Critical 9.8

CVE-2021-28480 Public exploit Scanner template EPSS 71%

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 19 Microsoft Exchange Server 2019 Cumulative Update 8

Apr 13, 2021
High 7.8

CVE-2021-28475

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Microsoft Visual Studio Code

Apr 13, 2021
High 7.0

CVE-2021-28477

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Microsoft Visual Studio Code

Apr 13, 2021
High 7.8

CVE-2021-28473

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Microsoft Visual Studio Code

Apr 13, 2021
High 7.8

CVE-2021-28472 EPSS 62%

Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability

Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability

Microsoft Visual Studio Code - Maven for Java Extension

Apr 13, 2021
High 7.8

CVE-2021-28471

Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability

Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability

Microsoft Visual Studio Code

Apr 13, 2021
High 7.8

CVE-2021-28470

Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution Vulnerability

Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution Vulnerability

Microsoft Visual Studio Code - GitHub Pull Requests and Issues Extension

Apr 13, 2021
High 7.8

CVE-2021-28469

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Microsoft Visual Studio Code

Apr 13, 2021
High 7.8

CVE-2021-28468

Raw Image Extension Remote Code Execution Vulnerability

Raw Image Extension Remote Code Execution Vulnerability

Microsoft Raw Image Extension

Apr 13, 2021
High 7.8

CVE-2021-28466

Raw Image Extension Remote Code Execution Vulnerability

Raw Image Extension Remote Code Execution Vulnerability

Microsoft Raw Image Extension

Apr 13, 2021
High 8.1

CVE-2021-28460

Azure Sphere Unsigned Code Execution Vulnerability

Azure Sphere Unsigned Code Execution Vulnerability

Microsoft Azure Sphere

Apr 13, 2021
High 7.8

CVE-2021-28464

VP9 Video Extensions Remote Code Execution Vulnerability

VP9 Video Extensions Remote Code Execution Vulnerability

Microsoft VP9 Video Extensions

Apr 13, 2021
Medium 6.1

CVE-2021-28459

Azure DevOps Server Spoofing Vulnerability

Azure DevOps Server Spoofing Vulnerability

Microsoft Azure DevOps Server 2020.0.1

Apr 13, 2021
High 7.8

CVE-2021-28457

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Microsoft Visual Studio Code

Apr 13, 2021
High 7.8

CVE-2021-28458

Azure ms-rest-nodeauth Library Elevation of Privilege Vulnerability

Azure ms-rest-nodeauth Library Elevation of Privilege Vulnerability

Microsoft @azure/ms-rest-nodeauth @azure/ms-rest-nodeauth npm

Apr 13, 2021
Medium 5.5

CVE-2021-28456

Microsoft Excel Information Disclosure Vulnerability

Microsoft Excel Information Disclosure Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft Excel 2016

Apr 13, 2021
High 7.8

CVE-2021-28454

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft Excel 2016

Apr 13, 2021
High 7.8

CVE-2021-28453

Microsoft Word Remote Code Execution Vulnerability

Microsoft Word Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft SharePoint Server 2019

Apr 13, 2021
High 7.1

CVE-2021-28452

Microsoft Outlook Memory Corruption Vulnerability

Microsoft Outlook Memory Corruption Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft Outlook 2016

Apr 13, 2021
Medium 5.0

CVE-2021-28450

Microsoft SharePoint Denial of Service Vulnerability

Microsoft SharePoint Denial of Service Vulnerability

Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Enterprise Server 2013 Service Pack 1

Apr 13, 2021
High 7.8

CVE-2021-28451

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft Excel 2016

Apr 13, 2021
High 7.8

CVE-2021-28449

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft Excel 2016

Apr 13, 2021
High 7.8

CVE-2021-28448

Visual Studio Code Kubernetes Tools Remote Code Execution Vulnerability

Visual Studio Code Kubernetes Tools Remote Code Execution Vulnerability

Microsoft Visual Studio Code - Kubernetes Tools

Apr 13, 2021
Medium 4.4

CVE-2021-28447

Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability

Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 13, 2021
High 7.1

CVE-2021-28446

Windows Portmapping Information Disclosure Vulnerability

Windows Portmapping Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 13, 2021
Medium 5.7

CVE-2021-28444

Windows Hyper-V Security Feature Bypass Vulnerability

Windows Hyper-V Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 13, 2021
High 8.1

CVE-2021-28445

Windows Network File System Remote Code Execution Vulnerability

Windows Network File System Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 13, 2021
Medium 5.5

CVE-2021-28443

Windows Console Driver Denial of Service Vulnerability

Windows Console Driver Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 13, 2021