Archive

13 April 2021

Vulnerabilities first published on this day (UTC), newest first.

← March 2021 2021 / April /13 May 2021 →

All Critical High Medium Low Exploited only Public exploit

47 results · Clear filters · Feed

Medium 4.5

CVE-2021-3473

An internal product security audit of Lenovo XClarity Controller (XCC) discovered that the XCC configuration backup/res…

Lenovo XClarity Controller (XCC)

Apr 13, 2021
Medium 5.5

CVE-2021-3462

A privilege escalation vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54, tha…

Lenovo Power Management Driver for Windows 10 Windows

Apr 13, 2021
Medium 4.2

CVE-2021-3463

A null pointer dereference vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54,…

Lenovo Power Management Driver for Windows 10 Windows

Apr 13, 2021
Medium 6.1

CVE-2021-28459

Azure DevOps Server Spoofing Vulnerability

Azure DevOps Server Spoofing Vulnerability

Microsoft Azure DevOps Server 2020.0.1

Apr 13, 2021
Medium 5.5

CVE-2021-28456

Microsoft Excel Information Disclosure Vulnerability

Microsoft Excel Information Disclosure Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft Excel 2016

Apr 13, 2021
Medium 5.0

CVE-2021-28450

Microsoft SharePoint Denial of Service Vulnerability

Microsoft SharePoint Denial of Service Vulnerability

Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Enterprise Server 2013 Service Pack 1

Apr 13, 2021
Medium 4.4

CVE-2021-28447

Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability

Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 13, 2021
Medium 5.7

CVE-2021-28444

Windows Hyper-V Security Feature Bypass Vulnerability

Windows Hyper-V Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 13, 2021
Medium 5.5

CVE-2021-28443

Windows Console Driver Denial of Service Vulnerability

Windows Console Driver Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 13, 2021
Medium 6.5

CVE-2021-28442

Windows TCP/IP Information Disclosure Vulnerability

Windows TCP/IP Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 13, 2021
Medium 6.5

CVE-2021-28441

Windows Hyper-V Information Disclosure Vulnerability

Windows Hyper-V Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 13, 2021
Medium 5.5

CVE-2021-28438

Windows Console Driver Denial of Service Vulnerability

Windows Console Driver Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 13, 2021
Medium 5.5

CVE-2021-28437

Windows Installer Information Disclosure Vulnerability

Windows Installer Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 13, 2021
Medium 5.5

CVE-2021-28435

Windows Event Tracing Information Disclosure Vulnerability

Windows Event Tracing Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 13, 2021
Medium 6.5

CVE-2021-28328

Windows DNS Information Disclosure Vulnerability

Windows DNS Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 13, 2021
Medium 5.5

CVE-2021-28326

Windows AppX Deployment Server Denial of Service Vulnerability

Windows AppX Deployment Server Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 13, 2021
Medium 6.5

CVE-2021-28325 EPSS 64%

Windows SMB Information Disclosure Vulnerability

Windows SMB Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 13, 2021
Medium 6.5

CVE-2021-28323

Windows DNS Information Disclosure Vulnerability

Windows DNS Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 13, 2021
Medium 5.5

CVE-2021-28318

Windows GDI+ Information Disclosure Vulnerability

Windows GDI+ Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 13, 2021
Medium 5.5

CVE-2021-28317

Microsoft Windows Codecs Library Information Disclosure Vulnerability

Microsoft Windows Codecs Library Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 13, 2021
Medium 4.2

CVE-2021-28316

Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability

Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 13, 2021
Medium 6.5

CVE-2021-28311

Windows Application Compatibility Cache Denial of Service Vulnerability

Windows Application Compatibility Cache Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 13, 2021
Medium 5.5

CVE-2021-28309

Windows Kernel Information Disclosure Vulnerability

Windows Kernel Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 13, 2021
Medium 4.4

CVE-2021-27094

Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability

Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 13, 2021
Medium 5.5

CVE-2021-27093

Windows Kernel Information Disclosure Vulnerability

Windows Kernel Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 13, 2021
Medium 6.8

CVE-2021-27092

Azure AD Web Sign-in Security Feature Bypass Vulnerability

Azure AD Web Sign-in Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 13, 2021
Medium 5.7

CVE-2021-27079

Windows Media Photo Codec Information Disclosure Vulnerability

Windows Media Photo Codec Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 13, 2021
Medium 6.5

CVE-2021-27067

Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability

Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability

Microsoft Azure DevOps Server 2019 Update 1.1 Azure DevOps Server 2019.0.1 Team Foundation Server 2018 Update 3.2

Apr 13, 2021
Medium 5.5

CVE-2021-26417

Windows Overlay Filter Information Disclosure Vulnerability

Windows Overlay Filter Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 13, 2021
Medium 6.2

CVE-2021-26413

Windows Installer Spoofing Vulnerability

Windows Installer Spoofing Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 13, 2021
Medium 4.6

CVE-2021-27609

SAP Focused RUN versions 200, 300, does not perform necessary authorization checks for an authenticated user, which all…

SAP SAP Focused RUN

Apr 13, 2021
Medium 4.3

CVE-2021-27605

SAP's HCM Travel Management Fiori Apps V2, version - 608, does not perform proper authorization check, allowing an auth…

SAP SAP Fiori Apps 2.0 for Travel Management in SAP ERP

Apr 13, 2021
Medium 5.4

CVE-2021-27601

SAP NetWeaver AS Java (Applications based on HTMLB for Java) allows a basic-level authorized attacker to store a malici…

SAP SAP NetWeaver AS for Java (Applications based on HTMLB for Java)

Apr 13, 2021
Medium 6.4

CVE-2021-27600

SAP Manufacturing Execution (System Rules), versions - 15.1, 15.2, 15.3, 15.4, allows an authorized attacker to embed m…

SAP SAP Manufacturing Execution (System Rules)

Apr 13, 2021
Medium 6.5

CVE-2021-27603

An RFC enabled function module SPI_WAIT_MILLIS in SAP NetWeaver AS ABAP, versions - 731, 740, 750, allows to keep a wor…

SAP SAP NetWeaver AS for ABAP

Apr 13, 2021
Medium 4.3

CVE-2021-21492

SAP NetWeaver Application Server Java(HTTP Service), versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not suff…

SAP SAP NetWeaver AS for JAVA (HTTP Service)

Apr 13, 2021
Medium 4.6

CVE-2021-29438

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in @nextcloud/dialogs

The Nextcloud dialogs library (npm package @nextcloud/dialogs) before 3.1.2 insufficiently escaped text input passed to a toast. If your application displays toasts with user-supplied input, this could lead to a XSS vulnerability. The vulnerability has been p…

Nextcloud nextcloud-dialogs @nextcloud/dialogs Web / CMS npm

Apr 13, 2021
Medium 6.5

CVE-2021-27598

SAP NetWeaver AS JAVA (Customer Usage Provisioning Servlet), versions - 7.31, 7.40, 7.50, allows an attacker to read so…

SAP SAP NetWeaver AS for JAVA (Customer Usage Provisioning Servlet)

Apr 13, 2021
Medium 5.4

CVE-2021-29436

Cross site request forgery vulnerability

Anuko Time Tracker is an open source, web-based time tracking application written in PHP. In Time Tracker before version 1.19.27.5431 a Cross site request forgery (CSRF) vulnerability existed. The nature of CSRF is that a logged on user may be tricked by soci…

anuko timetracker

Apr 13, 2021
Medium 4.4

CVE-2021-23372

Denial of Service (DoS)

All versions of package mongo-express are vulnerable to Denial of Service (DoS) when exporting an empty collection as CSV, due to an unhandled exception, leading to a crash.

mongo-express npm

Apr 13, 2021