Skip to content
OpenAdvisories

Archive

15 April 2021

Vulnerabilities first published on this day (UTC), newest first.

← March 2021 2021 / April /15 May 2021 →
  1. 165
  2. 2178
  3. 31
  4. 4 
  5. 565
  6. 694
  7. 758
  8. 865
  9. 955
  10. 102
  11. 119
  12. 1261
  13. 13207
  14. 1480
  15. 1549
  16. 1619
  17. 174
  18. 188
  19. 1952
  20. 2030
  21. 2140
  22. 22297
  23. 2347
  24. 244
  25. 256
  26. 2668
  27. 2750
  28. 2859
  29. 29118
  30. 3050
All Critical High Medium Low Exploited only Public exploit

49 results · Feed

  • Unscored —
    CVE-2021-27129

    CASAP Automated Enrollment System version 1.0 contains a cross-site scripting (XSS) vulnerability through the Students …

  • Medium 4.9
    CVE-2020-7270

    Sensitive Information Exposure in McAfee ATD

    Exposure of Sensitive Information in the web interface in McAfee Advanced Threat Defense (ATD) prior to 4.12.2 allows remote authenticated users to view sensitive unencrypted information via a carefully crafted HTTP request parameter. The risk is partially mi…

    McAfee McAfee Advanced Threat Defense (ATD)
  • Medium 4.9
    CVE-2020-7269

    Sensitive Information Exposure in McAfee ATD

    Exposure of Sensitive Information in the web interface in McAfee Advanced Threat Defense (ATD) prior to 4.12.2 allows remote authenticated users to view sensitive unencrypted information via a carefully crafted HTTP request parameter. The risk is partially mi…

    McAfee McAfee Advanced Threat Defense (ATD)
  • High 7.8
    CVE-2021-23887

    Privilege escalation in McAfee DLP Endpoint for Windows

    Privilege Escalation vulnerability in McAfee Data Loss Prevention (DLP) Endpoint for Windows prior to 11.6.100 allows a local, low privileged, attacker to write to arbitrary controlled kernel addresses. This is achieved by launching applications, suspending t…

    McAfee McAfee Data Loss Prevention (DLP) Endpoint for Windows Windows
  • Medium 5.5
    CVE-2021-23886

    Local Denial of Service in McAfee DLP Endpoint for Windows

    Denial of Service vulnerability in McAfee Data Loss Prevention (DLP) Endpoint for Windows prior to 11.6.100 allows a local, low privileged, attacker to cause a BSoD through suspending a process, modifying the processes memory and restarting it. This is trigge…

    McAfee McAfee Data Loss Prevention (DLP) Endpoint for Windows Windows
  • Medium 4.8
    CVE-2020-7308

    Transmission of data in clear text by McAfee ENS

    Cleartext Transmission of Sensitive Information between McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update and McAfee Global Threat Intelligence (GTI) servers using DNS allows a remote attacker to view the requests from ENS and re…

    McAfee McAfee Endpoint Security (ENS) for WIndows Windows
  • Critical —
    CVE-2021-27850 Public exploit Scanner template EPSS 94%

    Bypass of the fix for CVE-2019-0195

    A critical unauthenticated remote code execution vulnerability was found all recent versions of Apache Tapestry. The affected versions include 5.4.5, 5.5.0, 5.6.2 and 5.7.0. The vulnerability I have found is a bypass of the fix for CVE-2019-0195. Recap: Befor…

    Apache Software Foundation Apache Tapestry org.apache.tapestry:tapestry-core Maven
  • Medium 4.3
    CVE-2021-23884

    Clear text exposure of password in McAfee CSR ePO extension

    Cleartext Transmission of Sensitive Information vulnerability in the ePO Extension of McAfee Content Security Reporter (CSR) prior to 2.8.0 allows an ePO administrator to view the unencrypted password of the McAfee Web Gateway (MWG) or the password of the McA…

    McAfee McAfee Content Security Reporter (CSR)
  • Unscored —
    CVE-2021-20288

    An authentication flaw was found in ceph in versions before 14.2.20. When the monitor handles CEPHX_GET_AUTH_SESSION_KE…

    ceph ceph ceph16 ceph Debian Ubuntu Alpine