20 April 2021

9 results · Clear filters · Feed

• Medium 6.5
  CVE-2021-28829

  TIBCO Administrator CSV injection vulnerability

  The Administration GUI component of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric, TIBCO Administrator - Enterprise Editi…

  TIBCO Software TIBCO Administrator - Enterprise Edition TIBCO Administrator - Enterprise Edition for z/Linux TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric Linux
  Apr 20, 2021
• Medium 6.0
  CVE-2021-21526

  Dell PowerScale OneFS 8.1.0 - 9.1.0 contains a privilege escalation in SmartLock compliance mode that may allow compadm…

  Dell PowerScale OneFS
  Apr 20, 2021
• Medium 6.1
  CVE-2021-1079

  NVIDIA GeForce Experience, all versions prior to 3.22, contains a vulnerability in GameStream plugins where log files a…

  NVIDIA NVIDIA GeForce Experience Software
  Apr 20, 2021
• Medium 6.1
  CVE-2020-25864 Scanner template

  HashiCorp Consul Cross-site Scripting vulnerability

  HashiCorp Consul and Consul Enterprise up to version 1.9.4 key-value (KV) raw mode was vulnerable to cross-site scripting. Fixed in 1.9.5, 1.8.10 and 1.7.14.

  k3d k3d-proxy k3d-tools consul Debian Ubuntu Alpine Wolfi Go
  Apr 20, 2021
• Medium 4.9
  CVE-2021-20023 Exploited · Ransomware EPSS 52%

  SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an…

  SonicWall Email Security Network devices
  Apr 20, 2021

  KEV Nov 3, 2021
• Medium 5.5
  CVE-2021-3038

  GlobalProtect App: Windows VPN kernel driver denial of service (DoS)

  A denial-of-service (DoS) vulnerability in Palo Alto Networks GlobalProtect app on Windows systems allows a limited Windows user to send specifically-crafted input to the GlobalProtect app that results in a Windows blue screen of death (BSOD) error. This issu…

  Palo Alto Networks GlobalProtect App Network devices
  Apr 20, 2021
• Medium 4.4
  CVE-2021-3036

  PAN-OS: Administrator secrets are logged in web server logs when using the PAN-OS XML API incorrectly

  An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where secrets in PAN-OS XML API requests are logged in cleartext to the web server logs when the API is used incorrectly. This vulnerability applies only to PA…

  Palo Alto Networks PAN-OS Network devices
  Apr 20, 2021
• Medium 6.7
  CVE-2021-3035

  Bridgecrew Checkov: Unsafe deserialization of Terraform files allows code execution

  An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.26. Checkov 1.0 versions are not impacte…

  Palo Alto Networks Bridgecrew Checkov Network devices
  Apr 20, 2021
• Medium 5.7
  CVE-2021-30496

  The Telegram app 7.6.2 for iOS allows remote authenticated users to cause a denial of service (application crash) if th…

  Apr 20, 2021