Archive

21 April 2021

Vulnerabilities first published on this day (UTC), newest first.

← March 2021 2021 / April /21 May 2021 →

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

High 7.3

CVE-2021-1075

NVIDIA Windows GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel mode layer (nvlddmk…

NVIDIA NVIDIA GPU Display Driver

Apr 21, 2021
High 7.3

CVE-2021-1074

NVIDIA GPU Display Driver for Windows installer contains a vulnerability where an attacker with local unprivileged syst…

NVIDIA NVIDIA GPU Display Driver

Apr 21, 2021
High 8.8

CVE-2021-21646

Remote code execution vulnerability in Jenkins Templating Engine Plugin

Jenkins Templating Engine Plugin 2.1 and earlier does not protect its pipeline configurations using Script Security Plugin, allowing attackers with Job/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM.

Jenkins Project Jenkins Templating Engine Plugin org.jenkins-ci.plugins:templating-engine Web / CMS Maven

Apr 21, 2021
High 8.1

CVE-2021-21642 EPSS 38%

XML External Entity Reference vulnerability in Jenkins Config File Provider Plugin

Jenkins Config File Provider Plugin 3.7.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Jenkins Project Jenkins Config File Provider Plugin org.jenkins-ci.plugins:config-file-provider Web / CMS Maven

Apr 21, 2021
High 8.2

CVE-2021-20454

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a XML External Entity Injection (XXE) attack w…

IBM WebSphere Application Server

Apr 21, 2021
High 7.5

CVE-2021-28965

REXML round-trip instability

The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, and 3.x before 3.0.1 does not properly address XML round-trip issues. An incorrect document can be produced after parsing and serializing.

ruby2.3 ruby ruby2.5 ruby2.7 Debian Ubuntu Azure Linux Alpine RubyGems

Apr 21, 2021