Archive

28 April 2021

Vulnerabilities first published on this day (UTC), newest first.

← March 2021 2021 / April /28 May 2021 →

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

Medium 6.0

CVE-2021-2321

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Apr 28, 2021
Medium 5.3

CVE-2021-23364

Regular Expression Denial of Service (ReDoS)

The package browserslist from 4.0.0 and before 4.16.5 are vulnerable to Regular Expression Denial of Service (ReDoS) during parsing of queries.

browserslist node-browserslist node-browserslist Debian Ubuntu npm

Apr 28, 2021
Medium 5.3

CVE-2021-30169

MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera - Sensitive Data Exposure-2

The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant user’s credential.

MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera firmware

Apr 28, 2021
Medium 6.4

CVE-2021-31779

Server-Side Request Forgery in yoast_seo

The yoast_seo (aka Yoast SEO) extension before 7.2.1 for TYPO3 allows SSRF via a backend user account.

yoast-seo-for-typo3/yoast_seo Packagist

Apr 28, 2021
Medium 6.4

CVE-2021-31778

Cross-site scripting in media2click

The media2click (aka 2 Clicks for External Media) extension 1.x before 1.3.3 for TYPO3 allows XSS by a backend user account.

amazing/media2click Packagist

Apr 28, 2021