29 April 2021

118 results · Feed

• High 7.8
  CVE-2021-31436

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.…

  Foxit Studio Photo
  Apr 29, 2021
• High 7.8
  CVE-2021-31435

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.…

  Foxit Studio Photo
  Apr 29, 2021
• High 7.8
  CVE-2021-31434

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.…

  Foxit Studio Photo
  Apr 29, 2021
• High 7.8
  CVE-2021-31433

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.…

  Foxit Studio Photo
  Apr 29, 2021
• Medium 6.0
  CVE-2021-31431

  This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desk…

  Parallels Desktop
  Apr 29, 2021
• Medium 6.0
  CVE-2021-31432

  This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desk…

  Parallels Desktop
  Apr 29, 2021
• Medium 6.0
  CVE-2021-31430

  This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desk…

  Parallels Desktop
  Apr 29, 2021
• High 8.2
  CVE-2021-31428

  This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.5-…

  Parallels Desktop
  Apr 29, 2021
• High 8.2
  CVE-2021-31429

  This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.5-…

  Parallels Desktop
  Apr 29, 2021
• High 7.3
  CVE-2021-31427

  This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desk…

  Parallels Desktop
  Apr 29, 2021
• High 8.8
  CVE-2021-31426

  This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.2-…

  Parallels Desktop
  Apr 29, 2021
• High 8.8
  CVE-2021-31424

  This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.5-…

  Parallels Desktop
  Apr 29, 2021
• High 8.8
  CVE-2021-31425

  This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.2-…

  Parallels Desktop
  Apr 29, 2021
• Medium 6.0
  CVE-2021-31423

  This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desk…

  Parallels Desktop
  Apr 29, 2021
• Low 3.2
  CVE-2021-31421

  This vulnerability allows local attackers to delete arbitrary files on affected installations of Parallels Desktop 16.1…

  Parallels Desktop
  Apr 29, 2021
• High 7.5
  CVE-2021-31422

  This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.1-…

  Parallels Desktop
  Apr 29, 2021
• High 8.8
  CVE-2021-31420

  This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.0-…

  Parallels Desktop
  Apr 29, 2021
• Medium 6.5
  CVE-2021-31419

  This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desk…

  Parallels Desktop
  Apr 29, 2021
• Medium 6.5
  CVE-2021-31418

  This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desk…

  Parallels Desktop
  Apr 29, 2021
• Medium 6.5
  CVE-2021-31417

  This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desk…

  Parallels Desktop
  Apr 29, 2021
• Unscored —
  CVE-2020-21452

  An issue was discovered in uniview ISC2500-S. This is an upload vulnerability where an attacker can upload malicious co…

  Apr 29, 2021
• Unscored —
  CVE-2020-35430

  SQL Injection in com/inxedu/OS/edu/controller/letter/AdminMsgSystemController in Inxedu v2.0.6 via the ids parameter to…

  Apr 29, 2021
• Unscored —
  CVE-2021-30048

  Directory Traversal in the fileDownload function in com/java2nb/common/controller/FileController.java in Novel-plus (小说…

  Apr 29, 2021
• Unscored —
  CVE-2021-30234

  The api/ZRIGMP/set_MLD_PROXY interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute …

  Apr 29, 2021
• Unscored —
  CVE-2021-30230

  The api/ZRFirmware/set_time_zone interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to exec…

  Apr 29, 2021
• Unscored —
  CVE-2021-30229

  The api/zrDm/set_zrDm interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitra…

  Apr 29, 2021
• Unscored —
  CVE-2021-30233

  The api/ZRIptv/setIptvInfo interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute ar…

  Apr 29, 2021
• Unscored —
  CVE-2021-30231

  The api/zrDm/set_ZRElink interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbi…

  Apr 29, 2021
• Unscored —
  CVE-2021-30232

  The api/ZRIGMP/set_IGMP_PROXY interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute…

  Apr 29, 2021
• Unscored —
  CVE-2021-30228

  The api/ZRAndlink/set_ZRAndlink interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execu…

  Apr 29, 2021
• Unscored —
  CVE-2021-25811

  MERCUSYS Mercury X18G 1.0.5 devices allow Denial of service via a crafted value to the POST listen_http_lan parameter. …

  Apr 29, 2021
• Unscored —
  CVE-2021-25812

  Command injection vulnerability in China Mobile An Lianbao WF-1 1.01 via the 'ip' parameter with a POST request to /api…

  Apr 29, 2021
• Unscored —
  CVE-2021-25810

  Cross site Scripting (XSS) vulnerability in MERCUSYS Mercury X18G 1.0.5 devices, via crafted values to the 'src_dport_s…

  Apr 29, 2021
• High 7.5
  CVE-2021-20228

  Ansible Exposes Sensitive Information

  A flaw was found in the Ansible Engine 2.9.18, where sensitive info is not masked by default and is not protected by the no_log feature when using the sub-option feature of the basic.py module. This flaw allows an attacker to obtain sensitive information. The…

  ansible ansible ansible ansible Debian Ubuntu Azure Linux PyPI
  Apr 29, 2021
• Unscored —
  CVE-2021-29350

  SQL injection in the getip function in conn/function.php in 发货100-设计素材下载系统 1.1 allows remote attackers to inject arbitr…

  Apr 29, 2021
• Unscored —
  CVE-2021-30227

  Cross Site Scripting (XSS) vulnerability in the article comments feature in emlog 6.0.

  Apr 29, 2021
• Unscored —
  CVE-2021-28280

  CSRF + Cross-site scripting (XSS) vulnerability in search.php in PHPFusion 9.03.110 allows remote attackers to inject a…

  Apr 29, 2021
• Unscored —
  CVE-2021-30224

  Cross Site Request Forgery (CSRF) in Rukovoditel v2.8.3 allows attackers to create an admin user with an arbitrary cred…

  Apr 29, 2021
• Critical 9.8
  CVE-2021-27651 Public exploit Scanner template EPSS 54%

  In versions 8.2.1 through 8.5.2 of Pega Infinity, the password reset functionality for local accounts can be used to by…

  Pega Systems Pega Infinity
  Apr 29, 2021
• Unscored —
  CVE-2021-30027

  md_analyze_line in md4c.c in md4c 0.4.7 allows attackers to trigger use of uninitialized memory, and cause a denial of …

  md4c md4c Debian Ubuntu
  Apr 29, 2021