April 2021

9 results · Clear filters · Feed

• High 8.8
  CVE-2021-21220 Exploited Public exploit EPSS 70%

  Insufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to p…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  Apr 26, 2021

  KEV Nov 3, 2021
• Critical 10.0
  CVE-2021-22205 Exploited · Ransomware Public exploit EPSS 100%

  An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validat…

  GitLab GitLab gitlab Web / CMS Ubuntu
  Apr 23, 2021

  KEV Nov 3, 2021
• Medium 6.8
  CVE-2021-22204 Exploited Public exploit EPSS 100%

  Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code exe…

  ExifTool ExifTool libimage-exiftool-perl libimage-exiftool-perl Debian Ubuntu Alpine
  Apr 23, 2021

  KEV Nov 17, 2021
• Critical 10.0
  CVE-2021-22893 Exploited · Ransomware Public exploit EPSS 48%

  Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by the Wind…

  Apr 23, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2021-3493 Exploited Public exploit EPSS 49%

  The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting …

  Ubuntu Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  Apr 17, 2021

  KEV Oct 20, 2022
• Critical 9.8
  CVE-2020-2509 Exploited Public exploit EPSS 34%

  Command Injection Vulnerability in QTS and QuTS hero

  A command injection vulnerability has been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. We have already fixed this vulnerability in the following versions: …

  QNAP Systems QTS QuTS hero
  Apr 17, 2021

  KEV Apr 11, 2022
• High 7.8
  CVE-2021-28310 Exploited Public exploit

  Win32k Elevation of Privilege Vulnerability

  Win32k Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 13, 2021

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2021-20021 Exploited · Ransomware Public exploit EPSS 89%

  A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account…

  SonicWall Email Security Network devices
  Apr 9, 2021

  KEV Nov 3, 2021
• High 7.0
  CVE-2021-1782 Exploited Public exploit

  A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-0…

  Apple macOS iOS and iPadOS macOS iOS
  Apr 2, 2021

  KEV Nov 3, 2021