Archive

April 2021

Vulnerabilities first published in this month (UTC), newest first.

← March 2021 2021 / April May 2021 →

All Critical High Medium Low Exploited only Public exploit

424 results · Clear filters · Feed

High 7.8

CVE-2021-21093

Adobe Bridge SGI File Parsing Memory Corruption vulnerability could lead to arbitrary code execution

Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in t…

Adobe Bridge

Apr 15, 2021
High 7.8

CVE-2021-21100

Adobe Digital Editions Arbitrary file system write vulnerability

Adobe Digital Editions version 4.5.11.187245 (and earlier) is affected by a Privilege Escalation vulnerability during installation. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary file system write in the context of the curr…

Adobe Digital Editions

Apr 15, 2021
High 7.8

CVE-2021-21094

Adobe Bridge PDF File Parsing Out-Of-Bounds Write vulnerability could lead to arbitrary code execution

Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by an Out-of-bounds write vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution i…

Adobe Bridge

Apr 15, 2021
High 8.1

CVE-2020-28593

A unauthenticated backdoor exists in the configuration server functionality of Cosori Smart 5.8-Quart Air Fryer CS158-A…

Apr 15, 2021
High 8.1

CVE-2020-28592

A heap-based buffer overflow vulnerability exists in the configuration server functionality of the Cosori Smart 5.8-Qua…

Apr 15, 2021
High 7.8

CVE-2021-23887

Privilege escalation in McAfee DLP Endpoint for Windows

Privilege Escalation vulnerability in McAfee Data Loss Prevention (DLP) Endpoint for Windows prior to 11.6.100 allows a local, low privileged, attacker to write to arbitrary controlled kernel addresses. This is achieved by launching applications, suspending t…

McAfee McAfee Data Loss Prevention (DLP) Endpoint for Windows Windows

Apr 15, 2021
High 8.8

CVE-2021-28826

TIBCO Messaging - Eclipse Mosquitto Distribution - Bridge Windows Platform Installation vulnerability

The Windows Installation component of TIBCO Software Inc.'s TIBCO Messaging - Eclipse Mosquitto Distribution - Bridge - Community Edition and TIBCO Messaging - Eclipse Mosquitto Distribution - Bridge - Enterprise Edition contains a vulnerability that theoreti…

TIBCO Software TIBCO Messaging - Eclipse Mosquitto Distribution - Bridge - Enterprise Edition TIBCO Messaging - Eclipse Mosquitto Distribution - Bridge - Community Edition

Apr 14, 2021
High 8.8

CVE-2021-28825

TIBCO Messaging - Eclipse Mosquitto Distribution - Core Windows Platform Installation vulnerability

The Windows Installation component of TIBCO Software Inc.'s TIBCO Messaging - Eclipse Mosquitto Distribution - Core - Community Edition and TIBCO Messaging - Eclipse Mosquitto Distribution - Core - Enterprise Edition contains a vulnerability that theoreticall…

TIBCO Software TIBCO Messaging - Eclipse Mosquitto Distribution - Core - Enterprise Edition TIBCO Messaging - Eclipse Mosquitto Distribution - Core - Community Edition

Apr 14, 2021
High 7.8

CVE-2021-27259

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.0.1-…

Parallels Desktop

Apr 14, 2021
High 8.8

CVE-2021-27253

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nig…

NETGEAR R7800 Network devices

Apr 14, 2021
High 8.8

CVE-2021-27252

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R78…

NETGEAR R7800 Network devices

Apr 14, 2021
High 8.8

CVE-2021-27251

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nig…

NETGEAR R7800 Network devices

Apr 14, 2021
High 8.8

CVE-2021-27249

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-…

D-Link DAP-2020 Network devices

Apr 14, 2021
High 8.8

CVE-2021-27248

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-…

D-Link DAP-2020 Network devices

Apr 14, 2021
High 8.0

CVE-2021-27246 Public exploit

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Arc…

TP-Link Systems AC1750 Network devices

Apr 14, 2021
High 7.8

CVE-2021-25314

hawk: Insecure file permissions

A Creation of Temporary File With Insecure Permissions vulnerability in hawk2 of SUSE Linux Enterprise High Availability 12-SP3, SUSE Linux Enterprise High Availability 12-SP5, SUSE Linux Enterprise High Availability 15-SP2 allows local attackers to escalate …

SUSE SUSE Linux Enterprise High Availability 12-SP3 SUSE Linux Enterprise High Availability 15-SP2 SUSE Linux Enterprise High Availability 12-SP5 Linux

Apr 14, 2021
High 7.5

CVE-2021-27608

An unquoted service path in SAPSetup, version - 9.0, could lead to privilege escalation during the installation process…

SAP SAP Setup

Apr 14, 2021
High 7.7

CVE-2021-27604

In order to prevent XML External Entity vulnerability in SAP NetWeaver ABAP Server and ABAP Platform (Process Integrati…

SAP SAP Process Integration (Enterprise Service Repository JAVA Mappings)

Apr 14, 2021
High 8.1

CVE-2021-3460

The Motorola MH702x devices, prior to version 2.0.0.301, do not properly verify the server certificate during communica…

Motorola MH702x

Apr 13, 2021
High 8.4

CVE-2021-29440 Public exploit EPSS 30%

Twig allowing dangerous PHP functions by default

Grav is a file based Web-platform. Twig processing of static pages can be enabled in the front matter by any administrative user allowed to create or edit pages. As the Twig processor runs unsandboxed, this behavior can be used to gain arbitrary code executio…

getgrav grav getgrav/grav Packagist

Apr 13, 2021
High 7.2

CVE-2021-29439

Plugins can be installed with minimal admin privileges

The Grav admin plugin prior to version 1.10.11 does not correctly verify caller's privileges. As a consequence, users with the permission `admin.login` can install third-party plugins and their dependencies. By installing the right plugin, an attacker can obt…

getgrav grav-plugin-admin

Apr 13, 2021
High 8.8

CVE-2021-28482 Public exploit EPSS 83%

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 8 Microsoft Exchange Server 2016 Cumulative Update 19

Apr 13, 2021
High 7.8

CVE-2021-28475

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Microsoft Visual Studio Code

Apr 13, 2021
High 7.0

CVE-2021-28477

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Microsoft Visual Studio Code

Apr 13, 2021
High 7.8

CVE-2021-28473

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Microsoft Visual Studio Code

Apr 13, 2021
High 7.8

CVE-2021-28472 EPSS 62%

Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability

Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability

Microsoft Visual Studio Code - Maven for Java Extension

Apr 13, 2021
High 7.8

CVE-2021-28471

Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability

Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability

Microsoft Visual Studio Code

Apr 13, 2021
High 7.8

CVE-2021-28470

Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution Vulnerability

Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution Vulnerability

Microsoft Visual Studio Code - GitHub Pull Requests and Issues Extension

Apr 13, 2021
High 7.8

CVE-2021-28469

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Microsoft Visual Studio Code

Apr 13, 2021
High 7.8

CVE-2021-28468

Raw Image Extension Remote Code Execution Vulnerability

Raw Image Extension Remote Code Execution Vulnerability

Microsoft Raw Image Extension

Apr 13, 2021
High 7.8

CVE-2021-28466

Raw Image Extension Remote Code Execution Vulnerability

Raw Image Extension Remote Code Execution Vulnerability

Microsoft Raw Image Extension

Apr 13, 2021
High 8.1

CVE-2021-28460

Azure Sphere Unsigned Code Execution Vulnerability

Azure Sphere Unsigned Code Execution Vulnerability

Microsoft Azure Sphere

Apr 13, 2021
High 7.8

CVE-2021-28464

VP9 Video Extensions Remote Code Execution Vulnerability

VP9 Video Extensions Remote Code Execution Vulnerability

Microsoft VP9 Video Extensions

Apr 13, 2021
High 7.8

CVE-2021-28457

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Microsoft Visual Studio Code

Apr 13, 2021
High 7.8

CVE-2021-28458

Azure ms-rest-nodeauth Library Elevation of Privilege Vulnerability

Azure ms-rest-nodeauth Library Elevation of Privilege Vulnerability

Microsoft @azure/ms-rest-nodeauth @azure/ms-rest-nodeauth npm

Apr 13, 2021
High 7.8

CVE-2021-28454

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft Excel 2016

Apr 13, 2021
High 7.8

CVE-2021-28453

Microsoft Word Remote Code Execution Vulnerability

Microsoft Word Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft SharePoint Server 2019

Apr 13, 2021
High 7.1

CVE-2021-28452

Microsoft Outlook Memory Corruption Vulnerability

Microsoft Outlook Memory Corruption Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft Outlook 2016

Apr 13, 2021
High 7.8

CVE-2021-28451

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft Excel 2016

Apr 13, 2021
High 7.8

CVE-2021-28449

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft Excel 2016

Apr 13, 2021