April 2021

1,841 results · Feed

• Medium 5.4
  CVE-2021-1369

  Cisco Firepower Device Manager On-Box Software XML External Entity Vulnerability

  A vulnerability in the REST API of Cisco Firepower Device Manager (FDM) On-Box Software could allow an authenticated, remote attacker to gain read and write access to information that is stored on an affected device. This vulnerability is due to the improper …

  Cisco Cisco Firepower Threat Defense Software Network devices
  Apr 29, 2021
• Medium 6.0
  CVE-2021-1256

  Cisco Firepower Threat Defense Software Command File Overwrite Vulnerability

  A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to overwrite files on the file system of an affected device by using directory traversal techniques. A successful exploit could cause syst…

  Cisco Cisco Firepower Threat Defense Software Network devices
  Apr 29, 2021
• High 8.9
  CVE-2021-21388

  Command Injection Vulnerability in systeminformation

  systeminformation is an open source system and OS information library for node.js. A command injection vulnerability has been discovered in versions of systeminformation prior to 5.6.4. The issue has been fixed with a parameter check on user input. Please upg…

  sebhildebrandt systeminformation systeminformation npm
  Apr 29, 2021
• Unscored —
  CVE-2020-18032

  Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to ex…

  graphviz graphviz graphviz graphviz Debian Ubuntu Azure Linux Alpine
  Apr 29, 2021
• High 8.6
  CVE-2021-1402

  Cisco Firepower Threat Defense Software SSL Decryption Policy Denial of Service Vulnerability

  A vulnerability in the software-based SSL/TLS message handler of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. The vul…

  Cisco Cisco Firepower Threat Defense Software Network devices
  Apr 29, 2021
• High 7.2
  CVE-2021-21417

  Use after free in fluidsynth

  fluidsynth is a software synthesizer based on the SoundFont 2 specifications. A use after free violation was discovered in fluidsynth, that can be triggered when loading an invalid SoundFont file.

  FluidSynth fluidsynth fluidsynth fluidsynth Debian Ubuntu Alpine
  Apr 29, 2021
• Unscored —
  CVE-2020-21101

  Cross Site Scriptiong vulnerabilityin Screenly screenly-ose all versions, including v1.8.2 (2019-09-25-Screenly-OSE-lit…

  Apr 29, 2021
• High 7.8
  CVE-2021-21415

  Visual Studio Code Prisma Extension Remote Code Execution Vulnerability

  Prisma VS Code a VSCode extension for Prisma schema files. This is a Remote Code Execution Vulnerability that affects all versions of the Prisma VS Code extension older than 2.20.0. If a custom binary path for the Prisma format binary is set in VS Code Settin…

  prisma language-tools
  Apr 29, 2021
• High 7.8
  CVE-2021-31438

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.…

  Foxit Studio Photo
  Apr 29, 2021
• High 7.8
  CVE-2021-31437

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.…

  Foxit Studio Photo
  Apr 29, 2021
• High 7.8
  CVE-2021-31436

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.…

  Foxit Studio Photo
  Apr 29, 2021
• High 7.8
  CVE-2021-31435

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.…

  Foxit Studio Photo
  Apr 29, 2021
• High 7.8
  CVE-2021-31434

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.…

  Foxit Studio Photo
  Apr 29, 2021
• High 7.8
  CVE-2021-31433

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.…

  Foxit Studio Photo
  Apr 29, 2021
• Medium 6.0
  CVE-2021-31431

  This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desk…

  Parallels Desktop
  Apr 29, 2021
• Medium 6.0
  CVE-2021-31432

  This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desk…

  Parallels Desktop
  Apr 29, 2021
• Medium 6.0
  CVE-2021-31430

  This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desk…

  Parallels Desktop
  Apr 29, 2021
• High 8.2
  CVE-2021-31428

  This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.5-…

  Parallels Desktop
  Apr 29, 2021
• High 8.2
  CVE-2021-31429

  This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.5-…

  Parallels Desktop
  Apr 29, 2021
• High 7.3
  CVE-2021-31427

  This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desk…

  Parallels Desktop
  Apr 29, 2021
• High 8.8
  CVE-2021-31426

  This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.2-…

  Parallels Desktop
  Apr 29, 2021
• High 8.8
  CVE-2021-31424

  This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.5-…

  Parallels Desktop
  Apr 29, 2021
• High 8.8
  CVE-2021-31425

  This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.2-…

  Parallels Desktop
  Apr 29, 2021
• Medium 6.0
  CVE-2021-31423

  This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desk…

  Parallels Desktop
  Apr 29, 2021
• Low 3.2
  CVE-2021-31421

  This vulnerability allows local attackers to delete arbitrary files on affected installations of Parallels Desktop 16.1…

  Parallels Desktop
  Apr 29, 2021
• High 7.5
  CVE-2021-31422

  This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.1-…

  Parallels Desktop
  Apr 29, 2021
• High 8.8
  CVE-2021-31420

  This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.0-…

  Parallels Desktop
  Apr 29, 2021
• Medium 6.5
  CVE-2021-31419

  This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desk…

  Parallels Desktop
  Apr 29, 2021
• Medium 6.5
  CVE-2021-31418

  This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desk…

  Parallels Desktop
  Apr 29, 2021
• Medium 6.5
  CVE-2021-31417

  This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desk…

  Parallels Desktop
  Apr 29, 2021
• Unscored —
  CVE-2020-21452

  An issue was discovered in uniview ISC2500-S. This is an upload vulnerability where an attacker can upload malicious co…

  Apr 29, 2021
• Unscored —
  CVE-2020-35430

  SQL Injection in com/inxedu/OS/edu/controller/letter/AdminMsgSystemController in Inxedu v2.0.6 via the ids parameter to…

  Apr 29, 2021
• Unscored —
  CVE-2021-30048

  Directory Traversal in the fileDownload function in com/java2nb/common/controller/FileController.java in Novel-plus (小说…

  Apr 29, 2021
• Unscored —
  CVE-2021-30234

  The api/ZRIGMP/set_MLD_PROXY interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute …

  Apr 29, 2021
• Unscored —
  CVE-2021-30230

  The api/ZRFirmware/set_time_zone interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to exec…

  Apr 29, 2021
• Unscored —
  CVE-2021-30229

  The api/zrDm/set_zrDm interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitra…

  Apr 29, 2021
• Unscored —
  CVE-2021-30233

  The api/ZRIptv/setIptvInfo interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute ar…

  Apr 29, 2021
• Unscored —
  CVE-2021-30231

  The api/zrDm/set_ZRElink interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbi…

  Apr 29, 2021
• Unscored —
  CVE-2021-30232

  The api/ZRIGMP/set_IGMP_PROXY interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute…

  Apr 29, 2021
• Unscored —
  CVE-2021-30228

  The api/ZRAndlink/set_ZRAndlink interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execu…

  Apr 29, 2021