Lista CVE - 2021 / Marzo
Visualizzazione 101 - 200 di 1447 CVE per Marzo 2021 (Pagina 2 di 15)
| ID CVE | Data | Titolo |
|---|---|---|
| CVE-2021-20225 | 2021-03-03 | A flaw was found in grub2 in versions prior to... |
| CVE-2021-20233 | 2021-03-03 | A flaw was found in grub2 in versions prior to... |
| CVE-2021-20441 | 2021-03-03 | IBM Security Verify Bridge uses weaker than expected cryptographic algorithms... |
| CVE-2021-20442 | 2021-03-03 | IBM Security Verify Bridge contains hard-coded credentials, such as a... |
| CVE-2020-29047 | 2021-03-03 | The wp-hotel-booking plugin through 1.10.2 for WordPress allows remote attackers... |
| CVE-2021-22884 | 2021-03-03 | Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to... |
| CVE-2021-22883 | 2021-03-03 | Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to... |
| CVE-2021-22877 | 2021-03-03 | A missing user check in Nextcloud prior to 20.0.6 inadvertently... |
| CVE-2021-22878 | 2021-03-03 | Nextcloud Server prior to 20.0.6 is vulnerable to reflected cross-site... |
| CVE-2020-8296 | 2021-03-03 | Nextcloud Server prior to 20.0.0 stores passwords in a recoverable... |
| CVE-2021-21978 | 2021-03-03 | VMware View Planner 4.x prior to 4.6 Security Patch 1... |
| CVE-2020-28597 | 2021-03-03 | A predictable seed vulnerability exists in the password reset functionality... |
| CVE-2020-28591 | 2021-03-03 | An out-of-bounds read vulnerability exists in the AMF File AMFParserContext::endElement()... |
| CVE-2020-13558 | 2021-03-03 | A code execution vulnerability exists in the AudioSourceProviderGStreamer functionality of... |
| CVE-2021-22188 | 2021-03-03 | An issue has been discovered in GitLab affecting all versions... |
| CVE-2021-22182 | 2021-03-03 | An issue has been discovered in GitLab affecting all versions... |
| CVE-2021-22681 | 2021-03-03 | Rockwell Automation Studio 5000 Logix Designer Versions 21 and later,... |
| CVE-2021-27839 | 2021-03-03 | A CSV injection vulnerability found in Online Invoicing System (OIS)... |
| CVE-2021-21313 | 2021-03-03 | XSS on tabs |
| CVE-2021-21312 | 2021-03-03 | Stored XSS on documents |
| CVE-2021-21314 | 2021-03-03 | XSS injection on ticket update |
| CVE-2021-27935 | 2021-03-03 | An issue was discovered in AdGuard before 0.105.2. An attacker... |
| CVE-2021-27931 | 2021-03-03 | LumisXP (aka Lumis Experience Platform) before 10.0.0 allows unauthenticated blind... |
| CVE-2021-27940 | 2021-03-03 | resources/public/js/orchestrator.js in openark orchestrator before 3.2.4 allows XSS via the... |
| CVE-2021-21331 | 2021-03-03 | DataDog API Client contains a Local Information Disclosure Vulnerability |
| CVE-2020-28601 | 2021-03-04 | A code execution vulnerability exists in the Nef polygon-parsing functionality... |
| CVE-2020-28636 | 2021-03-04 | A code execution vulnerability exists in the Nef polygon-parsing functionality... |
| CVE-2020-35628 | 2021-03-04 | A code execution vulnerability exists in the Nef polygon-parsing functionality... |
| CVE-2020-35636 | 2021-03-04 | A code execution vulnerability exists in the Nef polygon-parsing functionality... |
| CVE-2019-18628 | 2021-03-04 | Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases... |
| CVE-2019-18629 | 2021-03-04 | Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases... |
| CVE-2020-24036 | 2021-03-04 | PHP object injection in the Ajax endpoint of the backend... |
| CVE-2020-24912 | 2021-03-04 | A reflected cross-site scripting (XSS) vulnerability in qcubed (all versions... |
| CVE-2020-24913 | 2021-03-04 | A SQL injection vulnerability in qcubed (all versions including 3.1.1)... |
| CVE-2020-24914 | 2021-03-04 | A PHP object injection bug in profile.php in qcubed (all... |
| CVE-2021-22189 | 2021-03-04 | Starting with version 13.7 the Gitlab CE/EE editions were affected... |
| CVE-2021-22183 | 2021-03-04 | An issue has been discovered in GitLab affecting all versions... |
| CVE-2020-35327 | 2021-03-04 | SQL injection vulnerability was discovered in Courier Management System 1.0,... |
| CVE-2020-35328 | 2021-03-04 | Courier Management System 1.0 - 'First Name' Stored XSS |
| CVE-2020-35329 | 2021-03-04 | Courier Management System 1.0 1.0 is affected by SQL Injection... |
| CVE-2021-23344 | 2021-03-04 | Remote Code Execution (RCE) |
| CVE-2021-23346 | 2021-03-04 | Regular Expression Denial of Service (ReDoS) |
| CVE-2021-22128 | 2021-03-04 | An improper access control vulnerability in FortiProxy SSL VPN portal... |
| CVE-2020-15938 | 2021-03-04 | When traffic other than HTTP/S (eg: SSH traffic, etc...) traverses... |
| CVE-2021-23126 | 2021-03-04 | [20210301] - Core - Insecure randomness within 2FA secret generation |
| CVE-2021-23127 | 2021-03-04 | [20210301] - Core - Insecure randomness within 2FA secret generation |
| CVE-2021-23128 | 2021-03-04 | [20210302] - Core - Potential Insecure FOFEncryptRandval |
| CVE-2021-23129 | 2021-03-04 | [20210303] - Core - XSS within alert messages showed to users |
| CVE-2021-23130 | 2021-03-04 | [20210304] - Core - XSS within the feed parser library |
| CVE-2021-23131 | 2021-03-04 | [20210305] - Core - Input validation within the template manager |
| CVE-2021-23132 | 2021-03-04 | [20210306] - Core - com_media allowed paths that are not intended for image uploads |
| CVE-2021-26027 | 2021-03-04 | [20210307] - Core - ACL violation within com_content frontend editing |
| CVE-2021-26028 | 2021-03-04 | [20210308] - Core - Path Traversal within joomla/archive zip class |
| CVE-2021-26029 | 2021-03-04 | [20210309] - Core - Inadequate filtering of form contents could allow to overwrite the author field |
| CVE-2021-27217 | 2021-03-04 | An issue was discovered in the _send_secure_msg() function of Yubico... |
| CVE-2020-4856 | 2021-03-04 | IBM Engineering products are vulnerable to stored cross-site scripting. This... |
| CVE-2020-4857 | 2021-03-04 | IBM Engineering products are vulnerable to stored cross-site scripting. This... |
| CVE-2020-4863 | 2021-03-04 | IBM Engineering products are vulnerable to stored cross-site scripting. This... |
| CVE-2020-4866 | 2021-03-04 | IBM Engineering products are vulnerable to cross-site scripting. This vulnerability... |
| CVE-2020-4975 | 2021-03-04 | IBM Engineering products are vulnerable to cross-site scripting. This vulnerability... |
| CVE-2021-20340 | 2021-03-04 | IBM Engineering products are vulnerable to cross-site scripting. This vulnerability... |
| CVE-2021-20350 | 2021-03-04 | IBM Engineering products are vulnerable to cross-site scripting. This vulnerability... |
| CVE-2021-20351 | 2021-03-04 | IBM Engineering products are vulnerable to cross-site scripting. This vulnerability... |
| CVE-2020-8298 | 2021-03-04 | fs-path node module before 0.0.25 is vulnerable to command injection... |
| CVE-2021-24031 | 2021-03-04 | In the Zstandard command-line utility prior to v1.4.1, output files... |
| CVE-2021-24032 | 2021-03-04 | Beginning in v1.4.1 and prior to v1.4.9, due to an... |
| CVE-2021-26293 | 2021-03-04 | An issue was discovered in AfterLogic Aurora through 8.5.3 and... |
| CVE-2021-26988 | 2021-03-04 | Clustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P12, 9.7P8... |
| CVE-2021-26989 | 2021-03-04 | Clustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P12, 9.7P9... |
| CVE-2021-25331 | 2021-03-04 | Improper access control in Samsung Pay mini application prior to... |
| CVE-2021-25332 | 2021-03-04 | Improper access control in Samsung Pay mini application prior to... |
| CVE-2021-25333 | 2021-03-04 | Improper access control in Samsung Pay mini application prior to... |
| CVE-2021-25334 | 2021-03-04 | Improper input check in wallpaper service in Samsung mobile devices... |
| CVE-2021-25335 | 2021-03-04 | Improper lockscreen status check in cocktailbar service in Samsung mobile... |
| CVE-2021-25336 | 2021-03-04 | Improper access control in NotificationManagerService in Samsung mobile devices prior... |
| CVE-2021-25337 | 2021-03-04 | Improper access control in clipboard service in Samsung mobile devices... |
| CVE-2021-25338 | 2021-03-04 | Improper memory access control in RKP in Samsung mobile devices... |
| CVE-2021-25339 | 2021-03-04 | Improper address validation in HArx in Samsung mobile devices prior... |
| CVE-2021-25340 | 2021-03-04 | Improper access control vulnerability in Samsung keyboard version prior to... |
| CVE-2021-25341 | 2021-03-04 | Calling of non-existent provider in S Assistant prior to version... |
| CVE-2021-25342 | 2021-03-04 | Calling of non-existent provider in SMP sdk prior to version... |
| CVE-2021-25343 | 2021-03-04 | Calling of non-existent provider in Samsung Members prior to version... |
| CVE-2021-25344 | 2021-03-04 | Missing permission check in knox_custom service prior to SMR Mar-2021... |
| CVE-2021-25345 | 2021-03-04 | Graphic format mismatch while converting video format in hwcomposer prior... |
| CVE-2021-25347 | 2021-03-04 | Hijacking vulnerability in Samsung Email application version prior to SMR... |
| CVE-2021-25346 | 2021-03-04 | A possible arbitrary memory overwrite vulnerabilities in quram library version... |
| CVE-2021-25348 | 2021-03-04 | Improper permission grant check in Samsung Internet prior to version... |
| CVE-2021-3403 | 2021-03-04 | In ytnef 1.9.3, the TNEFSubjectHandler function in lib/ytnef.c allows remote... |
| CVE-2021-3404 | 2021-03-04 | In ytnef 1.9.3, the SwapWord function in lib/ytnef.c allows remote... |
| CVE-2020-25639 | 2021-03-04 | A NULL pointer dereference flaw was found in the Linux... |
| CVE-2019-18630 | 2021-03-04 | On Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software... |
| CVE-2021-27314 | 2021-03-04 | SQL injection in admin.php in doctor appointment system 1.0 allows... |
| CVE-2021-28038 | 2021-03-05 | An issue was discovered in the Linux kernel through 5.11.3,... |
| CVE-2021-28039 | 2021-03-05 | An issue was discovered in the Linux kernel 5.9.x through... |
| CVE-2021-27964 | 2021-03-05 | SonLogger before 6.4.1 is affected by Unauthenticated Arbitrary File Upload.... |
| CVE-2021-27963 | 2021-03-05 | SonLogger before 6.4.1 is affected by user creation with any... |
| CVE-2021-27965 | 2021-03-05 | The MsIo64.sys driver before 1.1.19.1016 in MSI Dragon Center before... |
| CVE-2020-36255 | 2021-03-05 | An issue was discovered in IdentityModel (aka ScottBrady.IdentityModel) before 1.3.0.... |
| CVE-2020-5148 | 2021-03-05 | SonicWall SSO-agent default configuration uses NetAPI to probe the associated... |
| CVE-2019-25025 | 2021-03-05 | The activerecord-session_store (aka Active Record Session Store) component through 1.1.3... |