Latest CVE Feed
-
5.5
MEDIUMCVE-2021-28318
Windows GDI+ Information Disclosure Vulnerability... Read more
Affected Products : windows_10 windows_7 windows_8.1 windows_rt_8.1 windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 +10 more products- EPSS Score: %0.54
- Published: Apr. 13, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-28317
Microsoft Windows Codecs Library Information Disclosure Vulnerability... Read more
Affected Products : windows_10 windows_7 windows_8.1 windows_rt_8.1 windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 +10 more products- EPSS Score: %0.45
- Published: Apr. 13, 2021
- Modified: Nov. 21, 2024
-
4.6
MEDIUMCVE-2021-28316
Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability... Read more
Affected Products : windows_10 windows_7 windows_8.1 windows_rt_8.1 windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 +9 more products- EPSS Score: %0.31
- Published: Apr. 13, 2021
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2021-28315
Windows Media Video Decoder Remote Code Execution Vulnerability... Read more
Affected Products : windows_10 windows_7 windows_8.1 windows_rt_8.1 windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 +10 more products- EPSS Score: %1.13
- Published: Apr. 13, 2021
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2021-28314
Windows Hyper-V Elevation of Privilege Vulnerability... Read more
- EPSS Score: %0.51
- Published: Apr. 13, 2021
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2021-28313
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability... Read more
Affected Products : windows_10 windows_server_2016 windows_server_2019 visual_studio_2017 visual_studio_2019 visual_studio windows_10_1809 windows_10_20h2 windows_10_1803 windows_10_1909 +3 more products- EPSS Score: %0.67
- Published: Apr. 13, 2021
- Modified: Nov. 21, 2024
-
6.5
MEDIUMCVE-2021-28312
Windows NTFS Denial of Service Vulnerability... Read more
- EPSS Score: %8.28
- Published: Apr. 13, 2021
- Modified: Nov. 21, 2024
-
6.5
MEDIUMCVE-2021-28311
Windows Application Compatibility Cache Denial of Service Vulnerability... Read more
Affected Products : windows_10 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_20h2 windows_10_1803 windows_10_1909 windows_server_20h2 windows_server_1909 +1 more products- EPSS Score: %1.26
- Published: Apr. 13, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-28309
Windows Kernel Information Disclosure Vulnerability... Read more
Affected Products : windows_10 windows_7 windows_8.1 windows_rt_8.1 windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 +10 more products- EPSS Score: %0.40
- Published: Apr. 13, 2021
- Modified: Nov. 21, 2024
-
9.1
CRITICALCVE-2021-28308
An issue was discovered in the fltk crate before 0.15.3 for Rust. There is an out-of bounds read because the pixmap constructor lacks pixmap input validation.... Read more
Affected Products : fltk- EPSS Score: %0.43
- Published: Mar. 12, 2021
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2021-28307
An issue was discovered in the fltk crate before 0.15.3 for Rust. There is a NULL pointer dereference during attempted use of a non-raster image for a window icon.... Read more
Affected Products : fltk- EPSS Score: %0.34
- Published: Mar. 12, 2021
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2021-28306
An issue was discovered in the fltk crate before 0.15.3 for Rust. There is a NULL pointer dereference during attempted use of a multi label type if the image is nonexistent.... Read more
Affected Products : fltk- EPSS Score: %0.34
- Published: Mar. 12, 2021
- Modified: Nov. 21, 2024
-
9.8
CRITICALCVE-2021-28305
An issue was discovered in the diesel crate before 1.4.6 for Rust. There is a use-after-free in the SQLite backend because the semantics of sqlite3_column_name are not followed.... Read more
Affected Products : diesel- EPSS Score: %0.51
- Published: Mar. 12, 2021
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2021-28302
A stack overflow in pupnp before version 1.14.5 can cause the denial of service through the Parser_parseDocument() function. ixmlNode_free() will release a child node recursively, which will consume stack space and lead to a crash.... Read more
Affected Products : pupnp- EPSS Score: %0.37
- Published: Mar. 12, 2021
- Modified: Nov. 21, 2024
-
9.8
CRITICALCVE-2021-28300
NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack()" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service (DoS) by uploading a malicious MP4 file.... Read more
Affected Products : gpac- EPSS Score: %0.94
- Published: Apr. 14, 2021
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2021-28295
Online Ordering System 1.0 is vulnerable to unauthenticated SQL injection through /onlineordering/GPST/admin/design.php, which may lead to database information disclosure.... Read more
Affected Products : online_ordering_system- EPSS Score: %0.66
- Published: Mar. 16, 2021
- Modified: Nov. 21, 2024
-
9.8
CRITICALCVE-2021-28294
Online Ordering System 1.0 is vulnerable to arbitrary file upload through /onlineordering/GPST/store/initiateorder.php, which may lead to remote code execution (RCE).... Read more
Affected Products : online_ordering_system- EPSS Score: %2.61
- Published: Mar. 16, 2021
- Modified: Nov. 21, 2024
-
9.8
CRITICALCVE-2021-28293
Seceon aiSIEM before 6.3.2 (build 585) is prone to an unauthenticated account takeover vulnerability in the Forgot Password feature. The lack of correct configuration leads to recovery of the password reset link generated via the password reset functional... Read more
Affected Products : aisiem- EPSS Score: %1.78
- Published: Jun. 08, 2021
- Modified: Nov. 21, 2024
-
6.1
MEDIUMCVE-2021-28290
A cross-site scripting (XSS) vulnerability in Skoruba IdentityServer4.Admin before 2.0.0 via unencoded value passed to the data-secret-value parameter.... Read more
Affected Products : identityserver4.admin- EPSS Score: %0.21
- Published: May. 11, 2022
- Modified: Nov. 21, 2024
-
6.1
MEDIUMCVE-2021-28280
CSRF + Cross-site scripting (XSS) vulnerability in search.php in PHPFusion 9.03.110 allows remote attackers to inject arbitrary web script or HTML... Read more
Affected Products : phpfusion- EPSS Score: %0.30
- Published: Apr. 29, 2021
- Modified: Nov. 21, 2024