CVEs published in March 2021
88 tracked CVEs from 6 vendors had their first vendor advisory published in March 2021: 15 critical, 51 high, 7 in CISA KEV. Newest first.
1 more from this month is covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2021-23007Medium
On BIG-IP versions 14.1.4 and 16.0.1.1
F5 · 1 advisory - Added
CVE-2021-23006Medium
On all 7.x and 6.x versions (fixed in 8.0.0), undisclosed BIG-IQ pages have a reflected cross-site scripting vulnerability
F5 · 1 advisory - Added
CVE-2021-23005Critical
BIG-IQ: On all 7.x and 6.x versions (fixed in 8.0.0)
F5 · 1 advisory - Added
CVE-2021-23004High
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.6, 12.1.x before…
F5 · 1 advisory - Added
CVE-2021-23003High
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.6, 12.1.x before…
F5 · 1 advisory - Added
CVE-2021-23002Medium
When using BIG-IP APM 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, or all…
F5 · 1 advisory - Added
CVE-2021-23001Medium
BIG-IP: On versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before…
F5 · 1 advisory - Added
CVE-2021-23000High
On BIG-IP versions 13.1.3.4-13.1.3.6 and 12.1.5.2, if the tmm.http.rfc.enforcement BigDB key is enabled in a BIG-IP system, or…
F5 · 1 advisory - Added
CVE-2021-22999High
On versions 15.0.x before 15.1.0 and 14.1.x before 14.1.4, the BIG-IP system provides an option to connect HTTP/2 clients to…
F5 · 1 advisory - Added
CVE-2021-22998Medium
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before…
F5 · 1 advisory - Added
CVE-2021-22997High
On all 7.x and 6.x versions (fixed in 8.0.0), BIG-IQ HA ElasticSearch service does not implement any form of authentication for…
F5 · 1 advisory - Added
CVE-2021-22996High
BIG-IQ: On all 7.x versions (fixed in 8.0.0)
F5 · 1 advisory - Added
CVE-2021-22994Medium
F5 · 1 advisory - Added
CVE-2020-5948Medium
F5 · 1 advisory - Added
CVE-2021-22993High
On BIG-IP Advanced WAF and BIG-IP ASM versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x…
F5 · 1 advisory - Added
CVE-2021-22991CriticalCISA KEV
F5 BIG-IP Traffic Management Microkernel Buffer Overflow
F5 · 1 advisory - Added
CVE-2021-21975UnratedCISA KEV
VMware Server Side Request Forgery in vRealize Operations Manager API
VMware · 1 advisory - Added
CVE-2021-21983Unrated
VMware vRealize Operations: Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an authenticated malicious actor with network access to the vRealize Operations Manager API can write files to arbitrary locations on the underlying photon operating system
VMware · 1 advisory - Added
CVE-2021-22995High
On all 7.x and 6.x versions (fixed in 8.0.0), BIG-IQ high availability (HA)
F5 · 1 advisory - Added
CVE-2021-22992Critical
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before…
F5 · 1 advisory - Added
CVE-2021-22990High
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before…
F5 · 1 advisory - Added
CVE-2021-22989Critical
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before…
F5 · 1 advisory - Added
CVE-2021-22987Critical
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before…
F5 · 1 advisory - Added
CVE-2021-22988High
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before…
F5 · 1 advisory - Added
CVE-2021-22986CriticalCISA KEV
F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability
F5 · 1 advisory - Added
CVE-2021-25265High
Sophos Connect: malicious website could execute code remotely in Sophos Connect Client before version 2.1.
Sophos · 1 advisory - Added
CVE-2021-26070High
Affected versions of Atlassian Jira Server and Data Center
Atlassian · 1 advisory - Added
CVE-2021-26069Medium
Affected versions of Atlassian Jira Server and Data Center
Atlassian · 1 advisory - Added
CVE-2021-27077High
Windows Win32k Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-27076High
Microsoft SharePoint Server Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2021-27070High
Windows 10 Update Assistant Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-27063High
Windows DNS Server Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2021-27052Medium
Microsoft SharePoint Server Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26901High
Windows Event Tracing Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26900High
Windows Win32k Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26899High
Windows UPnP Device Host Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26898High
Windows Event Tracing Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26897Critical
Windows DNS Server Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26896High
Windows DNS Server Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26895Critical
Windows DNS Server Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26894Critical
Windows DNS Server Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26893Critical
Windows DNS Server Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26892Medium
Windows Extensible Firmware Interface Security Feature Bypass Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26891High
Windows Container Execution Agent Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26890High
Application Virtualization Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26889High
Windows Update Stack Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26887High
Microsoft Windows Folder Redirection Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26886Medium
User Profile Service Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26884Medium
Windows Media Photo Codec Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26882High
Remote Access API Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26881High
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26880High
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26879High
Windows Network Address Translation (NAT) Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26878High
Windows Print Spooler Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26877Critical
Windows DNS Server Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26876High
OpenType Font Parsing Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26875High
Windows Win32k Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26874High
Windows Overlay Filter Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26873High
Windows User Profile Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26872High
Windows Event Tracing Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26870High
Windows Projected File System Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26869Medium
Windows ActiveX Installer Service Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26868High
Windows Graphics Component Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26867Critical
Windows Hyper-V Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26866High
Windows Update Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26865High
Windows Container Execution Agent Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26864High
Windows Virtual Registry Provider Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26863High
Windows Win32k Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26862High
Windows Installer Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26861High
Windows Graphics Component Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26860High
Windows App-V Overlay Filter Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-24107Medium
Windows Event Tracing Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2021-24104Medium
Microsoft SharePoint Server Spoofing Vulnerability
MS Server · 1 advisory - Added
CVE-2021-24095High
DirectX Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-24090High
Windows Error Reporting Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-1729High
Windows Update Stack Setup Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-1640High
Windows Print Spooler Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-27078Critical
Microsoft Exchange Server Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2021-27065HighCISA KEV
Microsoft Exchange Server Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26858HighCISA KEV
Microsoft Exchange Server Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26857HighCISA KEV
Microsoft Exchange Server Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26855CriticalCISA KEV
Microsoft Exchange Server Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26854Medium
Microsoft Exchange Server Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26412Critical
Microsoft Exchange Server Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2020-36240Medium
The ResourceDownloadRewriteRule class in Crowd before version 4.0.4, and from version 4.1.0 before 4.1.2 allowed unauthenticated…
Atlassian · 1 advisory - Added
CVE-2021-25329Unrated
Apache · 1 advisory - Added
CVE-2021-25122Unrated
Apache Tomcat h2c request mix-up
Apache · 1 advisory - Added
CVE-2020-9494Unrated
Apache · 1 advisory