CVEs published in April 2021
17 tracked CVEs from 6 vendors had their first vendor advisory published in April 2021: 1 critical, 2 high, 4 in CISA KEV. Newest first.
- Added
CVE-2021-27933Medium
pfSense: pfSense 2.5.0 allows XSS via the services_wol_edit.php Description field.
pfSense · 1 advisory - Added
CVE-2021-22205CriticalCISA KEV
GitLab Community and Enterprise Editions Remote Code Execution Vulnerability
GitLab · 1 advisory - Added
CVE-2021-30356High
denial of service vulnerability was reported in Check Point Identity Agent before R81.018.0000, which could
Check Point · 1 advisory - Added
CVE-2021-20023UnratedCISA KEV
SonicWall Email Security Path Traversal Vulnerability
SonicWall · 1 advisory - Added
CVE-2021-26074Medium
Broken Authentication in Atlassian Connect Spring Boot (ACSB) from version 1.1.0 before version 2.1.3: Atlassian Connect Spring…
Atlassian · 1 advisory - Added
CVE-2021-26073High
Broken Authentication in Atlassian Connect Express (ACE) from version 3.0.2 before version 6.6.0: Atlassian Connect Express is a…
Atlassian · 1 advisory - Added
The jira.editor.user.mode cookie set by the Jira Editor Plugin in Jira Server and Data Center before version 8.5.12, from…
Atlassian · 1 advisory - Added
CVE-2021-26075Medium
The Jira importers plugin AttachTemporaryFile rest resource in Jira Server and Data Center before version 8.5.12, from version…
Atlassian · 1 advisory - Added
CVE-2020-36288Medium
The issue navigation and search view in Jira Server and Data Center before version 8.5.12, from version 8.6.0 before version…
Atlassian · 1 advisory - Added
CVE-2021-29425Unrated
Possible limited path traversal vulnerabily in Apache Commons IO
Apache · 1 advisory - Added
CVE-2021-20022UnratedCISA KEV
SonicWall Email Security Unrestricted Upload of File Vulnerability
SonicWall · 1 advisory - Added
CVE-2021-20021UnratedCISA KEV
SonicWall Email Security Improper Privilege Management Vulnerability
SonicWall · 1 advisory - Added
CVE-2020-36287Medium
The dashboard gadgets preference resource of the Atlassian gadgets plugin used in Jira Server and Jira Data Center before…
Atlassian · 1 advisory - Added
CVE-2021-26072Medium
The WidgetConnector plugin in Confluence Server and Confluence Data Center before version 5.8.6 allowed remote attackers to…
Atlassian · 1 advisory - Added
Jira Software: The SetFeatureEnabled.jspa resource in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version…
Atlassian · 1 advisory - Added
CVE-2020-36286Medium
The membersOf JQL search function in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version…
Atlassian · 1 advisory - Added
CVE-2020-36238Medium
The /rest/api/1.0/render resource in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version…
Atlassian · 1 advisory