CVE-2021-28477 - Visual Studio Code Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-28457, CVE-2021-28469, CVE-2021-28473, CVE-2021-28475.
Published: April 13, 2021; 4:15:21 PM -0400

V3.1: 7.8 HIGH
V2.0: 6.8 MEDIUM

CVE-2021-28475 - Visual Studio Code Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-28457, CVE-2021-28469, CVE-2021-28473, CVE-2021-28477.
Published: April 13, 2021; 4:15:21 PM -0400

V3.1: 7.8 HIGH
V2.0: 6.8 MEDIUM

CVE-2021-28473 - Visual Studio Code Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-28457, CVE-2021-28469, CVE-2021-28475, CVE-2021-28477.
Published: April 13, 2021; 4:15:21 PM -0400

V3.1: 7.8 HIGH
V2.0: 6.8 MEDIUM

CVE-2020-36120 - Buffer Overflow in the "sixel_encoder_encode_bytes" function of Libsixel v1.8.6 allows attackers to cause a Denial of Service (DoS).
Published: April 14, 2021; 10:15:13 AM -0400

V3.1: 7.5 HIGH
V2.0: 5.0 MEDIUM

CVE-2020-21087 - Cross Site Scripting (XSS) in X2Engine X2CRM v6.9 and older allows remote attackers to execute arbitrary code by injecting arbitrary web script or HTML via the "New Name" field of the "Rename a Module" tool.
Published: April 14, 2021; 10:15:13 AM -0400

V3.1: 6.1 MEDIUM
V2.0: 4.3 MEDIUM

CVE-2021-28353 - Remote Procedure Call Runtime Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-28327, CVE-2021-28329, CVE-2021-28330, CVE-2021-28331, CVE-2021-28332, CVE-2021-28333, CVE-2021-28334, CVE-2021-28335, CVE-2021-28336, CVE-2021-2... read CVE-2021-28353
Published: April 13, 2021; 4:15:18 PM -0400

V3.1: 8.8 HIGH
V2.0: 6.5 MEDIUM

CVE-2021-28355 - Remote Procedure Call Runtime Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-28327, CVE-2021-28329, CVE-2021-28330, CVE-2021-28331, CVE-2021-28332, CVE-2021-28333, CVE-2021-28334, CVE-2021-28335, CVE-2021-28336, CVE-2021-2... read CVE-2021-28355
Published: April 13, 2021; 4:15:18 PM -0400

V3.1: 8.8 HIGH
V2.0: 6.5 MEDIUM

CVE-2021-28354 - Remote Procedure Call Runtime Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-28327, CVE-2021-28329, CVE-2021-28330, CVE-2021-28331, CVE-2021-28332, CVE-2021-28333, CVE-2021-28334, CVE-2021-28335, CVE-2021-28336, CVE-2021-2... read CVE-2021-28354
Published: April 13, 2021; 4:15:18 PM -0400

V3.1: 8.8 HIGH
V2.0: 6.5 MEDIUM

CVE-2021-28435 - Windows Event Tracing Information Disclosure Vulnerability
Published: April 13, 2021; 4:15:19 PM -0400

V3.1: 5.5 MEDIUM
V2.0: 2.1 LOW

CVE-2021-24024 - A clear text storage of sensitive information into log file vulnerability in FortiADCManager 5.3.0 and below, 5.2.1 and below and FortiADC 5.3.7 and below may allow a remote authenticated attacker to read other local users' password in log files.
Published: April 12, 2021; 11:15:14 AM -0400

V3.1: 6.5 MEDIUM
V2.0: 4.0 MEDIUM

CVE-2021-24226 - In the AccessAlly WordPress plugin before 3.5.7, the file "resource/frontend/product/product-shortcode.php" responsible for the [accessally_order_form] shortcode is dumping serialize($_SERVER), which contains all environment variables. The leakage... read CVE-2021-24226
Published: April 12, 2021; 10:15:15 AM -0400

V3.1: 7.5 HIGH
V2.0: 5.0 MEDIUM

CVE-2021-28352 - Remote Procedure Call Runtime Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-28327, CVE-2021-28329, CVE-2021-28330, CVE-2021-28331, CVE-2021-28332, CVE-2021-28333, CVE-2021-28334, CVE-2021-28335, CVE-2021-28336, CVE-2021-2... read CVE-2021-28352
Published: April 13, 2021; 4:15:18 PM -0400

V3.1: 8.8 HIGH
V2.0: 6.5 MEDIUM

CVE-2021-28346 - Remote Procedure Call Runtime Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-28327, CVE-2021-28329, CVE-2021-28330, CVE-2021-28331, CVE-2021-28332, CVE-2021-28333, CVE-2021-28334, CVE-2021-28335, CVE-2021-28336, CVE-2021-2... read CVE-2021-28346
Published: April 13, 2021; 4:15:18 PM -0400

V3.1: 8.8 HIGH
V2.0: 6.5 MEDIUM

CVE-2021-28357 - Remote Procedure Call Runtime Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-28327, CVE-2021-28329, CVE-2021-28330, CVE-2021-28331, CVE-2021-28332, CVE-2021-28333, CVE-2021-28334, CVE-2021-28335, CVE-2021-28336, CVE-2021-2... read CVE-2021-28357
Published: April 13, 2021; 4:15:19 PM -0400

V3.1: 8.8 HIGH
V2.0: 6.5 MEDIUM

CVE-2021-28356 - Remote Procedure Call Runtime Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-28327, CVE-2021-28329, CVE-2021-28330, CVE-2021-28331, CVE-2021-28332, CVE-2021-28333, CVE-2021-28334, CVE-2021-28335, CVE-2021-28336, CVE-2021-2... read CVE-2021-28356
Published: April 13, 2021; 4:15:18 PM -0400

V3.1: 8.8 HIGH
V2.0: 6.5 MEDIUM

CVE-2021-1407 - Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session... read CVE-2021-1407
Published: April 08, 2021; 12:15:12 AM -0400

V3.1: 6.1 MEDIUM
V2.0: 4.3 MEDIUM

CVE-2021-28686 - AsIO2_64.sys and AsIO2_32.sys in ASUS GPUTweak II before 2.3.0.3 allow low-privileged users to trigger a stack-based buffer overflow. This could enable low-privileged users to achieve Denial of Service via a DeviceIoControl.
Published: April 08, 2021; 7:15:12 AM -0400

V3.1: 5.5 MEDIUM
V2.0: 2.1 LOW

CVE-2021-1409 - Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session... read CVE-2021-1409
Published: April 08, 2021; 12:15:12 AM -0400

V3.1: 6.1 MEDIUM
V2.0: 4.3 MEDIUM

CVE-2021-1408 - Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unified Communications Manager Session... read CVE-2021-1408
Published: April 08, 2021; 12:15:12 AM -0400

V3.1: 6.1 MEDIUM
V2.0: 4.3 MEDIUM

CVE-2021-27600 - SAP Manufacturing Execution (System Rules), versions - 15.1, 15.2, 15.3, 15.4, allows an authorized attacker to embed malicious code into HTTP parameter and send it to the server because SAP Manufacturing Execution (System Rules) tab does not suff... read CVE-2021-27600
Published: April 13, 2021; 3:15:15 PM -0400

V3.1: 5.4 MEDIUM
V2.0: 3.5 LOW