| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2020-8375 | — | 0.00 | — | — | Apr 13, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none | ||
| CVE-2020-8374 | — | 0.00 | — | — | Apr 13, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none | ||
| CVE-2020-8373 | — | 0.00 | — | — | Apr 13, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none | ||
| CVE-2020-8372 | — | 0.00 | — | — | Apr 13, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none | ||
| CVE-2020-8371 | — | 0.00 | — | — | Apr 13, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none | ||
| CVE-2020-8370 | — | 0.00 | — | — | Apr 13, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none | ||
| CVE-2020-8369 | — | 0.00 | — | — | Apr 13, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none | ||
| CVE-2020-8368 | — | 0.00 | — | — | Apr 13, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none | ||
| CVE-2020-8367 | — | 0.00 | — | — | Apr 13, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none | ||
| CVE-2020-8366 | — | 0.00 | — | — | Apr 13, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none | ||
| CVE-2020-8365 | — | 0.00 | — | — | Apr 13, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none | ||
| CVE-2020-8364 | — | 0.00 | — | — | Apr 13, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none | ||
| CVE-2020-8363 | — | 0.00 | — | — | Apr 13, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none | ||
| CVE-2020-8362 | — | 0.00 | — | — | Apr 13, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none | ||
| CVE-2020-8361 | — | 0.00 | — | — | Apr 13, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none | ||
| CVE-2020-8360 | — | 0.00 | — | — | Apr 13, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none | ||
| CVE-2020-8359 | — | 0.00 | — | — | Apr 13, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none | ||
| CVE-2020-8358 | — | 0.00 | — | — | Apr 13, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none | ||
| CVE-2019-10881 | Cri | 0.64 | 9.8 | 0.01 | Apr 13, 2021 | Xerox AltaLink B8045/B8055/B8065/B8075/B8090, AltaLink C8030/C8035/C8045/C8055/C8070 with software releases before 103.xxx.030.32000 includes two accounts with weak hard-coded passwords which can be exploited and allow unauthorized access which cannot be disabled. | ||
| CVE-2021-29440 | Hig | 0.60 | 8.4 | 0.30 | Apr 13, 2021 | Grav is a file based Web-platform. Twig processing of static pages can be enabled in the front matter by any administrative user allowed to create or edit pages. As the Twig processor runs unsandboxed, this behavior can be used to gain arbitrary code execution and elevate… | ||
| CVE-2021-29439 | Hig | 0.47 | 7.2 | 0.03 | Apr 13, 2021 | The Grav admin plugin prior to version 1.10.11 does not correctly verify caller's privileges. As a consequence, users with the permission `admin.login` can install third-party plugins and their dependencies. By installing the right plugin, an attacker can obtain an arbitrary… | ||
| CVE-2021-29438 | Med | 0.30 | 4.6 | 0.01 | Apr 13, 2021 | The Nextcloud dialogs library (npm package @nextcloud/dialogs) before 3.1.2 insufficiently escaped text input passed to a toast. If your application displays toasts with user-supplied input, this could lead to a XSS vulnerability. The vulnerability has been patched in version… | ||
| CVE-2021-29437 | Hig | 0.52 | 8.0 | 0.01 | Apr 13, 2021 | ScratchOAuth2 is an Oauth implementation for Scratch. Any ScratchOAuth2-related data normally accessible and modifiable by a user can be read and modified by a third party. 1. Scratch user visits 3rd party site. 2. 3rd party site asks user for Scratch username. 3. 3rd party site… | ||
| CVE-2021-29436 | Med | 0.35 | 5.4 | 0.01 | Apr 13, 2021 | Anuko Time Tracker is an open source, web-based time tracking application written in PHP. In Time Tracker before version 1.19.27.5431 a Cross site request forgery (CSRF) vulnerability existed. The nature of CSRF is that a logged on user may be tricked by social engineering to… | ||
| CVE-2021-29435 | Hig | 0.46 | 8.1 | 0.01 | Apr 13, 2021 | trestle-auth is an authentication plugin for the Trestle admin framework. A vulnerability in trestle-auth versions 0.4.0 and 0.4.1 allows an attacker to create a form that will bypass Rails' built-in CSRF protection when submitted by a victim with a trestle-auth admin session.… | ||
| CVE-2021-29428 | Hig | 0.57 | 8.8 | 0.01 | Apr 13, 2021 | In Gradle before version 7.0, on Unix-like systems, the system temporary directory can be created with open permissions that allow multiple users to create and delete files within it. Gradle builds could be vulnerable to a local privilege escalation from an attacker quickly… | ||
| CVE-2021-29427 | Hig | 0.52 | 8.0 | 0.01 | Apr 13, 2021 | In Gradle from version 5.1 and before version 7.0 there is a vulnerability which can lead to information disclosure and/or dependency poisoning. Repository content filtering is a security control Gradle introduced to help users specify what repositories are used to resolve… | ||
| CVE-2021-28483 | Cri | 0.59 | 9.0 | 0.01 | Apr 13, 2021 | Microsoft Exchange Server Remote Code Execution Vulnerability | ||
| CVE-2021-28482 | Hig | 0.64 | 8.8 | 0.83 | Apr 13, 2021 | Microsoft Exchange Server Remote Code Execution Vulnerability | ||
| CVE-2021-28481 | Cri | 0.67 | 9.8 | 0.36 | Apr 13, 2021 | Microsoft Exchange Server Remote Code Execution Vulnerability | ||
| CVE-2021-28480 | Cri | 0.69 | 9.8 | 0.71 | Apr 13, 2021 | Microsoft Exchange Server Remote Code Execution Vulnerability | ||
| CVE-2021-28477 | Hig | 0.46 | 7.0 | 0.02 | Apr 13, 2021 | Visual Studio Code Remote Code Execution Vulnerability | ||
| CVE-2021-28475 | Hig | 0.51 | 7.8 | 0.03 | Apr 13, 2021 | Visual Studio Code Remote Code Execution Vulnerability | ||
| CVE-2021-28473 | Hig | 0.51 | 7.8 | 0.03 | Apr 13, 2021 | Visual Studio Code Remote Code Execution Vulnerability | ||
| CVE-2021-28472 | Hig | 0.56 | 7.8 | 0.62 | Apr 13, 2021 | Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability | ||
| CVE-2021-28471 | Hig | 0.51 | 7.8 | 0.04 | Apr 13, 2021 | Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability | ||
| CVE-2021-28470 | Hig | 0.51 | 7.8 | 0.02 | Apr 13, 2021 | Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution Vulnerability | ||
| CVE-2021-28469 | Hig | 0.51 | 7.8 | 0.03 | Apr 13, 2021 | Visual Studio Code Remote Code Execution Vulnerability | ||
| CVE-2021-28468 | Hig | 0.51 | 7.8 | 0.06 | Apr 13, 2021 | Raw Image Extension Remote Code Execution Vulnerability | ||
| CVE-2021-28466 | Hig | 0.51 | 7.8 | 0.02 | Apr 13, 2021 | Raw Image Extension Remote Code Execution Vulnerability | ||
| CVE-2021-28464 | Hig | 0.51 | 7.8 | 0.02 | Apr 13, 2021 | VP9 Video Extensions Remote Code Execution Vulnerability | ||
| CVE-2021-28460 | Hig | 0.53 | 8.1 | 0.01 | Apr 13, 2021 | Azure Sphere Unsigned Code Execution Vulnerability | ||
| CVE-2021-28459 | Med | 0.40 | 6.1 | 0.02 | Apr 13, 2021 | Azure DevOps Server Spoofing Vulnerability | ||
| CVE-2021-28458 | Hig | 0.44 | 7.8 | 0.02 | Apr 13, 2021 | Azure ms-rest-nodeauth Library Elevation of Privilege Vulnerability | ||
| CVE-2021-28457 | Hig | 0.51 | 7.8 | 0.03 | Apr 13, 2021 | Visual Studio Code Remote Code Execution Vulnerability | ||
| CVE-2021-28456 | Med | 0.36 | 5.5 | 0.04 | Apr 13, 2021 | Microsoft Excel Information Disclosure Vulnerability | ||
| CVE-2021-28454 | Hig | 0.51 | 7.8 | 0.03 | Apr 13, 2021 | Microsoft Excel Remote Code Execution Vulnerability | ||
| CVE-2021-28453 | Hig | 0.51 | 7.8 | 0.04 | Apr 13, 2021 | Microsoft Word Remote Code Execution Vulnerability | ||
| CVE-2021-28452 | Hig | 0.46 | 7.1 | 0.01 | Apr 13, 2021 | Microsoft Outlook Memory Corruption Vulnerability | ||
| CVE-2021-28451 | Hig | 0.51 | 7.8 | 0.03 | Apr 13, 2021 | Microsoft Excel Remote Code Execution Vulnerability |
- CVE-2020-8375Apr 13, 2021risk 0.00cvss —epss —
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
- CVE-2020-8374Apr 13, 2021risk 0.00cvss —epss —
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
- CVE-2020-8373Apr 13, 2021risk 0.00cvss —epss —
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
- CVE-2020-8372Apr 13, 2021risk 0.00cvss —epss —
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
- CVE-2020-8371Apr 13, 2021risk 0.00cvss —epss —
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
- CVE-2020-8370Apr 13, 2021risk 0.00cvss —epss —
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
- CVE-2020-8369Apr 13, 2021risk 0.00cvss —epss —
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
- CVE-2020-8368Apr 13, 2021risk 0.00cvss —epss —
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
- CVE-2020-8367Apr 13, 2021risk 0.00cvss —epss —
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
- CVE-2020-8366Apr 13, 2021risk 0.00cvss —epss —
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
- CVE-2020-8365Apr 13, 2021risk 0.00cvss —epss —
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
- CVE-2020-8364Apr 13, 2021risk 0.00cvss —epss —
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
- CVE-2020-8363Apr 13, 2021risk 0.00cvss —epss —
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
- CVE-2020-8362Apr 13, 2021risk 0.00cvss —epss —
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
- CVE-2020-8361Apr 13, 2021risk 0.00cvss —epss —
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
- CVE-2020-8360Apr 13, 2021risk 0.00cvss —epss —
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
- CVE-2020-8359Apr 13, 2021risk 0.00cvss —epss —
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
- CVE-2020-8358Apr 13, 2021risk 0.00cvss —epss —
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
- risk 0.64cvss 9.8epss 0.01
Xerox AltaLink B8045/B8055/B8065/B8075/B8090, AltaLink C8030/C8035/C8045/C8055/C8070 with software releases before 103.xxx.030.32000 includes two accounts with weak hard-coded passwords which can be exploited and allow unauthorized access which cannot be disabled.
- risk 0.60cvss 8.4epss 0.30
Grav is a file based Web-platform. Twig processing of static pages can be enabled in the front matter by any administrative user allowed to create or edit pages. As the Twig processor runs unsandboxed, this behavior can be used to gain arbitrary code execution and elevate…
- risk 0.47cvss 7.2epss 0.03
The Grav admin plugin prior to version 1.10.11 does not correctly verify caller's privileges. As a consequence, users with the permission `admin.login` can install third-party plugins and their dependencies. By installing the right plugin, an attacker can obtain an arbitrary…
- risk 0.30cvss 4.6epss 0.01
The Nextcloud dialogs library (npm package @nextcloud/dialogs) before 3.1.2 insufficiently escaped text input passed to a toast. If your application displays toasts with user-supplied input, this could lead to a XSS vulnerability. The vulnerability has been patched in version…
- risk 0.52cvss 8.0epss 0.01
ScratchOAuth2 is an Oauth implementation for Scratch. Any ScratchOAuth2-related data normally accessible and modifiable by a user can be read and modified by a third party. 1. Scratch user visits 3rd party site. 2. 3rd party site asks user for Scratch username. 3. 3rd party site…
- risk 0.35cvss 5.4epss 0.01
Anuko Time Tracker is an open source, web-based time tracking application written in PHP. In Time Tracker before version 1.19.27.5431 a Cross site request forgery (CSRF) vulnerability existed. The nature of CSRF is that a logged on user may be tricked by social engineering to…
- risk 0.46cvss 8.1epss 0.01
trestle-auth is an authentication plugin for the Trestle admin framework. A vulnerability in trestle-auth versions 0.4.0 and 0.4.1 allows an attacker to create a form that will bypass Rails' built-in CSRF protection when submitted by a victim with a trestle-auth admin session.…
- risk 0.57cvss 8.8epss 0.01
In Gradle before version 7.0, on Unix-like systems, the system temporary directory can be created with open permissions that allow multiple users to create and delete files within it. Gradle builds could be vulnerable to a local privilege escalation from an attacker quickly…
- risk 0.52cvss 8.0epss 0.01
In Gradle from version 5.1 and before version 7.0 there is a vulnerability which can lead to information disclosure and/or dependency poisoning. Repository content filtering is a security control Gradle introduced to help users specify what repositories are used to resolve…
- risk 0.59cvss 9.0epss 0.01
Microsoft Exchange Server Remote Code Execution Vulnerability
- risk 0.64cvss 8.8epss 0.83
Microsoft Exchange Server Remote Code Execution Vulnerability
- risk 0.67cvss 9.8epss 0.36
Microsoft Exchange Server Remote Code Execution Vulnerability
- risk 0.69cvss 9.8epss 0.71
Microsoft Exchange Server Remote Code Execution Vulnerability
- risk 0.46cvss 7.0epss 0.02
Visual Studio Code Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.03
Visual Studio Code Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.03
Visual Studio Code Remote Code Execution Vulnerability
- risk 0.56cvss 7.8epss 0.62
Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.04
Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.02
Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.03
Visual Studio Code Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.06
Raw Image Extension Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.02
Raw Image Extension Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.02
VP9 Video Extensions Remote Code Execution Vulnerability
- risk 0.53cvss 8.1epss 0.01
Azure Sphere Unsigned Code Execution Vulnerability
- risk 0.40cvss 6.1epss 0.02
Azure DevOps Server Spoofing Vulnerability
- risk 0.44cvss 7.8epss 0.02
Azure ms-rest-nodeauth Library Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.03
Visual Studio Code Remote Code Execution Vulnerability
- risk 0.36cvss 5.5epss 0.04
Microsoft Excel Information Disclosure Vulnerability
- risk 0.51cvss 7.8epss 0.03
Microsoft Excel Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.04
Microsoft Word Remote Code Execution Vulnerability
- risk 0.46cvss 7.1epss 0.01
Microsoft Outlook Memory Corruption Vulnerability
- risk 0.51cvss 7.8epss 0.03
Microsoft Excel Remote Code Execution Vulnerability