CVEs published in May 2021
2,381 vulnerabilities, 217 critical, 19 exploited.
- unknown woolentor – woocommerce elementor addons + builder, hasthemes woolentor - woocommerce elementor addons \+ builder +1 moreWooLentor - WooCommerce Elementor Addons + Builder < 1.8.6 - Contributor+ Stored XSS5.4 Medium
- hasthemes ht mega, unknown ht mega – absolute addons for elementor page builder +1 moreHT Mega - Absolute Addons for Elementor Page Builder < 1.5.7 - Contributor+ Stored XSS5.4 Medium
- livemesh addons for elementor, unknown livemesh addons for elementor +1 moreLivemesh Addons for Elementor < 6.8 - Contributor+ Stored XSS5.4 Medium
- unknown elementor addon elementsElementor Addon Elements < 1.11.2 - Contributor+ Stored XSS5.4 Medium
- wpmet elements kit lite, elements kit pro, elements kit elementor addons +2 moreElementsKit and ElementsKit Pro < 2.2.0 - Contributor+ Stored XSS5.4 Medium
- leap13 premium addons for elementorPremium Addons for Elementor < 4.2.8 - Contributor+ Stored Cross-Site Scripting (XSS)5.4 Medium
- brainstorm force, nikhil chavan elementor – header, footer & blocks template, brainstormforce elementor - header\, footer \& blocks template +1 moreElementor - Header, Footer & Blocks Template < 1.5.8 - Contributor+ Stored XSS5.4 Medium
- unknown essential addons for elementorEssential Addons for Elementor < 4.5.4 - Contributor+ Stored Cross-Site Scripting (XSS)5.4 Medium
- jellyfinUnauthenticated GET requests through Remote Image endpoints5.8 Medium
- esri arcgis geoevent serverArcGIS GeoEvent Server has a Directory Traversal security vulnerability.8.6 High
- flow flow-server, vaadin flow, vaadin +2 moreInsecure temporary directory usage in frontend build functionality of Vaadin 14 and 15-196.3 Medium
- gnome libxml2, debian linux, fedoraproject fedora +18 more +20 moreNokogiri Implements libxml2 version vulnerable to use-after-free8.8 High
- gnome libxml2, debian linux, fedoraproject fedora +28 more +30 moreNokogiri contains libxml Out-of-bounds Write vulnerability8.6 High
- gnome libxml2, xmlsoft xmllint, debian linux +10 more +12 moreThere's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit...7.8 High
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.3 and 7.4 contains hard-coded credentials, such as a password or cryptographic...5.9 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows...6.1 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.3 and 7.4 may vulnerable to a XML External Entity Injection (XXE) attack when...7.1 High
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.3 and 7.4 when decompressing or verifying signature of zip files processes data...4.9 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.3 and 7.4 is vulnerable to insecure inter-deployment communication. An attacker...7.5 High
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.3 and 7.4 contains hard-coded credentials, such as a password or cryptographic...6.2 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.3 and 7.4 could disclose sensitive information about other domains which could...4.3 Medium
- esri arcgis earthArcGIS Earth has a File Parsing Directory Traversal Vulnerability7.8 High
- mutt, neomutt +1 moreMutt 1.11.0 through 2.0.x before 2.0.7 (and NeoMutt 2019-10-25 through 2021-05-04) has a ...9.1 Critical
- trend micro home network securityTrend Micro Home Network Security 6.5.599 and earlier is vulnerable to a file-parsing...7.5 High
- trend micro home network securityTrend Micro Home Network Security 6.5.599 and earlier is vulnerable to a file-parsing...7.5 High
- ewww image optimizerEWWW Image Optimizer before 2.8.5 allows remote command execution because it relies on a...10.0 Critical
- btcpayserver btcpay serverBTCPay Server through 1.0.7.0 suffers from a Stored Cross Site Scripting (XSS) vulnerability...5.4 Medium
- btcpayserver btcpay serverBTCPay Server through 1.0.7.0 could allow a remote attacker to obtain sensitive information,...5.3 Medium
- btcpayserver btcpay serverBTCPay Server through 1.0.7.0 could allow a remote attacker to obtain sensitive information,...5.3 Medium
- btcpayserver btcpay serverBTCPay Server through 1.0.7.0 suffers from directory traversal, which allows an attacker with...6.7 Medium
- btcpayserver btcpay serverBTCPay Server through 1.0.7.0 uses a weak method Next to produce pseudo-random values to generate...5.3 Medium
- secureauth impacket, fedoraproject fedora +1 morePath traversal in impacket9.8 Critical
- opensuse factoryvirtualbox: missing sticky bit for /etc/vbox allows local root exploit for members of vboxusers group7.8 High
- themegrill demo importerthemegrill-demo-importer before 1.6.2 does not require authentication for wiping the database,...9.1 Critical
- themegrill demo importerthemegrill-demo-importer before 1.6.3 allows CSRF, as demonstrated by wiping the database.8.8 High
- solarwinds serv-u ftp server, serv-u mft server +1 moreSolarWinds Serv-U before 15.1.6 Hotfix 3 is affected by Cross Site Scripting (XSS) via a...4.8 Medium
- solarwinds serv-u file serverSolarWinds Serv-U before 15.2 is affected by Cross Site Scripting (XSS) via the HTTP Host header.6.1 Medium
phpOSS-FuzzHeap-use-after-free in cleanup_live_varsNo scorelibyalOSS-FuzzGlobal-buffer-overflow in libfsext_inode_read_dataNo scorewasm3OSS-FuzzUNKNOWN WRITE in _finiNo scorezstdOSS-FuzzUNKNOWN READ in MEM_read32No scorelibyalOSS-FuzzUNKNOWN READ in libfsext_directory_entry_read_dataNo scoreexiftool-vendorednpmArbitrary code execution in ExifTool7.8 High- vaadin, vaadin vaadin-compatibility-server +1 moreServer session is not invalidated when logout() helper method of Authentication module is used in Vaadin 18-197.5 High
- centreon webInsecure Permissions in Centreon Web versions 19.10.18, 20.04.8, and 20.10.2 allows remote...6.5 Medium
- redis, fedoraproject fedora +1 moreVulnerability in the COPY command for large intsets7.5 High
- ibm flashsystem 900, flashsystem 900 firmware +1 moreIBM FlashSystem 900 1.5.2.9 and 1.6.1.3 user management GUI is vulnerable to stored cross-site...6.4 Medium
- iwt facesentry access control system firmwareiWT Ltd FaceSentry Access Control System 6.4.8 suffers from an authenticated OS command injection...8.8 High
- dell dbutil, dbutil driver +1 moreDell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead...8.8 High
- Show moreLoading…