CVEs published in May 2021
2,381 vulnerabilities, 217 critical, 19 exploited.
- aomedia, fedoraproject fedora +1 moreaom_image.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap.9.8 Critical
- python, oracle communications cloud native core automated test suite, communications cloud native core binding support function +3 more +5 moreImproper input validation of octal strings in Python stdlib ipaddress 3.10 and below allows...9.8 Critical
- linux kernel, fedoraproject fedora, netapp cloud backup +16 more +18 moreA flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the...7.1 High
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7. GitLab...3.1 Low
- projectworlds online book store project in phpSQL Injection vulnerability in Online Book Store v1.0 via the publisher parameter to edit_book...9.8 Critical
- chamilo lmsChamilo LMS 1.11.10 does not properly manage privileges which could allow a user with Sessions...4.9 Medium
- projectworlds online book store project in phpArbitrary File Upload vulnerability in Online Book Store v1.0 in admin_add.php, which may lead to...9.8 Critical
- chamilo lmsChamilo LMS 1.11.10 is affected by Cross Site Request Forgery (CSRF) via the edit_user function...8.8 High
- projectworlds online book store project in phpSQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to admin_delete...9.8 Critical
- projectworlds online book store project in phpIncorrect Access Control vulnerability in Online Book Store v1.0 via admin_verify.php, which...9.8 Critical
- projectworlds online book store project in phpSQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to book.php...9.8 Critical
- projectworlds online book store project in phpSQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to admin_edit...9.8 Critical
- projectworlds online book store project in phpSQL Injection vulnerability in Online Book Store v1.0 via the pubid parameter to bookPerPub.php,...9.8 Critical
- projectworlds online book store project in phpSQL Injection vulnerability in Online Book Store v1.0 via the isbn parameter to edit_book.php,...9.8 Critical
- rails https://github.com/rails/rails, rubyonrails rails +1 morePossible DoS Vulnerability in Action Controller Token Authentication7.5 High
- debian linux, rails https://github.com/rails/rails, rubyonrails actionpack page-caching +1 more +3 moreAction Pack contains Information Disclosure / Unintended Method Execution vulnerability7.5 High
- rails https://github.com/rails/rails, rubyonrails rails +1 morePossible Open Redirect Vulnerability in Action Pack6.1 Medium
- rubyonrails rails, rails https://github.com/rails/rails +1 moreDenial of Service in Action Dispatch7.5 High
- college publisher import project publisher import, unknown college publisher import +1 moreCollege Publisher Import <= 0.1 - Arbitrary File Upload to RCE7.2 High
- classyfrieds project classyfriedsClassyfrieds <= 3.8 - Authenticated Arbitrary File Upload to RCE8.8 High
- unknown event bannerEvent Banner <= 1.3 - Arbitrary File Upload to RCE7.2 High
- business directory team directory plugin – easy listing directories for wordpress, strategy11team business directory plugin – easy listing directories for wordpress, strategy11 business directory plugin - easy listing directories +2 moreBusiness Directory Plugin < 5.11.2 - Arbitrary Payment History Update4.3 Medium
- business directory team directory plugin – easy listing directories for wordpress, strategy11team business directory plugin – easy listing directories for wordpress, strategy11 business directory plugin - easy listing directories +2 moreBusiness Directory Plugin < 5.11.2 - Authenticated Stored Cross-Site Scripting5.4 Medium
- business directory team directory plugin – easy listing directories for wordpress, strategy11team business directory plugin – easy listing directories for wordpress, strategy11 business directory plugin - easy listing directories +2 moreBusiness Directory Plugin < 5.11.2 - Arbitrary Listing Export6.5 Medium
- business directory team directory plugin – easy listing directories for wordpress, strategy11team business directory plugin – easy listing directories for wordpress, strategy11 business directory plugin - easy listing directories +2 moreBusiness Directory Plugin < 5.11.1 - Authenticated PHP4 Upload to RCE7.2 High
- mooveagency contact form check testerContact Form Check Tester <= 1.0.2 - Broken Access Control to Cross-Site Scripting (XSS)5.4 Medium
- purethemes workscout, workscout core +1 moreWorkScout Core < 1.3.4 - Authenticated Stored XSS & XFS5.4 Medium
- trumani stop spammersStop Spammers < 2021.9 - Reflected Cross-Site Scripting (XSS)6.1 Medium
- bitorbit wpbakery page builder (visual composer) clipboard, wpbakery page builder clipboard project page builder clipboard +1 moreWPBakery Page Builder Clipboard < 4.5.8 - Unauthorised Arbitrary License Options Update6.5 Medium
- bitorbit wpbakery page builder (visual composer) clipboard, wpbakery page builder clipboard project page builder clipboard +1 moreWPBakery Page Builder Clipboard < 4.5.6 - Subscriber+ Stored Cross-Site Scripting (XSS)5.4 Medium
- imagements project imagementsImagements <= 1.2.5 - Unauthenticated Arbitrary File Upload to RCE9.8 Critical
- daggerhart openid connect generic clientOpenID Connect Generic Client 3.8.0-3.8.1 - Reflected Cross Site Scripting (XSS) via Login Error6.1 Medium
- business directory team directory plugin – easy listing directories for wordpress, strategy11team business directory plugin – easy listing directories for wordpress, strategy11 business directory plugin - easy listing directories +2 moreBusiness Directory Plugin < 5.11 - Arbitrary File Upload to RCE8.8 High
- business directory team directory plugin – easy listing directories for wordpress, strategy11team business directory plugin – easy listing directories for wordpress, strategy11 business directory plugin - easy listing directories +2 moreBusiness Directory Plugin < 5.11.1 - Arbitrary Add/Edit/Delete Form Field to Stored XSS8.8 High
- osgeo mapserver, fedoraproject fedora +1 moreMapServer before 7.0.8, 7.1.x and 7.2.x before 7.2.3, 7.3.x and 7.4.x before 7.4.5, and 7.5.x and...5.3 Medium
- imagely nextgen gallery, unknown nextgen gallery pro +1 moreNextGEN Gallery Pro < 3.1.11 - Reflected Cross-Site Scripting (XSS)6.1 Medium
- supsystic contact form by supsystic, contact form +1 moreContact Form by Supsystic < 1.7.15 - Reflected Cross-Site scripting (XSS)6.1 Medium
- supsystic popup, popup by supsystic +1 morePopup by Supsystic < 1.10.5 - Reflected Cross-Site scripting (XSS)6.1 Medium
- supsystic ultimate maps by supsystic, ultimate maps +1 moreUltimate Maps by Supsystic < 1.2.5 - Reflected Cross-Site scripting (XSS)6.1 Medium
- cleversoft clever addons for elementorClever Addons for Elementor < 2.1.0 - Contributor+ Stored XSS5.4 Medium
- codeinitiator fitness calculatorsFitness Calculators < 1.9.6 - Cross-Site Request Forgery to Cross-Site Scripting (XSS)4.3 Medium
- brainstorm force ultimate addons for elementorUltimate Addons for Elementor < 1.30.0 - Contributor+ Stored XSS5.4 Medium
- detheme dethemekit for elementorDethemeKit For Elementor < 1.5.5.5 - Contributor+ Stored XSS5.4 Medium
- shaonsina sina extension for elementorSina Extension for Elementor < 3.3.12 - Contributor+ Stored XSS5.4 Medium
- crocoblock jetwidgets for elementorJetWidgets For Elementor < 1.0.9 - Contributor+ Stored XSS5.4 Medium
- shamsbd71 all-in-one addons for elementor – widgetkit, themesgrove all-in-one addons for elementor +1 moreAll-in-One Addons for Elementor - WidgetKit < 2.3.10 - Contributor+ Stored XSS5.4 Medium
- posimyth the plus addons for elementor page builder liteThe Plus Addons for Elementor Page Builder Lite < 2.0.6 - Contributor+ Stored XSS5.4 Medium
- apollo13themes rife elementor extensions & templates, rife elementor extensions \& templates +1 moreRife Elementor Extensions & Templates < 1.1.6 - Contributor+ Stored XSS5.4 Medium
- blocksera image hover effects – elementor addon, image hover effects +1 moreImage Hover Effects - Elementor Addon < 1.3.4 - Contributor+ Stored XSS5.4 Medium
- ideabox powerpack addons for elementorPowerPack Addons for Elementor < 2.3.2 - Contributor+ Stored XSS5.4 Medium
- Show moreLoading…