CVEs published in May 2021
2,381 vulnerabilities, 217 critical, 19 exploited.
- localstackCommand injection in LocalStack9.8 Critical
- localstackCross-site scripting in LocalStack6.1 Medium
- nsa emissaryA Cross-site scripting (XSS) vulnerability in the DocumentAction component of U.S. National...6.1 Medium
- nsa emissaryThe ConfigFileAction component of U.S. National Security Agency (NSA) Emissary 5.9.0 allows an...6.5 Medium
- nsa emissaryU.S. National Security Agency (NSA) Emissary 5.9.0 allows an authenticated user to upload...8.8 High
- nsa emissaryU.S. National Security Agency (NSA) Emissary 5.9.0 allows an authenticated user to delete...8.1 High
- nsa emissaryThe ConsoleAction component of U.S. National Security Agency (NSA) Emissary 5.9.0 allows a CSRF...8.8 High
- artica pandora fmsArtica Pandora FMS 742 allows unauthenticated attackers to perform Phar deserialization.9.8 Critical
- artica pandora fmsA SQL injection vulnerability in the pandora_console component of Artica Pandora FMS 742 allows...9.8 Critical
- artica pandora fmsA remote file inclusion vulnerability exists in Artica Pandora FMS 742, exploitable by the lowest...6.5 Medium
- open-emr openemrThe Patient Portal of OpenEMR 5.0.2.1 is affected by a incorrect access control system in portal...8.2 High
- open-emr openemrA SQL injection vulnerability exists (with user privileges) in library/custom_template/ajax_code...8.8 High
- open-emr openemrA Stored XSS vulnerability in interface/usergroup/usergroup_admin.php in OpenEMR before 5.0.2.1...4.8 Medium
- open-emr openemrA SQL injection vulnerability exists (with user privileges) in interface/forms/eye_mag/save.php...8.8 High
mediawikiDebianmediawiki - regression updateNo score- mozilla firefox, firefox for android +1 moreWhen Web Render components were destructed, a race condition could have caused undefined behavior...7.5 High
- veritystream msow solutionsPrimary Source Verification in VerityStream MSOW Solutions before 3.1.1 allows an anonymous...7.5 High
- fork-cms fork cmsCross-Site Request Forgery in forkcms8.8 High
- fork-cms fork cmsCross-site scripting in forkcms6.1 Medium
- coolkit ewelinkUnconstrained Web access to the device's private encryption key in the QR code pairing mode in...4.6 Medium
- hp edgeline infrastructure managerA security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also...9.8 Critical
- emlogemlog v5.3.1 and emlog v6.0.0 have a Remote Code Execution vulnerability due to upload of...9.8 Critical
- kennnyshiwa kennnyshiwa-cogsKennnyshiwa-cogs vulnerable to Remote Code Execution in Tickets Module6.5 Medium
- stormshield network securityStormshield SNS with versions before 3.7.18, 3.11.6 and 4.1.6 has a memory-management defect in...7.5 High
- ibm tivoli storage manager** UNSUPPORTED WHEN ASSIGNED ** The 'id' parameter of IBM Tivoli Storage Manager Version 5...7.0 High
- amazon open distroAn SSRF issue in Open Distro for Elasticsearch (ODFE) before 1.13.1.0 allows an existing...7.1 High
- puppycmsArbitrary File Deletion vulnerability in puppyCMS v5.1 allows remote malicious attackers to...7.5 High
- puppycmsRmote Code Execution (RCE) vulnerability in puppyCMS v5.1 due to insecure permissions, which...9.8 Critical
- puppycmsCross Site Request Forgery (CSRF) vulnerability in puppyCMS v5.1 that can change the admin's...6.5 Medium
- nightowlsp wdb-20 firmwareAn issue exists on NightOwl WDB-20-V2 WDB-20-V2_20190314 devices that allows an unauthenticated...7.5 High
- owasp modsecurityModSecurity 3.x before 3.0.4 mishandles key-value pair parsing, as demonstrated by a "string...5.3 Medium
- red hat tripleo-ansible, redhat openstack +1 moreA flaw was found in tripleo-ansible version as shipped in Red Hat Openstack 16.1. The Ansible log...7.5 High
- djangoproject django, fedoraproject fedora +1 moreHeader injection possible in Django6.1 Medium
- debian linux, linux kernel, fedoraproject fedora +2 morekernel/bpf/verifier.c in the Linux kernel through 5.12.1 performs undesirable speculative loads,...5.5 Medium
docassemblePyPIUnauthorized access through URL manipulationNo scorecom.vaadin:flow-serverMavenInsecure temporary directory usage in frontend build functionality of Vaadin 14 and 15-196.3 Medium- qemu, debian linux, redhat enterprise linux +2 moreA heap buffer overflow was found in the floppy disk emulator of QEMU up to 6.0.0 (including). It...6.1 Medium
- hongdian h8922 firmwareHongdian H8922 3.0.5 devices allow Directory Traversal. The /log_download.cgi log export handler...6.5 Medium
- hongdian h8922 firmwareHongdian H8922 3.0.5 devices allow the unprivileged guest user to read cli.conf (with the...5.5 Medium
- hongdian h8922 firmwareHongdian H8922 3.0.5 devices have an undocumented feature that allows access to a shell as a...9.8 Critical
- hongdian h8922 firmwareHongdian H8922 3.0.5 devices allow OS command injection via shell metacharacters into the ip...8.8 High
- ruby-lang rubyTempfile on Windows path traversal vulnerability7.5 High
- asus gt-ac2900 firmware, lyra mini firmware, routers +2 moreThe administrator application on ASUS GT-AC2900 devices before 3.0.0.4.386.42643 allows...9.8 Critical
- getdata project getdata, debian linux, fedoraproject fedora +2 moreA heap memory corruption problem (use after free) can be triggered in libgetdata v0.10.0 when...9.8 Critical
- strapiWeak Password Recovery Mechanism for Forgotten Password in Strapi8.1 High
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 13.8. GitLab...7.5 High
- gitlabAn issue has been discovered in GitLab affecting versions starting with 13.5 up to 13.9.7....4.3 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 11.6. Pull mirror...6.8 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2. When...5.3 Medium
- cisco sd-wan vmanageCisco SD-WAN vManage Information Disclosure Vulnerability5.3 Medium
- Show moreLoading…