CVEs published in May 2021
2,381 vulnerabilities, 217 critical, 19 exploited.
- remotemouse emote remote mouseAn issue was discovered in Emote Remote Mouse through 4.0.0.0. It uses cleartext HTTP to check,...8.1 High
- remotemouse emote remote mouseAn issue was discovered in Emote Remote Mouse through 4.0.0.0. Remote unauthenticated users can...9.8 Critical
- remotemouse emote remote mouseAn issue was discovered in Emote Remote Mouse through 4.0.0.0. Authentication Bypass can occur...8.1 High
- remotemouse emote remote mouseAn issue was discovered in Emote Remote Mouse through 4.0.0.0. Attackers can retrieve recently...5.3 Medium
- remotemouse emote remote mouseAn issue was discovered in Emote Remote Mouse through 3.015. Attackers can close any running...5.3 Medium
- remotemouse emote remote mouseAn issue was discovered in Emote Remote Mouse through 4.0.0.0. Attackers can maximize or minimize...5.3 Medium
- ibm robotic process automation with automation anywhereIBM Robotic Process Automation with Automation Anywhere 11.0 could allow an attacker on the...5.4 Medium
- nim-lang nim, embysupport security +1 moreNim stdlib httpClient does not validate peer certificates by default5.9 Medium
- ti cc3100 software development kit, cc3200 software development kit, simplelink cc13x0 software development kit +4 more +6 moreAn integer overflow exists in the APIs of the host MCU while trying to connect to a WIFI network...7.8 High
- sabnzbdCreation of files outside the Download Folder through malicious PAR2 files4.3 Medium
- advantech wise-paas/rmm, wise-paas\/rmm +1 moreThe affected product allows attackers to obtain sensitive information from the WISE-PaaS...9.1 Critical
- eventlet, fedoraproject fedora +1 moreImproper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet5.3 Medium
- ti cc3100 software development kit, cc3200 software development kit, simplelink cc13x0 software development kit +4 more +6 moreThe affected product is vulnerable to stack-based buffer overflow while processing over-the-air...8.0 High
- ti cc3100 software development kit, cc3200 software development kit, simplelink cc13x0 software development kit +4 more +6 moreMultiple integer overflow issues exist while processing long domain names, which may allow an...9.8 Critical
- ti cc3100 software development kit, cc3200 software development kit, simplelink cc13x0 software development kit +4 more +6 moreThe affected product is vulnerable to an integer overflow while processing HTTP headers, which...9.8 Critical
- ti cc3100 software development kit, cc3200 software development kit, simplelink cc13x0 software development kit +4 more +6 moreThe affected product is vulnerable to integer overflow while parsing malformed over-the-air...7.2 High
- anymap project anymapIncorrect cast in anymap9.8 Critical
- avahiA flaw was found in avahi 0.8-5. A reachable assertion is present in...5.5 Medium
- proofpoint enterprise protectionProofpoint Enterprise Protection (PPS/PoD) before 8.17.0 contains a vulnerability that could...6.3 Medium
- vmware vrealize business for cloudVMware vRealize Business for Cloud 7.x prior to 7.6.0 contains a remote code execution...9.8 Critical
- livinglogic xist4cLivingLogic XIST4C before 0.107.8 allows XSS via login.htm, login.wihtm, or login-form.htm.6.1 Medium
- livinglogic xist4cLivingLogic XIST4C before 0.107.8 allows XSS via feedback.htm or feedback.wihtm.6.1 Medium
- paxtechnology paxstorePax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by XML External Entity (XXE)...6.5 Medium
- paxtechnology paxstorePax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by incorrect access control...7.1 High
- paxtechnology paxstorePax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by incorrect access control...8.1 High
- paxtechnology paxstorePax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by an information disclosure...6.5 Medium
- paxtechnology paxstorePax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by a token spoofing...8.2 High
- jun-he technology ltd. quan-fang-wei-tong-xun system, junhetec omnidirectional communication system +1 moreJun-He Technology Ltd. Quan-Fang-Wei-Tong-Xun system - Local File Inclusion6.5 Medium
- jun-he technology ltd. quan-fang-wei-tong-xun system, junhetec omnidirectional communication system +1 moreJun-He Technology Ltd. Quan-Fang-Wei-Tong-Xun system - Reflected XSS4.6 Medium
- jun-he technology ltd. erp pos, junhetec enterprise resource planning point of sale system +1 moreJun-He Technology Ltd. ERP POS - Stored XSS-24.6 Medium
- jun-he technology ltd. erp pos, junhetec enterprise resource planning point of sale system +1 moreJun-He Technology Ltd. ERP POS - Stored XSS-14.6 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +405 more +407 morePossible denial of service scenario due to improper handling of group management action frame in...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8096au firmware, aqt1000 firmware +402 more +404 moreBuffer overflow can occur due to improper validation of NDP application information length in...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +371 more +373 moreDouble free in video due to lack of input buffer length check in Snapdragon Auto, Snapdragon...7.3 High
- qualcomm, inc. snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, qualcomm apq8009w firmware, apq8017 firmware +412 more +414 morePossible integer overflow due to improper length check while flashing an image in Snapdragon...6.8 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm fsm10055 firmware, fsm10056 firmware +171 more +173 moreUse after free in camera If the threadmanager is being cleaned up while the worker thread is...6.8 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm ar8035 firmware, pm215 firmware +242 more +244 moreOut of bound write in logger due to prefix size is not validated while prepended to logging...5.9 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8017 firmware, apq8037 firmware +337 more +339 moreOut of bound read can happen in Widevine TA while copying data to buffer from user data due to...5.1 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +494 more +496 moreOut of bound write can occur in TZ command handler due to lack of validation of command ID in...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm aqt1000 firmware, ar8031 firmware +316 more +318 moreOut of bound write can occur in playready while processing command due to lack of input...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +398 more +400 moreBuffer over-read while unpacking the RTCP packet we may read extra byte if wrong length is...8.2 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +129 more +131 moreLocked memory can be unlocked and modified by non secure boot loader through improper system call...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +406 more +408 moreMemory corruption while processing crafted SDES packets due to improper length check in sdes...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, csrb31024 firmware +244 more +246 moreDenial of service in MODEM due to assert to the invalid configuration in Snapdragon Auto,...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon mobile, qualcomm csrb31024 firmware, pm3003a firmware +176 more +178 moreHistogram type KPI was teardown with the assumption of the existence of histogram binning info...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon mobile, qualcomm apq8009, apq8016 +84 more +86 morePotential UE reset while decoding a crafted Sib1 or SIB1 that schedules unsupported SIBs and can...7.5 High
- atlassian confluence serverAffected versions of Confluence Server before 7.11.0 allow attackers to identify internal hosts...4.3 Medium
- atlassian confluence server, confluence data center +1 moreAffected versions of Team Calendar in Confluence Server before 7.11.0 allow attackers to inject...5.4 Medium
- kde messagelibKDE Messagelib through 5.17.0 reveals cleartext of encrypted messages in some situations....6.5 Medium
- hashicorp vault-actionVault GitHub Action did not correctly mask multi-line secrets in output7.5 High
- Show moreLoading…