CVEs published in May 2021
2,381 vulnerabilities, 217 critical, 19 exploited.
- 5none nonecmsCross-site scripting (XSS) vulnerability in static/admin/js/kindeditor/plugins/multiimage/images...6.1 Medium
- 5none nonecmsCross-site scripting (XSS) vulnerability in admin/nav/add.html in noneCMS v1.3.0 allows remote...5.4 Medium
- 5none nonecmsCross-site scripting (XSS) vulnerability in admin/article/add.html in noneCMS v1.3.0 allows...5.4 Medium
- 5none nonecmsNoneCMS v1.3 has a CSRF vulnerability in public/index.php/admin/nav/add.html, as demonstrated by...6.1 Medium
- yubico yubihsm-shellAn issue was discovered in the _send_secure_msg() function of Yubico yubihsm-shell through 2.0.3....4.4 Medium
- debian linux, linux kernel, netapp cloud backup +8 more +10 morenet/bluetooth/hci_request.c in the Linux kernel through 5.12.2 has a race condition for removal...7.0 High
- fhir hapi fhirUncontrolled Resource Consumption in JPA Server in HAPI FHIR5.3 Medium
- openapi-generator openapi generator, openapitools openapi-generator +1 moreCreation of Temporary File in Directory with Insecure Permissions in auto-generated Java, Scala code6.2 Medium
- openscadAn out-of-bounds write vulnerability exists in the import_stl.cc:import_stl() functionality of...8.8 High
- hotels server project serverCross Site Scripting (XSS) in Hotels_Server v1.0 allows remote attackers to execute arbitrary...6.1 Medium
- open source openclinic ga, openclinic ga project ga +1 moreAn exploitable SQL injection vulnerability exists in ‘manageServiceStocks.jsp’ page of OpenClinic...6.4 Medium
- openapi-generator openapi generator, openapitools openapi-generator +1 moreCreation of Temporary File in Directory with Insecure Permissions in the OpenAPI-Generator online generator9.3 Critical
- openclinic ga project gaAn exploitable SQL injection vulnerability exists in ‘quickFile.jsp’ page of OpenClinic GA 5.173...6.4 Medium
monitoring-plugins-smartopenSUSESecurity update for monitoring-plugins-smartNo score- open source openclinic ga, openclinic ga project ga +1 moreA number of exploitable SQL injection vulnerabilities exists in ‘patientslist.do’ page of...6.4 Medium
- open source openclinic ga, openclinic ga project ga +1 moreA number of exploitable SQL injection vulnerabilities exists in ‘patientslist.do’ page of...6.4 Medium
- open source openclinic ga, openclinic ga project ga +1 moreA number of exploitable SQL injection vulnerabilities exists in ‘patientslist.do’ page of...6.4 Medium
- invoiceplaneIn InvoicePlane 1.5.11, the upload feature discloses the full path of the file upload directory.5.3 Medium
- phpokA Cross Site Request Forgery (CSRF) vulnerability exists in PHPOK 5.2.060 via admin.php?c=admin&f...8.8 High
- retke laggrons-dumb-cogs, warnsystem project warnsystem +1 moreRemote code execution in the WarnSystem module of Laggrons-Dumb-Cogs7.3 High
- dav-cogs project dav-cogsRemote code execution in ticketer8.1 High
- ibm cloud pak for securityIBM Cloud Pak for Security (CP4S) 1.5.0.0 and 1.5.0.1 is vulnerable to cross-site scripting. This...4.3 Medium
- ibm control deskIBM Control Desk 7.6.1.2 and 7.6.1.3 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- ibm cloud pak for securityIBM Cloud Pak for Security (CP4S) 1.5.0.0 and 1.5.0.1 could allow a user to obtain sensitive...4.8 Medium
- systemd, fedoraproject fedora, netapp active iq unified manager +4 more +6 moreAn exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP...6.1 Medium
- foxit, foxitsoftware foxit reader +1 moreA use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader,...8.8 High
- f5 big-ip apm, big-ip access policy manager +1 moreOn BIG-IP APM versions 15.1.x before 15.1.3, 14.1.x before 14.1.4.1, 13.1.x before 13.1.4, and...5.3 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreOn BIG-IP 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.0.8 through 13.1.3.6, and all...7.2 High
- f5 big-ip advanced web application firewall, big-ip application security manager +1 moreOn versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, and 14.1.x before 14.1.4, BIG-IP...8.8 High
- f5 big-ip application security managerOn versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before...7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreOn BIG-IP version 16.0.x before 16.0.1.1 and 15.1.x before 15.1.3, malformed HTTP/2 requests may...7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreOn BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, and 13.1.x...8.2 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreOn BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x...7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreOn versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13...7.5 High
- f5 big-ip apm, big-ip access policy manager +1 moreOn version 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, 12.1.x before 12.1.6...9.8 Critical
- cyrus imap, fedoraproject fedora +1 moreCyrus IMAP before 3.2.7, and 3.3.x and 3.4.x before 3.4.1, allows remote authenticated users to...4.3 Medium
- couchbase serverAn issue was discovered in Couchbase Server before 6.0.5, 6.1.x through 6.5.x before 6.5.2, and 6...4.4 Medium
- hp ilo amplifier packPotential security vulnerabilities have been identified in HPE iLO Amplifier Pack using bootstrap...9.8 Critical
- windscribeIn Windscribe v1.83 Build 20, 'WindscribeService' has an Unquoted Service Path that facilitates...7.8 High
- deltaww cncsoft screeneditorDelta Electronics' CNCSoft ScreenEditor in versions prior to v1.01.30 could allow the corruption...7.8 High
- fortinet fortinacA privilege escalation vulnerability in FortiNAC version below 8.8.2 may allow an admin user to...6.3 Medium
- trend micro im securityA weak session token authentication bypass vulnerability in Trend Micro IM Security 1.6 and 1.6.5...8.1 High
- moxa vport 06ec-2v26m firmware, vport 06ec-2v36m-ct-t firmware, vport 06ec-2v36m-ct firmware +13 more +15 moreAn integer underflow was discovered in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series,...7.5 High
- moxa vport 06ec-2v26m firmware, vport 06ec-2v36m-ct-t firmware, vport 06ec-2v36m-ct firmware +13 more +15 moreImproper validation of the ChassisID TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V...7.5 High
- moxa vport 06ec-2v26m firmware, vport 06ec-2v36m-ct-t firmware, vport 06ec-2v36m-ct firmware +13 more +15 moreImproper validation of the ChassisID TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V...7.5 High
- moxa vport 06ec-2v26m firmware, vport 06ec-2v36m-ct-t firmware, vport 06ec-2v36m-ct firmware +13 more +15 moreImproper validation of the length field of LLDP-MED TLV in userdisk/vport_lldpd in Moxa Camera...9.1 Critical
- moxa vport 06ec-2v26m firmware, vport 06ec-2v36m-ct-t firmware, vport 06ec-2v36m-ct firmware +13 more +15 moreImproper validation of the length field of LLDP-MED TLV in userdisk/vport_lldpd in Moxa Camera...9.1 Critical
- ec-cubeEC-CUBE Cross-site scripting vulnerability6.1 Medium
- agenziaentrate desktop telematicoAgenzia delle Entrate Desktop Telematico 1.0.0 contacts the jws.agenziaentrate.it server over...5.3 Medium
- mit universal turing machineInsufficient input validation in the Marvin Minsky 1967 implementation of the Universal Turing...7.8 High
- Show moreLoading…