CVEs published in May 2021
2,381 vulnerabilities, 217 critical, 19 exploited.
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.4 on Windows, arbitrary code execution on TeamCity Server was...9.8 Critical
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.3, insufficient checks of the redirect_uri were made during...7.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.3, account takeover was potentially possible during a...8.8 High
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.3, reflected XSS was possible on several pages.6.1 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.3, information disclosure via SSRF was possible.7.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.3, stored XSS was possible on several pages.5.4 Medium
evm-corecrates.ioMemory over-allocation in evm-coreNo score- jetbrains teamcityIn JetBrains TeamCity before 2020.2.3, argument injection leading to remote code execution was...9.8 Critical
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.2, stored XSS on a tests page was possible.5.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.2, permission checks for changing TeamCity plugins were...5.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.2, audit logs were not sufficient when an administrator...2.7 Low
- jetbrains teamcityInformation disclosure in the TeamCity plugin for IntelliJ before 2020.2.2.85899 was possible...3.3 Low
- jetbrains teamcityIn the TeamCity IntelliJ plugin before 2020.2.2.85899, DoS was possible.7.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.2, XSS was potentially possible on the test history page.6.1 Medium
- jetbrains pycharmIn JetBrains PyCharm before 2020.3.4, local code execution was possible because of insufficient...7.8 High
- jetbrains youtrackIn JetBrains YouTrack before 2020.6.8801, information disclosure in an issue preview was possible.7.5 High
- jetbrains youtrackIn JetBrains YouTrack before 2020.6.6600, access control during the exporting of issues was...7.5 High
- jetbrains youtrackIn JetBrains YouTrack before 2021.1.9819, a pull request's title was sanitized insufficiently,...6.1 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2020.6.6441, stored XSS was possible via an issue attachment.5.4 Medium
- jetbrains hubIn JetBrains Hub before 2021.1.13079, two-factor authentication wasn't enabled properly for the...7.5 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2021.1, DoS was possible because of unbounded resource allocation.7.5 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA 2020.3.3, local code execution was possible because of insufficient...7.8 High
shimSUSESecurity update for shimNo score- jetbrains intellij ideaIn IntelliJ IDEA before 2020.3.3, XXE was possible, leading to information disclosure.7.5 High
- jetbrains code with meIn JetBrains Code With Me bundled to the compatible IDE versions before 2021.1, a client could...5.3 Medium
- jetbrains code with meIn JetBrains Code With Me bundled to the compatible IDEs before version 2021.1, the client could...8.8 High
- open source openclinic ga, openclinic ga project ga +1 moreAn exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5...6.4 Medium
- open source openclinic ga, openclinic ga project ga +1 moreAn exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5...6.4 Medium
- open source openclinic ga, openclinic ga project ga +1 moreAn exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5...6.4 Medium
- open source openclinic ga, openclinic ga project ga +1 moreAn exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5...6.4 Medium
- open source openclinic ga, openclinic ga project ga +1 moreAn exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5...6.4 Medium
drbd-utilsSUSESecurity update for drbd-utilsNo scoredrbd-utilsSUSESecurity update for drbd-utilsNo scoredrbd-utilsSUSESecurity update for drbd-utilsNo score- intelligent global technology ltd igt+, igt\+ project igt\+ +1 moreIntelligent global technology Ltd, igt+ - DOM-based Cross-Site Scripting5.4 Medium
- riyalab co., ltd. cloudisoRiyaLab Co., Ltd. CloudISO - Stored XSS5.4 Medium
fluent-bitOSS-FuzzHeap-double-free in flb_freeNo scorecpython3OSS-FuzzHeap-buffer-overflow in skip_to_next_entryNo score- linux kernel, fedoraproject fedora +1 moreIn the Linux kernel 5.11 through 5.12.2, isotp_setsockopt in net/can/isotp.c allows privilege...7.8 High
- xfce thunarAn issue was discovered in Thunar before 4.16.7 and 4.17.x before 4.17.2. When called with a...9.8 Critical
- djvulibre project djvulibre, debian linux +1 moreA flaw was found in djvulibre-3.5.28 and earlier. A heap buffer overflow in function DJVU:...7.8 High
- djvulibre project djvulibre, debian linux +1 moreA flaw was found in djvulibre-3.5.28 and earlier. An out of bounds read in function DJVU:...7.8 High
- djvulibre project djvulibre, debian linux +1 moreA flaw was found in djvulibre-3.5.28 and earlier. An integer overflow in function render() in...7.8 High
- djvulibre project djvulibre, debian linux +1 moreA flaw was found in djvulibre-3.5.28 and earlier. An out of bounds write in function DJVU:...7.8 High
- ieee 802.11, arista c-100 firmware, c-110 firmware +217 more +219 moreThe 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired...3.5 Low
- ieee 802.11, arista c-100 firmware, c-110 firmware +165 more +167 moreThe 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired...2.6 Low
- ieee 802.11, arista c-200 firmware, c-230 firmware +21 more +23 moreThe 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired...3.5 Low
- kyocera d-copia253mf plus firmwareA directory traversal vulnerability exists in Kyocera Printer d-COPIA253MF plus. Successful...7.5 High
- yzmcmsIn YzmCMS 5.6, XSS was discovered in member/member_content/init.html via the SRC attribute of an...6.1 Medium
- yzmcmsIn YzmCMS 5.6, stored XSS exists via the common/static/plugin/ueditor/1.4.3.3/php/controller.php...5.4 Medium
- Show moreLoading…