CVEs published in May 2021
2,381 vulnerabilities, 217 critical, 19 exploited.
- microsoft internet explorer 11, internet explorer 9, internet explorer +2 moreScripting Engine Memory Corruption Vulnerability7.5 High
- microsoft sharepoint server, sharepoint enterprise server 2016, sharepoint foundation 2013 service pack 1 +2 more +4 moreMicrosoft SharePoint Server Spoofing Vulnerability4.6 Medium
- forestblog project forestblogCross Site Request Forgery (CSRF) Vulnerability in ForestBlog latest version via the website...8.8 High
mariadb-10.1Ubuntu,mariadb-10.3Ubuntu +1 moremariadb-10.1, mariadb-10.3, mariadb-10.5 vulnerabilitiesNo score- debian linux, linux kernel, arista c-65 firmware +33 more +35 moreAn issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and WPA3 implementations...5.4 Medium
- arista c-100 firmware, c-110 firmware, c-120 firmware +55 more +57 moreAn issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WPA, WPA2, and WPA3...5.3 Medium
- samsung galaxy i9305 firmware, siemens 6gk5763-1al00-3aa0 firmware, 6gk5763-1al00-3da0 firmware +18 more +20 moreAn issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3...6.5 Medium
- arista c-100 firmware, c-110 firmware, c-120 firmware +46 more +48 moreAn issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3...6.5 Medium
- alfa awus036h firmware, arista c-65 firmware, c-75 firmware +26 more +28 moreAn issue was discovered in the ALFA Windows 10 driver 1030.36.604 for AWUS036ACH. The WEP, WPA,...6.5 Medium
- openbsdAn issue was discovered in the kernel in OpenBSD 6.6. The WEP, WPA, WPA2, and WPA3...5.3 Medium
- alfa awus036h firmware, cisco ip conference phone 8832 firmware, ip phone 6861 firmware +115 more +117 moreAn issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi...6.5 Medium
- alfa awus036h firmware, arista c-100 firmware, c-110 firmware +214 more +216 moreAn issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA,...6.5 Medium
- netbsd, arista c-100 firmware, c-110 firmware +199 more +201 moreAn issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames...5.3 Medium
- linux kernel, canonical ubuntu linux +1 moreLinux kernel io_uring PROVIDE_BUFFERS MAX_RW_COUNT bypass7.8 High
- linux kernel, canonical ubuntu linux +1 moreLinux kernel eBPF bitwise ops ALU32 bounds tracking7.8 High
- linux kernel, canonical ubuntu linux +1 moreLinux kernel eBPF RINGBUF map oversized allocation7.8 High
- puma, debian linux +1 moreKeepalive Connections Causing Denial Of Service in puma7.5 High
- express-cart project express-cartCross-site Scripting in express-cart4.8 Medium
- asynkron wireInsecure deserialization in Wire9.1 Critical
- ibm openpages grc platformIBM OpenPages GRC Platform 8.1 could allow a remote attacker to obtain sensitive information when...4.3 Medium
- ibm openpages grc platformIBM OpenPages GRC Platform 8.1 is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- element-hq synapse, fedoraproject fedora +1 moreDenial of service in Matrix Synapse3.7 Low
- mikrotik routerosMikrotik RouterOs before 6.47 (stable tree) suffers from a memory corruption vulnerability in the...6.5 Medium
- mikrotik routerosMikrotik RouterOs before 6.47 (stable tree) suffers from a memory corruption vulnerability in the...6.5 Medium
- sap commerce, sap se commerce (backoffice search) +1 moreSAP Commerce (Backoffice Search), versions - 1808, 1811, 1905, 2005, 2011, allows a low...6.5 Medium
- sap netweaver process integration, sap se process integration (integration builder framework) +1 moreThe Integration Builder Framework of SAP Process Integration versions - 7.10, 7.11, 7.20, 7.30, 7...4.9 Medium
- sap netweaver process integration, sap se process integration (integration builder framework) +1 moreThe Integration Builder Framework of SAP Process Integration versions - 7.10, 7.11, 7.20, 7.30, 7...4.9 Medium
- sap business one, business-one-hana-chef-cookbook, sap se business one, version for sap hana (cookbooks) +2 moreUnder certain conditions, SAP Business One Hana Chef Cookbook, versions - 8.82, 9.0, 9.1, 9.2, 9...7.8 High
- sap business one, business-one-hana-chef-cookbook, sap se business one, version for sap hana (cookbooks) +2 moreSAP Business One Hana Chef Cookbook, versions - 8.82, 9.0, 9.1, 9.2, 9.3, 10.0, used to install...7.3 High
- sap chef business-one-cookbook, sap se business one (cookbooks) +1 moreUnder certain conditions, SAP Business One Chef cookbook, version - 9.2, 9.3, 10.0, used to...7.8 High
- sap gui for windowsIn specific situations SAP GUI for Windows, versions - 7.60, 7.70 forwards a user to specific...3.4 Low
- sap se netweaver as abap, sap netweaver application server abap +1 moreSAP NetWeaver AS ABAP, versions - 700, 701, 702, 730, 731, allow a high privileged attacker to...8.2 High
- jenkins xcode integration, jenkins project xcode integration plugin +1 moreXML external entity (XXE) attacks in Jenkins Xcode integration Plugin7.1 High
- jenkins p4, jenkins project p4 plugin +1 moreCross-Site Request Forgery in Jenkins P4 Plugin7.1 High
- jenkins p4, jenkins project p4 plugin +1 moreMissing Authorization in Jenkins P4 plugin4.3 Medium
- jenkins xray - test management for jira, jenkins project xray - test management for jira plugin +1 moreMissing Authorization in jenkins xray-connector4.3 Medium
- jenkins xray - test management for jira, jenkins project xray - test management for jira plugin +1 moreCSRF vulnerability in Jenkins Xray - Test Management for Jira Plugin allows capturing credentials7.1 High
- jenkins s3 publisher, jenkins project s3 publisher plugin +1 moreMissing Authorization in Jenkins S3 publisher Plugin4.3 Medium
- jenkins s3 publisher, jenkins project s3 publisher plugin +1 moreMissing Authorization in Jenkins S3 publisher Plugin4.3 Medium
- jenkins dashboard view, jenkins project dashboard view plugin +1 moreCross-site Scripting in Jenkins Dashboard View Plugin5.4 Medium
- jenkins credentials, jenkins project credentials plugin +1 moreCross-Site Request Forgery in Jenkins Credentials Plugin6.1 Medium
- sisinformatik sis-rewe goSIS SIS-REWE Go before 7.7 SP17 allows XSS: rewe/prod/web/index.php (affected parameters are...6.1 Medium
- octoprintOctoPrint API Error Messages vulnerable to XSS6.1 Medium
- octoprintOctoPrint Incorrect Access Control6.5 Medium
- vmware workspace one unified endpoint managementVMware Workspace one UEM console (2102 prior to 21.2.0.8, 2101 prior to 21.1.0.14, 2011 prior to...6.1 Medium
- kamalkhan kk star ratingsCross Site Scripting (XSS) vulnerability in the kk Star Ratings plugin before 4.1.5.6.1 Medium
- jetbrains webstormIn JetBrains WebStorm before 2021.1, code execution without user confirmation was possible for...9.8 Critical
- jetbrains webstormIn JetBrains WebStorm before 2021.1, HTTP requests were used instead of HTTPS.7.5 High
- jetbrains upsourceIn JetBrains UpSource before 2020.1.1883, application passwords were not revoked correctly7.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.4, OS command injection leading to remote code execution was...9.8 Critical
- Show moreLoading…