CVEs published in May 2021
2,381 vulnerabilities, 217 critical, 19 exploited.
- debian linux, linux kernel, fedoraproject fedora +7 more +9 moreLinux kernel llcp_sock_bind/connect use-after-free7.8 High
- deskproDeskpro Cloud Platform and on-premise 2020.2.3.48207 from 2020-07-30 contains a cross-site...5.4 Medium
- laobancmsCross Site Scripting (XSS) in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by...4.8 Medium
- evm project evmMemory over-allocation in evm crate6.5 Medium
- dhcms project dhcmsAn Information Disclosure vulnerability exists in dhcms 2017-09-18 when entering invalid...5.3 Medium
- dhcms project dhcmsA Cross SIte Scripting (XSS) vulnerability exists in Dhcms 2017-09-18 in guestbook via the...6.1 Medium
drupal/ctoolsPackagistChaos tool suite (ctools) module provides a number of APIs and extensions for Drupal, it's 8.x-3.x branch is a start from scratch to evaluate the features of ctools that didn't make it into Drupal Cor…No score- eng knowageKnowage Suite 7.3 is vulnerable to unauthenticated reflected cross-site scripting (XSS). An...6.1 Medium
- eng knowageKnowage Suite 7.3 is vulnerable to Stored Client-Side Template Injection in '/knowage/restful...5.4 Medium
drupal/facetsPackagistThis module enables you to add customizable facets on search pages, from core search or searches provided by Search API. The module doesn't sufficiently filter all output in certain circumstances. Thi…No score- eng knowageKnowage Suite 7.3 is vulnerable to Stored Cross-Site Scripting (XSS). An attacker can inject...5.4 Medium
- eng knowageKnowage Suite 7.3 is vulnerable to Stored Cross-Site Scripting (XSS). An attacker can inject...5.4 Medium
drupal/gutenbergPackagistThis module provides a new UI experience for node editing using the Gutenberg Editor library. The module did not correctly validate access rules in certain situations allowing anonymous users to delet…No score- specotech web viewerSpeco Web Viewer through 2021-05-12 allows Directory Traversal via GET request for a URI with /.....7.5 High
- uxper goloAn Arbitrary File Upload vulnerability was discovered in the Golo Laravel theme v 1.1.5.9.8 Critical
- antisip exosip2A NULL pointer dereference vulnerability exists in eXcall_api.c in Antisip eXosip2 through 5.2.0...7.5 High
- trend micro housecall for home networks, trend micro, inc. micro housecall for home networks +1 moreAn incorrect permission vulnerability in the product installer folders for Trend Micro HouseCall...7.3 High
- trend micro housecall for home networks, trend micro, inc. micro housecall for home networks +1 moreAn incorrect permission vulnerability in the product installer for Trend Micro HouseCall for Home...7.3 High
- smartstoreAn issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1. Views/PrivateMessages...9.8 Critical
- smartstoreAn issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1. Views/Boards/Partials...9.8 Critical
- keycloakTemporary Directory Hijacking Vulnerability in Keycloak7.3 High
- theforeman smart proxy shell hooksAn improper authorization handling flaw was found in Foreman. The Shellhooks plugin for the smart...6.1 Medium
- mendix database replicationA vulnerability has been identified in Mendix Database Replication (All versions < V7.0.1)....4.3 Medium
- mendix excel importer, siemens mendix excel importer module +1 moreA vulnerability has been identified in Mendix Excel Importer Module (All versions < V9.0.3)....4.3 Medium
- siemens tecnomatix plant simulationA vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The...7.8 High
- siemens tecnomatix plant simulationA vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The...7.8 High
- siemens tecnomatix plant simulationA vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The...7.8 High
- siemens simatic hmi comfort outdoor panels v15 7\" & 15\" (incl. siplus variants), simatic hmi comfort outdoor panels v16 7\" & 15\" (incl. siplus variants), simatic hmi comfort panels v15 4\" - 22\" (incl. siplus variants) +31 more +33 moreA vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels 7\" & 15\" (incl....7.5 High
- siemens simatic hmi comfort outdoor panels v15 7\" & 15\" (incl. siplus variants), simatic hmi comfort outdoor panels v16 7\" & 15\" (incl. siplus variants), simatic hmi comfort panels v15 4\" - 22\" (incl. siplus variants) +31 more +33 moreA vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels 7\" & 15\" (incl....7.5 High
- siemens simatic hmi comfort outdoor panels v15 7\" & 15\" (incl. siplus variants), simatic hmi comfort outdoor panels v16 7\" & 15\" (incl. siplus variants), simatic hmi comfort panels v15 4\" - 22\" (incl. siplus variants) +31 more +33 moreA vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels 7\" & 15\" (incl....9.8 Critical
- siemens simatic hmi comfort outdoor panels v15 7\" & 15\" (incl. siplus variants), simatic hmi comfort outdoor panels v16 7\" & 15\" (incl. siplus variants), simatic hmi comfort panels v15 4\" - 22\" (incl. siplus variants) +31 more +33 moreA vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels 7\" & 15\" (incl....7.5 High
- siemens simatic hmi comfort outdoor panels v15 7\" & 15\" (incl. siplus variants), simatic hmi comfort outdoor panels v16 7\" & 15\" (incl. siplus variants), simatic hmi comfort panels v15 4\" - 22\" (incl. siplus variants) +15 more +17 moreA vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels 7\" & 15\" (incl....7.5 High
- siemens simatic hmi comfort outdoor panels v15 7\" & 15\" (incl. siplus variants), simatic hmi comfort outdoor panels v16 7\" & 15\" (incl. siplus variants), simatic hmi comfort panels v15 4\" - 22\" (incl. siplus variants) +15 more +17 moreA vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels 7\" & 15\" (incl....7.5 High
- siemens simatic hmi comfort outdoor panels v15 7\" & 15\" (incl. siplus variants), simatic hmi comfort outdoor panels v16 7\" & 15\" (incl. siplus variants), simatic hmi comfort panels v15 4\" - 22\" (incl. siplus variants) +15 more +17 moreA vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels 7\" & 15\" (incl....7.5 High
- siemens scalance xm-400 firmware, scalance xm408-4c firmware, scalance xm408-4c l3 firmware +8 more +10 moreA vulnerability has been identified in SCALANCE XM-400 Family (All versions < V6.4), SCALANCE XR...7.5 High
- siemens simatic net cp 343-1 advanced (incl. siplus variants), simatic net cp 343-1 lean (incl. siplus variants), simatic net cp 343-1 standard (incl. siplus variants) +3 more +5 moreA vulnerability has been identified in SIMATIC NET CP 343-1 Advanced (incl. SIPLUS variants) (All...7.5 High
- siemens simatic hmi comfort panels 1st generation (incl. siplus variants), simatic hmi ktp mobile panels, simatic hmi comfort panels firmware +1 more +3 moreA vulnerability has been identified in SIMATIC HMI Comfort Panels 1st Generation (incl. SIPLUS...5.3 Medium
- codologic codoforumA SQL Injection vulnerability in get_topic_info() in sys/CODOF/Forum/Topic.php in Codoforum...9.8 Critical
- windriver vxworks, oracle communications eagle +1 moreAn issue was discovered in Wind River VxWorks 7. The memory allocator has a possible integer...9.8 Critical
xenSUSESecurity update for xenNo scorepngcheckMageiaUpdated pngcheck packages fix a security vulnerabilityNo score- mcafee endpoint security for linux threat prevention, mcafee,llc mcafee endpoint security (ens) for linux +1 moreBy exploiting a time of check to time of use (TOCTOU) race condition during the Endpoint Security...8.2 High
- mcafee total protection, mcafee,llc mcafee total protection (mtp) +1 morePrivilege Escalation vulnerability in McAfee Total Protection (MTP)7.8 High
- mcafee total protection, mcafee,llc mcafee total protection (mtp) +1 morePrivilege Escalation vulnerability in McAfee Total Protection (MTP)7.8 High
- atlassian data center, jira, jira server +1 more +3 moreAffected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to...5.3 Medium
libeccOSS-FuzzUse-of-uninitialized-value in nn_check_initializedNo score- imagemagickA flaw was found in ImageMagick in versions before 7.0.11, where a division by zero...7.5 High
- zzzcms zzzphpzzzcms zzzphp before 2.0.4 allows remote attackers to execute arbitrary OS commands by placing...9.8 Critical
- solarwinds serv-uSolarWinds Serv-U before 15.2.3 mishandles the user-supplied SenderEmail parameter.5.4 Medium
- zebra fx9500 firmware** UNSUPPORTED WHEN ASSIGNED ** An issue was discovered on Zebra (formerly Motorola Solutions)...9.8 Critical
- Show moreLoading…