CVEs published in May 2021
2,381 vulnerabilities, 217 critical, 19 exploited.
- elastic app searchElastic App Search versions after 7.11.0 and before 7.12.0 contain an XML External Entity...7.5 High
- elastic kibanaKibana versions before 7.12.1 contain a denial of service vulnerability was found in the webhook...6.5 Medium
- elastic logstash, elasticsearch +1 moreIn Logstash versions after 6.4.0 and before 6.8.15 and 7.12.0 a TLS certificate validation flaw...3.7 Low
- elastic elasticsearchExposure of Sensitive Information to an Unauthorized Actor in Elasticsearch5.3 Medium
- elastic kibanaIn Kibana versions before 7.12.0 and 6.8.15 a flaw in the session timeout was discovered where...3.5 Low
- elastic elasticsearchAPI information disclosure flaw in Elasticsearch5.3 Medium
- ibm jazz reporting serviceIBM Jazz Reporting Service 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to server-side request...6.5 Medium
- prosody, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Prosody before 0.11.9. It does not use a constant-time algorithm for...5.9 Medium
- prosody, debian linux, fedoraproject fedora +2 moreProsody before 0.11.9 allows Uncontrolled CPU Consumption via a flood of SSL/TLS renegotiation...7.5 High
- prosody, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Prosody before 0.11.9. The undocumented dialback_without_dialback...7.5 High
- prosody, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Prosody before 0.11.9. Default settings are susceptible to remote...7.5 High
- prosody, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Prosody before 0.11.9. The proxy65 component allows open access by...5.3 Medium
- sonicwall email security virtual applianceSonicWall Email Security Virtual Appliance version 10.0.9 and earlier versions contain a default...7.8 High
- zzcmsInsecure permissions issue in zzcms 201910 via the reset any user password in /one/getpassword.php.7.5 High
- redhat noobaa-operatorA flaw was found in noobaa-operator in versions before 5.7.0, where internal RPC AuthTokens...8.8 High
- articlecms project articlecmsA file upload issue exists in all versions of ArticleCMS which allows malicious users to getshell.9.8 Critical
- articlecms project articlecmsFile Upload vulnerability exists in ArticleCMS 1.0 via the image upload feature at /admin by...9.8 Critical
- weidmueller iot-gw30-4g-eu firmware, iot-gw30 firmware, uc20-wl2000-ac firmware +5 more +7 moreWEIDMUELLER: Accidentally open network port in u-controls and IoT-Gateways9.4 Critical
- wago 0852-0303, 0852-0303 firmware, 0852-1305 +7 more +9 moreWAGO: Managed Switches: Unauthorized creation of user accounts10.0 Critical
- wago 0852-0303, 0852-0303 firmware, 0852-1305 +7 more +9 moreWAGO: Managed Switches: Unauthorized access to password hashes7.5 High
- wago 0852-0303, 0852-0303 firmware, 0852-1305 +7 more +9 moreWAGO: Managed Switches: Unsecure Cookie settings5.3 Medium
- wago 0852-0303, 0852-0303 firmware, 0852-1305 +7 more +9 moreWAGO: Managed Switches: Storage of user credentials in a cookie5.3 Medium
- wago 0852-0303, 0852-0303 firmware, 0852-1305 +7 more +9 moreWAGO: Managed Switches: Reflected Cross-site Scripting8.8 High
- wago 0852-0303, 0852-0303 firmware, 0852-1305 +7 more +9 moreWAGO: Managed Switches: Exposure of sensitive information through directory listing5.3 Medium
- hilscher rcx rtos, pepperl+fuchs ethernet io modules ice1-16, ethernet io modules ice1-8 +8 more +10 moreHilscher rcX RTOS: Wrong handling of the UDP checksum8.6 High
- beckhoff ipc diagnostics ua server, twincat opc ua server, tf6100 +2 moreBECKHOFF: DoS-Vulnerability for TwinCAT OPC UA Server and IPC Diagnostics UA Server5.3 Medium
- c-ares, fedoraproject fedora +1 moreA possible use-after-free and double-free in c-ares lib version 1.16.0 if ares_destroy() is...3.3 Low
- red hat wildfly, redhat jboss-ejb-client, jboss enterprise application platform expansion pack +2 moreJBoss EJB Client information disclosure vulnerability4.3 Medium
- teradici pcoip agentAn attacker may cause a Denial of Service (DoS) in multiple versions of Teradici PCoIP Agent via...7.5 High
- teradici pcoip graphics agentTeradici PCoIP Graphics Agent for Windows prior to 21.03 does not validate NVENC.dll. An attacker...7.8 High
ipvsadmSUSESecurity update for ipvsadmNo scoredtcSUSESecurity update for dtcNo scoreibutilsSUSE,ibutils-uiSUSE +1 moreSecurity update for ibutilsNo score- amd sev/sev-es, epyc 7232p, epyc 7251 +63 more +65 moreAMD Secure Encrypted Virtualization7.2 High
- amd sev/sev-es, epyc 7232p, epyc 7251 +63 more +65 moreAMD Secure Encrypted Virtualization7.2 High
- blackberry unified endpoint managementAn Information Disclosure vulnerability in the Management Console component of BlackBerry UEM...5.3 Medium
- blackberry unified endpoint managementA Remote Code Execution vulnerability in the Management Console component of BlackBerry UEM...7.3 High
- blackberry unified endpoint managementA Denial of Service due to Improper Input Validation vulnerability in the Management Console...5.5 Medium
- mongodb inc. c# driver, mongodb c\# driver +1 moreMongoDB C# Driver may publish events containing authentication-related data to a command listener configured by an application4.2 Medium
- schedmd slurm, debian linux, fedoraproject fedora +2 moreSchedMD Slurm before 20.02.7 and 20.03.x through 20.11.x before 20.11.7 allows remote code...8.8 High
- qnap hybrid backup sync, qnap systems inc. hbs 1.3, hbs 2 +2 more +4 moreImproper Authorization Vulnerability in HBS 3 (Hybrid Backup Sync)10.0 Critical
- qnap malware removerCommand Injection Vulnerability in Malware Remover6.7 Medium
- qnap music stationImproper Access Control Vulnerability in Music Station7.1 High
- postgresql, redhat jboss enterprise application platform +1 moreA flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table,...6.5 Medium
- postgresqlA flaw was found in postgresql. Using an INSERT ... ON CONFLICT ... DO UPDATE command on a...6.5 Medium
- postgresql, redhat enterprise linux, jboss enterprise application platform +1 more +3 moreA flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17...8.8 High
- exiv2, fedoraproject fedora +1 moreUninitialized variable bug in Exiv23.6 Low
- sensiolabs symfony, fedoraproject fedora +1 morePrevent user enumeration using Guard or the new Authenticator-based Security5.3 Medium
- blackberry workspaces serverAn Authentication Bypass vulnerability in the SAML Authentication component of BlackBerry...8.8 High
- argo cd cd, argoproj argo cd +1 moreArgo CD leaked secret data into error messages and logs on invalid edits via UI5.9 Medium
- Show moreLoading…