CVEs published in May 2021
2,381 vulnerabilities, 217 critical, 19 exploited.
- clogica seo redirection plugin, unknown seo redirection plugin – 301 redirect manager +1 moreSEO Redirection < 6.4 - Authenticated Stored Cross-Site Scripting (XSS)4.8 Medium
- clogica all 404 redirect to homepageAll 404 Redirect to Homepage < 1.21 - Authenticated Reflected Cross-Site Scripting (XSS)5.4 Medium
- unknown 404 seo redirection, clogica seo redirection plugin +1 more404 SEO Redirection <= 1.3 - Reflected Cross-Site Scripting (XSS)6.1 Medium
- unknown 404 seo redirection, clogica all 404 redirect to homepage +1 more404 SEO Redirection <= 1.3 - CSRF to Stored Cross-Site Scripting (XSS)6.5 Medium
- automattic woocommerceWoocommerce < 5.2.0 - Authenticated Stored Cross-Site Scripting (XSS)4.8 Medium
- givewp, givewp – donation plugin and fundraising platform, stellarwp givewp – donation plugin and fundraising platform +2 moreGive WP < 2.10.4 - Authenticated Stored Cross-Site Scripting (XSS)4.8 Medium
- boostifythemes gotoGoto < 2.1 - Unauthenticated Blind SQL Injection9.8 Critical
- catkin redi restaurant reservationReDi Restaurant Reservations < 21.0426 - Unauthenticated Stored Cross-Site Scripting (XSS)6.1 Medium
- unknown spam protection, antispam, firewall by cleantalk, cleantalk spam protection\, antispam\, firewall +1 moreTime-based Blind SQL Injection in Spam protection, AntiSpam, FireWall by CleanTalk < 5.153.47.5 High
- wedevs happy addons for elementor, happy addons pro for elementor +1 moreHappy Addons for Elementor Free < 2.24.0 and Pro < 1.17.0 - Contributor+ Stored XSS5.4 Medium
- de-baat store locator plus, store locator plus® locator plus for wordpress +1 moreStore Locator Plus <= 5.5.15 - Unauthenticated Stored Cross-Site Scripting (XSS)6.1 Medium
- de-baat store locator plus, store locator plus for wordpress, store locator plus® locator plus for wordpress +2 moreStore Locator Plus <= 5.5.14 - Authenticated Privilege Escalation8.8 High
- acymailing, acymailing newsletter via smtp, sendinblue, sendgrid, mailgun - acymailing smtp newsletter +1 moreAcyMailing < 7.5.0 - Unauthenticated Open Redirect6.1 Medium
- sitel cap/prx, sitel-sa cap\/prx firmware +1 moreSITEL CAP/PRX information exposure6.5 Medium
- sitel cap/prx, sitel-sa cap\/prx firmware +1 moreSITEL CAP/PRX vulnerable to a denial of service attack6.8 Medium
- vmd project vmdCross-site Scripting in vmd6.1 Medium
- moodleA vulnerability was found in Moodle where javaScript injection was possible in some Mustache...6.1 Medium
- belden hirschmann hios, hisecos +1 moreHirschmann HiOS 07.1.01, 07.1.02, and 08.1.00 through 08.5.xx and HiSecOS 03.3.00 through 03.5.01...9.8 Critical
- intelbras rf 301k firmwareIntelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF) due to...8.8 High
- intelbras rf 301k firmwareIntelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF) due to...8.8 High
- dlink dir-842e firmwareAn authentication brute-force protection mechanism bypass in telnetd in D-Link Router model DIR...5.9 Medium
- malwarefox antimalwareIncorrect access control in zam64.sys, zam32.sys in MalwareFox AntiMalware 2.74.0.150 allows a...7.8 High
- malwarefox antimalwareIncorrect access control in zam64.sys, zam32.sys in MalwareFox AntiMalware 2.74.0.150 where IOCTL...7.8 High
ibsimopenSUSESecurity update for ibsimNo score- mozilla firefoxA flaw in Mozilla's embedded certificate code might allow web sites to install root certificates...6.5 Medium
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Fails to Check Permissions4.3 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) in the Layout Admin Page6.1 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) in Asset Publisher App6.1 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via Membership Request Admin Page6.1 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP May Reveal S3 Store's Proxy Password5.9 Medium
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to Multiple SQL Injections8.8 High
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via Asset Module Parameter6.1 Medium
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via the Redirect's Admin Page6.1 Medium
- ceph, redhat ceph storage, debian linux +1 more +3 moreA flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway) in versions before 14...6.5 Medium
- exiv2, fedoraproject fedora +1 moreDenial of service in Exiv24.7 Medium
- invoiceplaneIn InvoicePlane 1.5.11 a misconfigured web server allows unauthenticated directory listing and...7.5 High
- invoiceplaneInvoicePlane 1.5.11 doesn't have any rate-limiting for password reset and the reset token is...5.3 Medium
dtcopenSUSESecurity update for dtcNo scoreipvsadmopenSUSESecurity update for ipvsadmNo score- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Fails to Invalidate CAPTCHA Answers After Use7.5 High
- liferay dxpLiferay DXP Vulnerable to Denial-of-service (DoS) in the Multi-Factor Authentication Module6.5 Medium
- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP Reveals Data via Overly Verbose Error Messages5.3 Medium
- liferay portalLiferay Portal Vulnerable to Cross-Site Scripting (XSS) via Categories Admin Page6.1 Medium
- deltaww cncsoft screeneditorDelta Industrial Automation CNCSoft ScreenEditor Versions 1.01.28 (with ScreenEditor Version 1.01...9.8 Critical
- google chrome, fedoraproject fedora +1 moreUse after free in Tab Strip in Google Chrome prior to 90.0.4430.212 allowed an attacker who...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Payments in Google Chrome prior to 90.0.4430.212 allowed an attacker who...8.8 High
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in Reader Mode in Google Chrome prior to 90.0.4430.212 allowed a remote...8.8 High
- google chrome, fedoraproject fedora +1 moreType confusion in V8 in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in History in Google Chrome prior to 90.0.4430.212 allowed a remote attacker...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in File API in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to...8.8 High
- Show moreLoading…