CVEs published in May 2021
2,381 vulnerabilities, 217 critical, 19 exploited.
gpgme-develAlmaLinux,gpgmepp-develAlmaLinux,qgpgme-develAlmaLinux +2 moregpgme bug fix and enhancement updateNo score- google androidIn pfkey_dump of af_key.c, there is a possible out-of-bounds read due to a missing bounds check....4.4 Medium
- [red hat] networkmanager, fedoraproject fedora, redhat enterprise linux +1 more +3 moreA flaw was found in NetworkManager in versions before 1.30.0. Setting match.path and activating a...5.5 Medium
gcc-plugin-develAlmaLinux,libstdc++-staticAlmaLinux +1 moregcc bug fix and enhancement updateNo scorelibredwgOSS-FuzzHeap-use-after-free in dwg_free_TABLEGEOMETRY_privateNo score- gnome libxml2, netapp active iq unified manager, cloud backup +19 more +21 moreA flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all...6.5 Medium
- ceph, redhat ceph storage, fedoraproject fedora +2 moreA flaw was found in the Red Hat Ceph Storage RGW in versions before 14.2.21. When processing a...5.3 Medium
- x.org libx11, fedoraproject fedora, x.org x window system +2 moreLookupCol.c in X.Org X through X11R7.7 and libX11 before 1.7.1 might allow remote attackers to...9.8 Critical
caribouUbuntucaribou vulnerabilityNo score- gnu libredwgA heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via...8.8 High
- gnu libredwgGNU LibreDWG 0.10 is affected by: memcpy-param-overlap. The impact is: execute arbitrary code ...8.8 High
- ui unifi videoIn Ubiquiti UniFi Video v3.10.13, when the executable starts, its first library validation is in...7.8 High
- gnu libredwgA heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_read_RC ../../src...8.8 High
- pluck-cms pluckCross Site Request Forgery (CSRF) in Pluck CMS v4.7.9 allows remote attackers to execute...8.8 High
- pluck-cms pluckCross Site Request Forgery (CSRF) in Pluck CMS v4.7.9 allows remote attackers to execute...8.8 High
- emlogCross Site Scripting (XSS) in emlog v6.0.0 allows remote attackers to execute arbitrary code by...6.1 Medium
- gnu libredwgA heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via...8.8 High
- gnu libredwgA heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_read_B ../../src...8.8 High
- gnu libredwgA heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_search_sentinel ../...8.8 High
- gnu libredwgAn issue was discovered in GNU LibreDWG 0.10. Crafted input will lead to an memory leak in...6.5 Medium
- fastify fastify-csrfLack of protection against cookie tossing attacks in fastify-csrf6.5 Medium
symfony/symfonyPackagist,symfony/security-httpPackagist +1 moreUser enumeration in authentication mechanismsNo scorelexik/jwt-authentication-bundlePackagistUser enumeration in authentication mechanismsNo score- gnu libredwgA heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via:...8.8 High
- gnu libredwgA heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via...8.8 High
- gnu libredwgA null pointer deference issue exists in GNU LibreDWG 0.10 via read_2004_compressed_section ../.....6.5 Medium
- gnu libredwgA null pointer deference issue exists in GNU LibreDWG 0.10 via get_bmp ../../programs/dwgbmp.c:164.6.5 Medium
- gnu libredwgA heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via:...8.8 High
- gnu libredwgA heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via...8.8 High
- gnu libredwgA heap based buffer overflow vulneraibility exists in GNU LibreDWG 0.10 via bit_calc_CRC ../.....8.8 High
- gnu libredwgA heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via...7.8 High
- matrix-org matrix-react-sdkFile upload local preview can run embedded scripts after user interaction4.2 Medium
- projectworlds travel management systemXSS in signup form in Project Worlds Online Examination System 1.0 allows remote attacker to...6.1 Medium
- gnu libredwgA heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10.2641via htmlescape ../.....8.8 High
- gnu libredwgA heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10.2641 via htmlescape ../.....8.8 High
- gnu libredwgA null pointer dereference issue exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs...6.5 Medium
- gnu libredwgA null pointer deference issue exists in GNU LibreDWG 0.10.2641 via output_TEXT ../../programs...6.5 Medium
- cmswingThere is a cross site scripting vulnerability on CmsWing 1.3.7. This vulnerability (stored XSS)...5.4 Medium
- cmswingThere is a cross site scripting vulnerability on CmsWing 1.3.7. This vulnerability (stored XSS)...5.4 Medium
- gnu libredwgA heab based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs...8.8 High
- gnu libredwgA heap based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via htmlwescape ../.....8.8 High
- flask-middleware flask-securityOpen Redirect Vulnerability3.1 Low
- gnu libredwgA heap based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via output_TEXT ../.....7.8 High
- sitel cap/prx, sitel-sa remote cap\/prx firmware +1 moreSITEL CAP/PRX cleartext transmission of sensitive information6.5 Medium
- koa-remove-trailing-slashes project koa-remove-trailing-slashesOpen Redirect5.4 Medium
- sitel cap/prx, sitel-sa remote cap\/prx firmware +1 moreSITEL CAP/PRX hardcoded credentials9.6 Critical
- ibm infosphere information serverIBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain highly sensitive...5.9 Medium
- ibm planning analytics local, planning analytics cloud +1 moreIBM Planning Analytics Local 2.0 connects to a Redis server. The Redis server, an in-memory data...7.4 High
- ibm planning analytics local, planning analytics cloud +1 moreIBM Planning Analytics Local 2.0 connects to a MongoDB server. MongoDB, a document-oriented...7.4 High
- sophos home, intercept x for macos, intercept x for macos (opm) +2 more +4 moreIn multiple versions of Sophos Endpoint products for MacOS, a local attacker could execute...6.7 Medium
- Show moreLoading…