CVEs published in May 2021
2,381 vulnerabilities, 217 critical, 19 exploited.
- pgxn pg partmanIn the pg_partman (aka PG Partition Manager) extension before 4.5.1 for PostgreSQL, arbitrary...9.8 Critical
- concerto-signage concertoPersistent cross-site scripting (XSS) in the web interface of Concerto through 2.3.6 allows an...6.1 Medium
- microsoft libdnf, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This...7.5 High
- bmc remedy mid-tierBMC Remedy 9.1SP3 is affected by authenticated code execution. Authenticated users that have the...8.8 High
- bmc remedy mid-tierBMC Remedy Mid Tier 9.1SP3 is affected by log hijacking. Remote logging can be accessed by...5.3 Medium
- bmc remedy mid-tierBMC Remedy Mid Tier 9.1SP3 is affected by cross-site scripting (XSS). A DOM-based cross-site...6.1 Medium
- bmc remedy mid-tierBMC Remedy Mid Tier 9.1SP3 is affected by remote and local file inclusion. Due to the lack of...9.8 Critical
- xenx86: Speculative vulnerabilities with bare (non-shim) 32-bit PV guests 32-bit x86 PV guest...5.5 Medium
- iced-x86 project iced-x86Incorrect buffer size calculation in iced-x869.8 Critical
grub2SUSERecommended update for grub2No score- mikrotik routerosMikrotik RouterOs before 6.47 (stable tree) suffers from a memory corruption vulnerability in the...6.5 Medium
- mikrotik routerosMikrotik RouterOs before 6.47 (stable tree) in the /ram/pckg/advanced-tools/nova/bin/netwatch...6.5 Medium
- zte zxcdnThe management system of ZXCDN is impacted by the information leak vulnerability. Attackers can...4.9 Medium
- zte axon 11 5g firmwareA mobile phone of ZTE is impacted by improper access control vulnerability. Due to improper...7.5 High
python-pipUbuntupython-pip vulnerabilityNo score- mitsubishi gs21 firmware, gt21 firmware, gt23 firmware +3 more +5 moreBuffer access with incorrect length value vulnerability in GOT2000 series GT27 model...7.5 High
- linuxfoundation runc, fedoraproject fedora +1 moremount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs8.5 High
assimpOSS-FuzzHeap-buffer-overflow in _m3d_safestrNo score- telegramTelegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a...5.5 Medium
- control-webpanel webpanelThe unprivileged user portal part of CentOS Web Panel is affected by a SQL Injection via the ...9.8 Critical
- telegramTelegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Type...5.5 Medium
- telegramTelegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Type...5.5 Medium
- telegramTelegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by an...5.5 Medium
- telegramTelegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Heap...7.1 High
- telegramTelegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a...7.1 High
- telegramTelegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Heap...5.5 Medium
- telegramTelegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Heap...5.5 Medium
- control-webpanel webpanelThe unprivileged user portal part of CentOS Web Panel is affected by a Command Injection...9.8 Critical
- issuehunt boostnoteIn Boostnote 0.12.1, exporting to PDF contains opportunities for XSS attacks.5.4 Medium
- mikrotik routerosMikrotik RouterOs stable 6.46.3 suffers from a memory corruption vulnerability in the log process...6.5 Medium
- mikrotik routerosMikrotik RouterOs stable 6.46.3 suffers from a memory corruption vulnerability in the mactel...6.5 Medium
- mikrotik routerosMikrotik RouterOs stable 6.47 suffers from a memory corruption vulnerability in the /nova/bin...6.5 Medium
- mikrotik routerosMikrotik RouterOs prior to stable 6.47 suffers from a memory corruption vulnerability in the ...6.5 Medium
- x-stream xstream, debian linux, fedoraproject fedora +14 more +16 moreXStream is vulnerable to a Remote Command Execution attack7.5 High
- xwiki, xwiki xwiki-platform +1 moreUsers registered with email verification can self re-activate their disabled accounts8.8 High
- xwiki, xwiki xwiki-platform +1 moreScript injection without script or programming rights through Gadget titles8.8 High
- mikrotik routerosMikrotik RouterOs 6.46.3 (stable tree) suffers from a memory corruption vulnerability in the ...6.5 Medium
- mikrotik routerosMikrotik RouterOs 6.46.3 (stable tree) suffers from a memory corruption vulnerability in the ...6.5 Medium
- mikrotik routerosMikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the ...6.5 Medium
- mikrotik routerosMikrotik RouterOs 6.44.6 (long-term tree) suffers from an assertion failure vulnerability in the...6.5 Medium
- hongcms project hongcmsPath Traversal in HongCMS v4.0.0 allows remote attackers to view, edit, and delete arbitrary...9.8 Critical
pacemakerAlmaLinux,pacemaker-cliAlmaLinux,pacemaker-ctsAlmaLinux +4 more +6 morepacemaker bug fix and enhancement updateNo scorecorosyncAlmaLinux,corosynclib-develAlmaLinux,corosync-vqsimAlmaLinux +1 more +3 morecorosync bug fix and enhancement updateNo scorejava-1.8.0-openjdk-accessibility-fastdebugAlmaLinux,java-1.8.0-openjdk-accessibility-slowdebugAlmaLinux,java-1.8.0-openjdk-demo-fastdebugAlmaLinux +7 more +9 morejava-1.8.0-openjdk bug fix and enhancement updateNo scorejava-11-openjdk-demo-fastdebugAlmaLinux,java-11-openjdk-demo-slowdebugAlmaLinux,java-11-openjdk-devel-fastdebugAlmaLinux +11 more +13 morejava-11-openjdk bug fix and enhancement updateNo score- slapi-nis project slapi-nis, fedoraproject fedora +1 moreA flaw was found in slapi-nis in versions before 0.56.7. A NULL pointer dereference during the...7.5 High
- opensuse libsolv, oracle communications cloud native core policy +1 moreBuffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool,...3.3 Low
- websvnWebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell...9.8 Critical
- pluck-cms pluckIn Pluck-4.7.10-dev2 admin background, a remote command execution vulnerability exists when...9.8 Critical
- pluck-cms pluckAn issue was discovered in Pluck 4.7.10-dev2. There is a CSRF vulnerability that can editpage via...4.3 Medium
- Show moreLoading…