CVEs published in May 2021
2,381 vulnerabilities, 217 critical, 19 exploited.
- ibm security identity managerIBM Security Identity Manager 7.0.2 could allow an authenticated user to bypass security and...5.4 Medium
- ibm security identity managerIBM Security Identity Manager 7.0.2 stores user credentials in plain clear text which can be read...5.3 Medium
- ibm security identity managerIBM Security Identity Manager 7.0.2 could allow a remote attacker to obtain sensitive information...5.3 Medium
- ibm spectrum scale, gpfs.tct.server +1 moreIBM Spectrum Scale 1.1.1.0 through 1.1.8.4 Transparent Cloud Tiering could allow a remote...4.0 Medium
- opennms horizon, meridian, opennms +2 moreCross-site Scripting in OpenNMS Horizon4.8 Medium
- opennms horizon, meridian, opennms +2 moreCross-Site Request Forgery in OpenNMS Horizon8.8 High
- fusionpbxCross Site Scriptiong (XSS) vulnerability exists in FusionPBX 4.5.7 allows remote malicious users...6.1 Medium
- opennms horizon, meridian, opennms +2 moreCross-site Scripting in OpenNMS Horizon4.8 Medium
- opennms horizon, meridian, opennms +2 moreCross-Site Request Forgery in OpenNMS Horizon4.3 Medium
- unified-automation .net based opc ua client\/server sdkProducts with Unified Automation .NET based OPC UA Client/Server SDK Bundle: Versions V3.0.7 and...7.5 High
- hp color laser 150 4zb94a, color laser 150 4zb95a, color laser mfp 170 4zb96a +379 more +381 moreA potential buffer overflow in the software drivers for certain HP LaserJet products and Samsung...7.8 High
- draeger x-dock firmwareDraeger X-Dock Firmware before 03.00.13 has Active Debug Code on a debug port, leading to remote...8.8 High
- draeger x-dock firmwareDraeger X-Dock Firmware before 03.00.13 has Hard-Coded Credentials, leading to remote code...8.8 High
- hom.ee brain cube coreThe USB firmware update script of homee Brain Cube v2 (2.28.2 and 2.28.4) devices allows an...6.8 Medium
- hom.ee brain cube corehomee Brain Cube v2 (2.28.2 and 2.28.4) devices have sensitive SSH keys within downloadable and...7.5 High
- owncloud serverownCloud 10.7 has an incorrect access control vulnerability, leading to remote information...6.5 Medium
- red hat wildfly, redhat build of quarkus, data grid +6 more +8 moreCross-site Scripting in Wildfly4.8 Medium
twowaycrates.ioCrate `twoway` deprecated by the authorNo score- emerson x-stream enhanced xefd firmware, x-stream enhanced xegk firmware, x-stream enhanced xegp firmware +1 more +3 moreA vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer....7.5 High
- emerson x-stream enhanced xefd firmware, x-stream enhanced xegk firmware, x-stream enhanced xegp firmware +1 more +3 moreA vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer....9.8 Critical
- emerson x-stream enhanced xefd firmware, x-stream enhanced xegk firmware, x-stream enhanced xegp firmware +1 more +3 moreA vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer....7.5 High
- bouncycastle bc-csharp, bouncy castle fips .net api, fips java api +1 more +3 moreTiming based private key exposure in Bouncy Castle5.9 Medium
- emerson x-stream enhanced xefd firmware, x-stream enhanced xegk firmware, x-stream enhanced xegp firmware +1 more +3 moreA vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer....6.1 Medium
- emerson x-stream enhanced xefd firmware, x-stream enhanced xegk firmware, x-stream enhanced xegp firmware +1 more +3 moreA vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer....6.1 Medium
- emerson x-stream enhanced xefd firmware, x-stream enhanced xegk firmware, x-stream enhanced xegp firmware +1 more +3 moreA vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer....5.3 Medium
- kujirahand konawiki, konawiki2 +1 moreKonaWiki2 versions prior to 2.2.4 allows a remote attacker to upload arbitrary files via...9.8 Critical
- kujirahand konawiki, konawiki2 +1 moreSQL injection vulnerability in the KonaWiki2 versions prior to 2.2.4 allows remote attackers to...9.8 Critical
- nippon antenna co.,ltd. rfntps, nippon-antenna rfntps firmware +1 moreRFNTPS firmware versions System_01000004 and earlier, and Web_01000004 and earlier allow an...6.8 Medium
- fedoraproject fedora, openidc mod auth openidc, oracle essbase +2 moreCVE-2021-20718 affecting package mod_auth_openidc for versions less than 2.4.14.2-17.5 High
c-blosc2OSS-FuzzHeap-buffer-overflow in _blosc_getitemNo scoreunicornOSS-FuzzUNKNOWN READ in helper_uc_tracecodeNo scorelibxml2OSS-FuzzHeap-use-after-free in xmlAddNextSiblingNo scoreperfettoOSS-FuzzUNKNOWN READ in std::__1::__tree<std::__1::__value_type<Json::Value::CZString, Json::Value>, stdNo score- wp-cliImproper Certificate Validation in WP-CLI framework9.1 Critical
matrix-synapsePyPIDenial of service (via resource exhaustion) due to improper input validation in third-party identifier endpointNo score- adminerXSS in doc_link7.5 High
- prometheusArbitrary redirects under /new endpoint6.5 Medium
- hedgedocImproper Neutralization of Script-Related HTML Tags in Notes8.1 High
- ibm control centerIBM Control Center 6.2.0.0 could allow a user to obtain sensitive version information that could...5.3 Medium
- ibm control centerIBM Control Center 6.2.0.0 is vulnerable to cross-site scripting. This vulnerability allows users...5.4 Medium
- ibm maximo asset managementIBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to stored cross-site scripting. This...6.5 Medium
- ibm cloud pak for multicloud managementIBM Cloud Pak for Multicloud Management prior to 2.3 allows web pages to be stored locally which...4.0 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5, 6.0.0.0 through 6.0.3.3,...4.3 Medium
- linux kernel, netapp cloud backup, h300e firmware +7 more +9 moreThis vulnerability allows local attackers to escalate privileges on affected installations of...8.8 High
- couchbase serverAn issue was discovered in Couchbase Server 6.x through 6.6.1. The Couchbase Server UI is...5.9 Medium
- smartstore smartstorenetSmartstore (aka SmartStoreNET) before 4.1.0 allows CommonController.ClearCache,...6.1 Medium
- couchbase serverAn issue was discovered in Couchbase Server 6.5.x and 6.6.x through 6.6.1. When using the View...4.4 Medium
- smartstore smartstorenetAn issue was discovered in Smartstore (aka SmartStoreNET) before 4.1.0. Administration...9.1 Critical
- couchbase serverAn issue was discovered in Couchbase Server 5.x and 6.x through 6.6.1 and 7.0.0 Beta. Incorrect...7.5 High
- couchbase serverIn the Query Engine in Couchbase Server 6.5.x and 6.6.x through 6.6.1, Common Table Expression...6.5 Medium
- Show moreLoading…