CVEs published in May 2021
2,381 vulnerabilities, 217 critical, 19 exploited.
- solarwinds network performance monitorThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...9.8 Critical
- foxit reader, foxitsoftware phantompdf +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
github.com/cilium/ciliumGoNetwork policy may be bypassed by some ICMP Echo RequestsNo scoregithub.com/argoproj/argo-cdGoHelm OCI credentials leaked into Argo CD logs6.6 Mediumshopware/shopwarePackagistInformation leakage in Error HandlerNo scoreshopware/shopwarePackagistAuthenticated Stored XSS in AdministrationNo score- zope, plone +1 moreRemote Code Execution via traversal in TAL expressions6.8 Medium
- nordicsemi nrf52840 firmwareNordic Semiconductor nRF52840 devices through 2020-10-19 have improper protection against...5.7 Medium
- bytecodealliance wasmtime, cranelift-codegen +1 moreMemory access due to code generation flaw in Cranelift module7.2 High
- st stm32cubel4 firmwareSTMicroelectronics STM32L4 devices through 2020-10-19 have incorrect access control. The flash...7.0 High
- st stm32cubel4 firmwareSTMicroelectronics STM32L4 devices through 2021-03-29 have incorrect physical access control.6.1 Medium
- nordicsemi nrf52840 firmwareThe elliptic curve cryptography (ECC) hardware accelerator, part of the ARM® TrustZone®...5.5 Medium
- nitrokey fido2 firmware, solokeys solo firmware, somu firmware +2 moreThe flash read-out protection (RDP) level is not enforced during the device initialization phase...6.8 Medium
- nitrokey fido u2f firmwareAn issue was discovered in Nitrokey FIDO U2F firmware through 1.1. Communication between the...9.8 Critical
- trustedfirmware trusted firmware-mIn Trusted Firmware-M through 1.3.0, cleaning up the memory allocated for a multi-part...7.5 High
- qnap qts, quts hero +1 moreRelative Path Traversal Vulnerability in QTS and QuTS hero8.8 High
espeak-ngOSS-FuzzGlobal-buffer-overflow in IsLetterGroupNo scoreperfettoOSS-FuzzUNKNOWN READ in Json::decodePrefixedStringNo scoreprosodyDebianprosody - regression updateNo score- netatalk, synology diskstation manager, debian linux +2 moreThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected...8.8 High
- micro-ecc project micro-eccThe ECDSA operation of the micro-ecc library 1.0 is vulnerable to simple power analysis attacks...7.5 High
- html-js doracmsWeak Encoding for Password in DoraCMS v2.1.1 and earlier allows attackers to obtain sensitive...7.5 High
- huawei manageoneThere is a denial of service vulnerability in some versions of ManageOne. In specific scenarios,...6.5 Medium
- eterm project eterm, mrxvt project mrxvt, rxvt-unicode project rxvt-unicode +3 more +5 morerxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 allow (potentially remote) code...8.8 High
- huawei manageoneThere is a denial of service vulnerability in some versions of ManageOne. There is a logic error...5.3 Medium
- cesnet libyangIn function read_yin_leaf() in libyang <= v1.0.225, it doesn't check whether the value of retval-...7.5 High
- cesnet libyangIn function lys_node_free() in libyang <= v1.0.225, it asserts that the value of node->module can...7.5 High
- cesnet libyangIn function ext_get_plugin() in libyang <= v1.0.225, it doesn't check whether the value of...7.5 High
- cesnet libyangA stack overflow in libyang <= v1.0.225 can cause a denial of service through function...7.5 High
- cesnet libyangIn function read_yin_container() in libyang <= v1.0.225, it doesn't check whether the value of...7.5 High
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus before 6104 allows stored XSS on the /webclient/index.html#...6.1 Medium
- haloCross Site Scripting (XSS) vulnerability in Halo 1.1.3 via post publish components in the manage...6.1 Medium
go.mozilla.org/sopsGo,go.mozilla.org/sops/v3Go +1 moreLocal directory executable lookup in sops (Windows-only)No score- admidioVarious9.6 Critical
- envoyproxy envoyRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1.13 security update7.5 High
- envoyproxy envoyRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1.13 security update7.5 High
- envoyproxy envoyRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1.13 security update7.5 High
- dns-packet project dns-packetRemote Memory Exposure7.7 High
- pajbotCSRF allowing modification of commands, modules, banphrases through hidden iFrames2.4 Low
- fusionpbxDirectory Traversal vulnerability in FusionPBX 4.5.7, which allows a remote malicious user to...8.1 High
- fusionpbxDirectory Traversal vulnerability exists in FusionPBX 4.5.7, which allows a remote malicious user...4.3 Medium
- fusionpbxA Directory Traversal vulnerability exists in FusionPBX 4.5.7 allows malicoius users to rename...6.5 Medium
- plonePlone XSS in User Fullname Property and File Upload5.4 Medium
- fusionpbxCross Site Scripting (XSS) vulnerability in FusionPBX 4.5.7 allows remote malicious users to...6.1 Medium
- searchbloxA local file inclusion vulnerability in the FileServlet in all SearchBlox before 9.2.2 allows...7.5 High
- opcfoundation ua-.net-legacy, ua .net standard stack +1 moreOPC Foundation UA .NET Standard versions prior to 1.4.365.48 and OPC UA .NET Legacy are...7.5 High
- ibm security identity managerIBM Security Identity Manager 7.0.2 could allow a remote attacker to obtain sensitive information...3.1 Low
- ibm security identity managerIBM Security Identity Manager 7.0.2 contains hard-coded credentials, such as a password or...5.9 Medium
- ibm security identity managerIBM Security Identity Manager 7.0.2 could allow a remote attacker to obtain sensitive information...5.3 Medium
- ibm security identity managerIBM Security Identity Manager 7.0.2 could allow a remote user to enumerate usernames due to a...3.7 Low
- Show moreLoading…