CVEs published in May 2021
2,381 vulnerabilities, 217 critical, 19 exploited.
serenityOSS-FuzzHeap-use-after-free in AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtrNo scoreperfettoOSS-FuzzUNKNOWN READ in std::__1::__tree<std::__1::__value_type<Json::Value::CZString, Json::Value>, stdNo scorematioOSS-FuzzUNKNOWN READ in [heap]No scoreespeak-ngOSS-FuzzHeap-buffer-overflow in string_decoder_getc_utf_8No scorelibvipsOSS-FuzzHeap-buffer-overflow in jxl::PerformAlphaWeightedAddNo score- lettreSMTP command injection in lettre9.8 Critical
- cisco finesse, unified contact center express +1 moreCisco Finesse Open Redirect Vulnerability4.7 Medium
- cisco prime infrastructure, evolved programmable network manager +1 moreCisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Command Injection Vulnerability8.8 High
- cisco modeling labsCisco Modeling Labs Web UI Command Injection Vulnerability8.8 High
- cisco business wireless access point software, wap125 firmware, wap131 firmware +4 more +6 moreCisco Small Business 100, 300, and 500 Series Wireless Access Points Command Injection Vulnerabilities4.7 Medium
- cisco business wireless access point software, wap125 firmware, wap131 firmware +4 more +6 moreCisco Small Business 100, 300, and 500 Series Wireless Access Points Command Injection Vulnerabilities4.7 Medium
- cisco business wireless access point software, wap125 firmware, wap131 firmware +4 more +6 moreCisco Small Business 100, 300, and 500 Series Wireless Access Points Command Injection Vulnerabilities4.7 Medium
- cisco dna spaces connector, dna spaces\ +1 moreCisco DNA Spaces Connector Command Injection Vulnerabilities6.5 Medium
- cisco dna spaces connector, dna spaces\ +1 moreCisco DNA Spaces Connector Command Injection Vulnerabilities6.5 Medium
- cisco dna spaces connector, dna spaces\ +1 moreCisco DNA Spaces Connector Privilege Escalation Vulnerabilities6.0 Medium
- cisco dna spaces connector, dna spaces\ +1 moreCisco DNA Spaces Connector Privilege Escalation Vulnerabilities6.0 Medium
- cisco business wireless access point software, wap125 firmware, wap131 firmware +4 more +6 moreCisco Small Business 100, 300, and 500 Series Wireless Access Points Command Injection Vulnerabilities4.7 Medium
- cisco business wireless access point software, wap125 firmware, wap131 firmware +4 more +6 moreCisco Small Business 100, 300, and 500 Series Wireless Access Points Command Injection Vulnerabilities4.7 Medium
- cisco business wireless access point software, wap125 firmware, wap131 firmware +4 more +6 moreCisco Small Business 100, 300, and 500 Series Wireless Access Points Command Injection Vulnerabilities4.7 Medium
- cisco business wireless access point software, wap125 firmware, wap131 firmware +4 more +6 moreCisco Small Business 100, 300, and 500 Series Wireless Access Points Command Injection Vulnerabilities4.7 Medium
- cisco business wireless access point software, wap125 firmware, wap131 firmware +4 more +6 moreCisco Small Business 100, 300, and 500 Series Wireless Access Points Command Injection Vulnerabilities4.7 Medium
- cisco business wireless access point software, wap125 firmware, wap131 firmware +4 more +6 moreCisco Small Business 100, 300, and 500 Series Wireless Access Points Command Injection Vulnerabilities4.7 Medium
- cisco finesse, unified contact center express +1 moreCisco Finesse Cross-Site Scripting Vulnerabilities4.8 Medium
- cisco identity services engine, prime infrastructure, identity services engine software +1 more +3 moreCisco ADE-OS Local File Inclusion Vulnerability4.4 Medium
ndpiOSS-FuzzHeap-buffer-overflow in processClientServerHelloNo score- mozilla thunderbirdIf a MIME encoded email contains an OpenPGP inline signed or encrypted message part, but also...4.3 Medium
- mozilla thunderbirdOpenPGP secret keys that were imported using Thunderbird version 78.8.1 up to version 78.10.1...4.3 Medium
- netgear gc108p firmware, gc108pp firmware, gs108t firmware +14 more +16 moreCertain NETGEAR devices are affected by command injection by an unauthenticated attacker via the...8.8 High
- plone, zope +1 moreCross-site scripting in Products.CMFCore, Products.PluggableAuthService, Plone6.1 Medium
- ploneCross-site scripting in Plone5.4 Medium
- ploneIncorrect Permission Assignment for Critical Resource in Plone9.9 Critical
- ploneServer-Side Request Forgery in Plone4.3 Medium
- ploneServer-Side Request Forgery in Plone7.5 High
- ploneCross-site scripting in Plone5.4 Medium
- ploneCross-site scripting in Plone5.4 Medium
- dell wyse windows embedded (wes), microsoft windows 10 +1 moreDell Wyse Windows Embedded System versions WIE10 LTSC 2019 and earlier contain an improper...5.2 Medium
- dell xtremio, xtremio management server +1 moreDell EMC XtremIO Versions prior to 6.3.3-8, contain a Cross-Site Request Forgery Vulnerability in...8.8 High
- puttyPuTTY before 0.75 on Windows allows remote servers to cause a denial of service (Windows GUI hang...7.5 High
- diso development team openidIt was found that various OpenID Providers (OPs) had TLS Server Certificates that used weak keys,...5.9 Medium
- ibm infosphere information serverIBM InfoSphere Information Server 11.7 could allow an attacker to obtain sensitive information by...3.1 Low
- nationalsecurityagency emissaryDeserialization of Untrusted Data in Emissary7.2 High
- qibosoftA code injection vulnerability has been discovered in the Upgrade function of QibosoftX1 v1.0. An...7.2 High
- phpyunAn information disclosure vulnerability was discovered in alipay_function.php in the log file of...7.5 High
- htmlyAn arbitrary file deletion vulnerability was discovered on htmly v2.7.5 which allows remote...6.5 Medium
- bluditA file upload vulnerability was discovered in the file path /bl-plugins/backup/plugin.php on...7.2 High
- github.com/masterminds/goutils, goutils project goutils +1 moreInsufficient randomness in github.com/Masterminds/goutils9.1 Critical
github.com/cloudflare/tableflipGoA failed upgrade may lead to hung goroutinesNo scoregithub.com/google/exposure-notifications-serverGoImport of incorrectly embargoed keys could cause early publicationNo scoregithub.com/nats-io/nats-serverGo,github.com/nats-io/nats-server/v2Go +1 moreImport loops in account imports, nats-server DoS7.5 High- solarwinds orion job schedulerThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...8.8 High
- Show moreLoading…