CVEs published in May 2021
2,381 vulnerabilities, 217 critical, 19 exploited.
- ibm security guardiumIBM Security Guardium 11.2 uses weaker than expected cryptographic algorithms that could allow an...6.8 Medium
- ibm security guardiumIBM Security Guardium 11.2 stores user credentials in plain clear text which can be read by a...5.1 Medium
- ibm security guardiumIBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users...6.1 Medium
- ibm security guardiumIBM Security Guardium 11.2 could allow a remote authenticated attacker to execute arbitrary...8.4 High
- ibm security guardiumIBM Security Guardium 11.2 is vulnerable to SQL injection. A remote attacker could send specially...7.6 High
- bitdefender endpoint security tools for linux, endpoint security tools +1 moreImproper Input Validation in Bitdefender Endpoint Security Tools for Linux6.4 Medium
- college management system project management systemA Cross-Site Request Forgery (CSRF) vulnerability exists in ProjectWorlds College Management...6.5 Medium
- nagios fusionIncorrect Access Control in Nagios Fusion 4.1.8 and earlier allows low-privileged authenticated...6.5 Medium
- nagios xiCreation of a Temporary Directory with Insecure Permissions in Nagios XI 5.7.5 and earlier allows...9.8 Critical
- nagios fusionIncorrect File Permissions in Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation to...8.8 High
- nagios fusionCommand Injection in Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation to nagios.9.8 Critical
- nagios fusionIncorrect SSL certificate validation in Nagios Fusion 4.1.8 and earlier allows for Escalation of...9.8 Critical
- nagios fusion, xi +1 moreIncorrect File Permissions in Nagios XI 5.7.5 and earlier and Nagios Fusion 4.1.8 and earlier...8.8 High
- nagios fusionImproper Input Validation in Nagios Fusion 4.1.8 and earlier allows an authenticated attacker to...8.8 High
- nagios fusionExecution with Unnecessary Privileges in Nagios Fusion 4.1.8 and earlier allows for Privilege...9.8 Critical
- nagios fusionImproper input validation in Nagios Fusion 4.1.8 and earlier allows a remote attacker with...6.1 Medium
- nagios fusionCommand Injection in Nagios Fusion 4.1.8 and earlier allows Privilege Escalation from apache to...9.8 Critical
- nagios fusionCommand Injection in Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation or Code...9.8 Critical
- nagios fusion, xi +1 moreInsufficient Verification of Data Authenticity in Nagios Fusion 4.1.8 and earlier and Nagios XI 5...9.8 Critical
- re-logic terrariaRe-Logic Terraria before 1.4.2.3 performs Insecure Deserialization.9.8 Critical
- online examination system project examination systemProject Worlds Online Examination System 1.0 is affected by Cross Site Scripting (XSS) via...6.1 Medium
- online examination system project examination systemProjectworlds Online Examination System 1.0 is vulnerable to CSRF, which allows a remote attacker...6.5 Medium
- college management system project management systemProjectsworlds College Management System Php 1.0 is vulnerable to SQL injection issues over...9.8 Critical
- redhat libvirt, netapp ontap select deploy administration utility +1 moreA flaw was found in libvirt in the virConnectListAllNodeDevices API in versions before 7.0.0. It...6.5 Medium
- vmware horizon client, workstation +1 moreVMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2)...6.5 Medium
- vmware horizon client, workstation +1 moreVMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2)...6.5 Medium
- vmware horizon client, workstation +1 moreVMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2)...6.5 Medium
- wago 750-8202 firmware, 750-8203 firmware, 750-8204 firmware +26 more +28 moreWAGO: PFC200 Access to files outside the home directory9.1 Critical
- wago 750-8202 firmware, 750-8203 firmware, 750-8204 firmware +26 more +28 moreWAGO: PFC200 Denial of Service due to the number of connections to the runtime5.3 Medium
- autoptimizeAutoptimize < 2.8.4 - Authenticated Stored Cross-Site Scripting (XSS)4.8 Medium
- lifterlms, lifterlms lms by lifterlms – online course, membership & learning management system plugin for wordpress +1 moreLifterLMS < 4.21.1 - Authenticated Stored XSS in Edit Profile5.4 Medium
- aioseo all in one seo, all in one seo team in one seo – best wordpress seo plugin – easily improve your seo rankings +1 moreAll in One SEO Pack < 4.1.0.2 - Admin RCE via unserialize8.8 High
- ultimate member – user profile, user registration, login & membership plugin, ultimatemember ultimate member – user profile, user registration, login & membership plugin, ultimate member +2 moreUltimate Member < 2.1.20 - Authenticated Reflected Cross-Site Scripting (XSS)5.4 Medium
- targetfirst target first plugin, watcheezy +1 moreTarget First Plugin 2.0 - Unauthenticated Stored XSS via Licence Key6.1 Medium
- hanadaddy hana flv playerHana Flv Player <= 3.1.3 - Authenticated Stored Cross-Site Scripting (XSS)5.4 Medium
- blue medicine labs hotjar connecticatorHotjar Connecticator <= 1.1.1 - Authenticated Stored Cross-Site Scripting (XSS)5.4 Medium
- pickplugins product slider for woocommercePickPlugins Product Slider for WooCommerce < 1.13.22 - Reflected Cross-Site Scripting (XSS)6.1 Medium
- ibenic simple giveaways, igor benic simple giveaways – grow your business, email lists and traffic with contests +1 moreSimple Giveaways < 2.36.2 - Unauthenticated Reflected Cross-Site Scripting (XSS)6.1 Medium
- boostifythemes gotoGoto < 2.1 - Reflected Cross-Site Scripting (XSS)6.1 Medium
- bompus wp customer reviewsWP Customer Reviews < 3.5.6 - Authenticated Stored Cross-Site Scripting (XSS)4.8 Medium
- michael leithold dsgvo all in one for wpDSGVO All in one for WP < 4.0 - Unauthenticated Stored Cross-Site Scripting (XSS)6.1 Medium
- arangodbIn ArangoDB, versions v2.2.6.2 through v3.7.10 are vulnerable to Cross-Site Scripting (XSS),...6.1 Medium
- dutchcoders transfer.shPath Traversal in Dutchcoders transfer.sh9.1 Critical
- dutchcoders transfer.shCross-site scripting in Dutchcoders transfer.sh6.1 Medium
- overwolf, overwolf ltd. the installer of overwolf +1 moreUntrusted search path vulnerability in The Installer of Overwolf 2.168.0.n and earlier allows an...7.8 High
- calendar01 project calendar01, php factory [calendar01] free edition +1 moreReflected cross-site scripting vulnerability in the admin page of [Calendar01] free edition ver1...6.1 Medium
- php factory [telop01] free edition, telop01 project telop01 +1 moreReflected cross-site scripting vulnerability in the admin page of [Telop01] free edition ver1.0.1...6.1 Medium
- mailform01 project mailform01, php factory [mailform01] free edition +1 moreReflected cross-site scripting vulnerability in [MailForm01] free edition (versions which the...6.1 Medium
- fujitsu scansnap manager, fujitsu limited and pfu limited the installers of scansnap manager and the software download installer +1 moreUntrusted search path vulnerability in the installers of ScanSnap Manager prior to versions V7...7.8 High
- qualitysoft qnd, qualitysoft corporation qnd advance/premium/standard +1 morePrivilege escalation vulnerability in QND Advance/Premium/Standard Ver.11.0.4i and earlier allows...7.8 High
- Show moreLoading…