CVEs published in May 2021
2,381 vulnerabilities, 217 critical, 19 exploited.
- canonical apport, ubuntu linux +1 moreapport read_file() function could follow maliciously constructed symbolic links7.3 High
- canonical apport, ubuntu linux +1 moreapport read_file() function could follow maliciously constructed symbolic links7.3 High
- canonical apport, ubuntu linux +1 moreapport read_file() function could follow maliciously constructed symbolic links7.3 High
- canonical apport, ubuntu linux +1 moreapport read_file() function could follow maliciously constructed symbolic links7.3 High
- canonical apport, ubuntu linux +1 moreapport read_file() function could follow maliciously constructed symbolic links7.3 High
- canonical apport, ubuntu linux +1 moreapport read_file() function could follow maliciously constructed symbolic links7.3 High
- f5 nginx, fedoraproject fedora, netapp ontap select deploy administration utility +10 more +12 moreA security issue in nginx resolver was identified, which might allow an attacker who is able to...7.7 High
- koelImproper rate limiting in Koel7.5 High
- shopizerCross-site scripting in Shopizer4.8 Medium
- shopizerCross-site scripting in Shopizer4.8 Medium
- zephyrproject zephyrType Confusion in 802154 ACK Frames Handling5.9 Medium
- zephyrproject zephyrInteger Overflow in memory allocating functions6.9 Medium
- zephyrproject zephyrRemote Denial of Service in LwM2M do_write_op_tlv4.0 Medium
- zephyrproject zephyrPossible read out of bounds in dns read9.0 Critical
- zephyrproject zephyrMalformed SPI in response for eswifi can corrupt kernel memory7.0 High
- zephyrproject zephyrSecurity problem with settings and littlefs3.3 Low
- zephyrproject zephyrFS: Buffer Overflow when enabling Long File Names in FAT_FS and calling fs_stat6.3 Medium
- zephyrproject zephyrImproper Handling of Insufficient Permissions or Privileges in zephyr5.9 Medium
- zephyrproject zephyrZephyr Bluetooth unchecked packet data results in denial of service4.3 Medium
- zephyrproject zephyrIncorrect Error Handling in Bluetooth HCI core2.5 Low
- zephyrproject zephyrMissing Size Checks in Bluetooth HCI over SPI3.8 Low
- zephyrproject zephyrImproper Input Frame Validation in ieee802154 Processing8.3 High
- eyesofnetworkEyesOfNetwork eonweb through 5.3-11 allows Remote Command Execution (by authenticated users) via...8.8 High
- feehi cmsServer-Side Request Forgery in Feehi CMS9.1 Critical
- whohas project whohasA flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be...7.5 High
- trailing-slash project trailing-slashOpen Redirect5.4 Medium
grub2openSUSERecommended update for grub2No score- metinfoMetInfo 7.0 beta is affected by a file modification vulnerability. Attackers can delete and...9.1 Critical
- arm bifrost gpu kernel driver, mali graphics processing unit (gpu), midgard gpu kernel driver +1 more +3 more. The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory,...8.8 High
- webfairy mediatAn issue was discovered in Mediat 1.4.1. There is a Reflected XSS vulnerability which allows...6.1 Medium
- gris cms project cmsAn issue was discovered in Gris CMS v0.1. There is a Persistent XSS vulnerability which allows...6.1 Medium
- emlogAn issue was discovered in emlog 6.0.0stable. There is a SQL Injection vulnerability that can...8.8 High
- bluetooth core specification, fedoraproject fedora, intel ac 3165 firmware +14 more +16 moreBluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may...5.4 Medium
- bluetooth mesh profile, core specification +1 moreMesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, able to...7.5 High
- ffmpeg, debian linux +1 moreBuffer Overflow vulnerability exists in FFmpeg 4.1 via apng_do_inverse_blend in libavcodec/pngenc...7.5 High
- bluetooth mesh profileMesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device (without...7.5 High
- bluetooth core specification, debian linux, fedoraproject fedora +16 more +18 moreBluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit...4.2 Medium
- bluetooth mesh profileBluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby...8.8 High
- bluetooth mesh profileBluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby...8.1 High
github.com/moov-io/customersGoaccounts: Hash account number using SaltNo scoregithub.com/russellhaering/gosaml2GoSignature Validation BypassNo scoregithub.com/russellhaering/goxmldsigGoSignature Validation BypassNo score- keystonejs keystone-5Private Field data leak7.5 High
- normalize-url project normalize-urlReDoS in normalize-url7.5 High
- ronomon openedCommand Injection in @ronomon/opened9.8 Critical
- zzcmsAn issue was discovered in zzcms 2019. SQL Injection exists in user/ztconfig.php via the daohang...9.8 Critical
- gnome gupnpAn issue was discovered in GUPnP before 1.0.7 and 1.1.x and 1.2.x before 1.2.5. It allows DNS...8.1 High
- ibm security guardiumIBM Security Guardium 11.2 could allow a remote authenticated attacker to execute arbitrary...7.2 High
- ibm security guardiumIBM Security Guardium 11.2 could allow a remote attacker to obtain sensitive information when a...5.3 Medium
- ibm security guardiumIBM Security Guardium 11.2 contains hard-coded credentials, such as a password or cryptographic...5.9 Medium
- Show moreLoading…