CVEs published in May 2021
2,381 vulnerabilities, 217 critical, 19 exploited.
- opennms horizon, meridian, opennms +2 moreOpenNMS Horizon vulnerable to XSS5.4 Medium
- opennms horizon, meridian, opennms +2 moreIn OpenNMS Horizon, versions opennms-17.0.0-1 through opennms-27.1.0-1; OpenNMS Meridian,...5.4 Medium
- arm trusted firmware, trustedfirmware trusted firmware-m +1 moreIn Arm Trusted Firmware M through 1.2, the NS world may trigger a system halt, an overwrite of...5.5 Medium
- deep-defaults project deep-defaultsdeep-defaults vulnerable to prototype pollution9.8 Critical
- websockets ws, netapp e-series performance analyzer +1 moreReDoS in Sec-Websocket-Protocol header5.3 Medium
- ffmpeg, debian linux +1 moreFFmpeg 4.2 is affected by null pointer dereference passed as argument to libavformat/aviobuf.c,...7.5 High
- ffmpeg, debian linux +1 moreFFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aacpsy.c, which allows a remote...6.5 Medium
- ffmpeg, debian linux +1 moreFFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/lpc.h, which allows a remote...6.5 Medium
- github codeql action, codeql-action +1 moreCodeQL runner: Command-line options that make GitHub access tokens visible to other processes are now deprecated4.4 Medium
- ibm spectrum scaleIBM Spectrum Scale 5.1.0.1 could allow a local with access to the GUI pod container to obtain...6.7 Medium
- ibm 8335-gca, 8335-gca firmware, 8335-gta +3 more +5 moreIBM Host firmware for LC-class Systems could allow a remote attacker to traverse directories on...4.9 Medium
- ibm 8335-gca, 8335-gca firmware, 8335-gta +3 more +5 moreIBM Host firmware for LC-class Systems is vulnerable to a stack based buffer overflow, caused by...4.9 Medium
- hp integrated lights-out 4, integrated lights-out 5 +1 moreA remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO...4.8 Medium
- hp integrated lights-out 4, integrated lights-out 5 +1 moreA remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO...4.8 Medium
- hp integrated lights-out 4, integrated lights-out 5 +1 moreA remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity...4.8 Medium
- hp integrated lights-out 4, integrated lights-out 5 +1 moreA remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO...4.8 Medium
- jenkins markdown formatter, jenkins project markdown formatter plugin +1 moreXSS vulnerability in Jenkins Markdown Formatter Plugin5.4 Medium
- jenkins urltrigger, jenkins project urltrigger plugin +1 moreXXE vulnerability in Jenkins URLTrigger Plugin8.1 High
- jenkins nuget, jenkins project nuget plugin +1 moreXML external entity vulnerability in Jenkins Nuget Plugin9.1 Critical
- jenkins filesystem trigger, jenkins project filesystem trigger plugin +1 moreXXE vulnerability in Jenkins Filesystem Trigger Plugin8.8 High
- hp integrated lights-out 4, integrated lights-out 5 +1 moreA remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity...4.8 Medium
- hp integrated lights-out 4, integrated lights-out 5 +1 moreA remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity...4.8 Medium
- mediateknet netwave systemAn information disclosure vulnerability was discovered in /index.class.php (via port 8181) on...7.5 High
- openwrtA stored cross-site scripting (XSS) vulnerability was discovered in the Web Interface for OpenWRT...5.4 Medium
- openwrt luciThe Web Interface for OpenWRT LuCI version 19.07 and lower has been discovered to have a cross...6.1 Medium
- hp integrated lights-out 4, integrated lights-out 5 +1 moreA remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity...4.8 Medium
- hp integrated lights-out 4, integrated lights-out 5 +1 moreA remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity...4.8 Medium
- hp integrated lights-out 4, integrated lights-out 5 +1 moreA local buffer overflow vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE...6.7 Medium
- hp integrated lights-out 4, integrated lights-out 5 +1 moreA remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity...4.8 Medium
- codesys plcwinnt, runtime toolkit, wago 750-8202 firmware +26 more +28 moreCODESYS V2 runtime system before 2.4.7.55 has Improper Input Validation.7.5 High
- codesys v2 runtime system sp, wago 750-8202 firmware, 750-8203 firmware +25 more +27 moreCODESYS V2 runtime system SP before 2.4.7.55 has a Stack-based Buffer Overflow.9.8 Critical
- codesys plcwinnt, runtime toolkit, wago 750-8202 firmware +26 more +28 moreCODESYS V2 runtime system SP before 2.4.7.55 has a Heap-based Buffer Overflow.7.5 High
- codesys v2 web server, wago 750-8202 firmware, 750-8203 firmware +25 more +27 moreCODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Read.9.1 Critical
- codesys v2 web server, wago 750-8202 firmware, 750-8203 firmware +25 more +27 moreCODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Write.9.8 Critical
- codesys v2 web server, wago 750-8202 firmware, 750-8203 firmware +25 more +27 moreCODESYS V2 Web-Server before 1.1.9.20 has an Improperly Implemented Security Check.9.8 Critical
- codesys v2 web server, wago 750-8202 firmware, 750-8203 firmware +25 more +27 moreCODESYS V2 Web-Server before 1.1.9.20 has a a Buffer Copy without Checking the Size of the Input.7.5 High
- codesys v2 web server, wago 750-8202 firmware, 750-8203 firmware +25 more +27 moreCODESYS V2 Web-Server before 1.1.9.20 has Improper Access Control.9.8 Critical
- codesys v2 web server, wago 750-8202 firmware, 750-8203 firmware +25 more +27 moreCODESYS V2 Web-Server before 1.1.9.20 has a Stack-based Buffer Overflow.9.8 Critical
- codesys runtime toolkit, wago 750-8202 firmware, 750-8203 firmware +25 more +27 moreCODESYS V2 runtime system SP before 2.4.7.55 has Improper Neutralization of Special Elements used...5.3 Medium
- lucyparsonslabs openoversightCross-site request forgery in OpenOversight 0.6.4 allows a remote attacker to perform sensitive...8.1 High
- acronis true image 2020An issue was discovered in Acronis True Image 2020 24.5.22510. anti_ransomware_service.exe...7.8 High
- acronis true image 2020An issue was discovered in Acronis True Image 2020 24.5.22510. anti_ransomware_service.exe...7.8 High
- acronis true image 2020An issue was discovered in Acronis True Image 2020 24.5.22510. anti_ransomware_service.exe keeps...5.5 Medium
- apache wicketDNS proxy and possible amplification attack7.5 High
- gnu glibc, debian linux, fedoraproject fedora +13 more +15 moreThe mq_notify function in the GNU C Library (aka glibc) through 2.33 has a use-after-free. It may...9.8 Critical
- canonical apportapport process_report() arbitrary file write5.2 Medium
- canonical apportapport get_modified_conffiles() function command injection3.8 Low
- canonical apport, ubuntu linux +1 moreapport read_file() function could follow maliciously constructed symbolic links7.3 High
- canonical apport, ubuntu linux +1 moreapport read_file() function could follow maliciously constructed symbolic links7.3 High
- canonical apport, oracle openjdk, canonical ubuntu linux +2 moreapport read_file() function could follow maliciously constructed symbolic links7.3 High
- Show moreLoading…