CVEs published in May 2021
2,381 vulnerabilities, 217 critical, 19 exploited.
- [unknown] redhat-certification, redhat certification +1 moreIt has been discovered that redhat-certification does not properly limit the number of recursive...7.5 High
- [unknown] redhat-certification, redhat certification +1 moreIt has been discovered that redhat-certification does not restrict file access in the /update...9.1 Critical
- [unknown] redhat-certification, redhat certification +1 moreIt has been discovered that redhat-certification does not perform an authorization check and it...9.1 Critical
- [unknown] redhat-certification, redhat certification +1 moreIt has been discovered that redhat-certification does not perform an authorization check and...7.5 High
- [unknown] redhat-certification, redhat certification +1 moreIt has been discovered that redhat-certification is not properly configured and it lists all...7.5 High
- phpgurukul covid19 testing management systemCOVID19 Testing Management System 1.0 is vulnerable to SQL Injection via the admin panel.9.8 Critical
- phpgurukul covid19 testing management systemCOVID19 Testing Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the "Admin...4.8 Medium
- ffmpeg, debian linux +1 moreBuffer Overflow vulnerability in FFmpeg 4.2 in mov_write_video_tag due to the out of bounds in...8.8 High
- ibm websphere application serverIBM WebSphere Application Server 8.0, 8.5, 9.0, and Liberty Java Batch is vulnerable to an XML...6.5 Medium
- ibm power 9 systems, power9 system firmware, scale-out lc system firmware +2 moreIBM Power9 Self Boot Engine(SBE) could allow a privileged user to inject malicious code and...8.0 High
- ibm cloud pak for dataIBM Cloud Pak for Data 3.0 could allow an authenticated user to obtain sensitive information when...5.3 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5...7.4 High
- typoraCross Site Scripting (XSS) in Typora v0.9.65 and earlier allows remote attackers to execute...6.1 Medium
- golang go, fedoraproject fedora +1 moregolang.org/x/net/html Infinite Loop vulnerability7.5 High
- 8x8 jitsi meetjitsi-meet-prosody in Jitsi Meet before 5026 does not ensure that restrict_room_creation is set...7.5 High
- ffmpegBuffer Overflow vulnerability in FFMpeg 4.2.3 in dnn_execute_layer_pad in libavfilter/dnn...8.8 High
- js-extend project js-extendPrototype pollution vulnerability in js-extend9.8 Critical
- vmware vcenter server, cloud foundation +1 moreThe vSphere Client (HTML5) contains a vulnerability in a vSphere authentication mechanism for the...9.8 Critical
- vmware vcenter server, cloud foundation +1 moreThe vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input...9.8 Critical
- hyperkitty project hyperkitty, debian linux +1 moreExposure of sensitive information to an unauthorized actor in HyperKitty7.5 High
- trend micro home network securityA privilege escalation vulnerability exists in the tdts.ko chrdev_ioctl_handle functionality of...7.8 High
- apache pulsarAuthentication with JWT allows use of “none”-algorithm9.8 Critical
- the xorg project xorg-x11-server, x.org x server +1 moreA privilege escalation flaw was found in the Xorg-x11-server due to a lack of authentication for...7.0 High
- vfairsAny user logged in to a vFairs 3.3 virtual conference or event can perform SQL injection with a...8.8 High
- vfairsIn vFairs 3.3, any user logged in to a vFairs virtual conference or event can modify any other...5.4 Medium
- vfairsvFairs 3.3 is affected by Insecure Permissions. Any user logged in to a vFairs virtual conference...4.3 Medium
- vfairsvFairs 3.3 is affected by Remote Code Execution. Any user logged in to a vFairs virtual...8.8 High
- redhat 3scale3scale dev portal login form does not verify CSRF token, and so does not protect against login CSRF.8.8 High
- debian linux, fedoraproject fedora, linux kernel +10 more +12 moreImproper memory handling in Linux KVM8.7 High
- joomla joomla\!, joomla! project cms +1 more[20210503] - Core - CSRF in data download endpoints6.5 Medium
- joomla joomla\!, joomla! project cms +1 more[20210502] - Core - CSRF in AJAX reordering endpoint6.5 Medium
- joomla joomla\!, joomla! project cms +1 more[20210501] - Core - Adding HTML to the executable block list of MediaHelper::canUpload6.1 Medium
- centreonCross-site scripting in Centreon5.4 Medium
- haxx curl, netapp cloud backup, h300e firmware +22 more +24 morecurl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a...5.3 Medium
- haxx curl, netapp active iq unified manager, cloud backup +26 more +28 morecurl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed...8.1 High
- haxx curl, debian linux, fedoraproject fedora +12 more +14 morecurl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option,...3.1 Low
- rsa archerThe Tableau integration in RSA Archer 6.4 P1 (6.4.0.1) through 6.9 P2 (6.9.0.2) is affected by an...5.1 Medium
- rsa archerRSA Archer before 6.9 SP1 P1 (6.9.1.1) contains a stored XSS vulnerability. A remote...5.4 Medium
- cacalabs libcaca, fedoraproject fedora +1 moreA flaw was found in libcaca. A heap buffer overflow in export.c in function export_tga might lead...7.8 High
- isc dhcp, debian linux, fedoraproject fedora +13 more +15 moreA buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient7.4 High
- schneider-electric homelynk firmware, spacelynk firmware +1 moreInsufficiently Protected Credentials vulnerability exists in homeLYnk (Wiser For KNX) and...9.8 Critical
kryoOSS-FuzzUncaught exceptionNo scoremrubyOSS-FuzzHeap-buffer-overflow in mrb_format_floatNo score- yubico pam-u2f, fedoraproject fedora +1 moreYubico pam-u2f before 1.1.1 has a logic issue that, depending on the pam-u2f configuration and...6.8 Medium
- pixar ruby-jssRemote code execution in ruby-jss9.8 Critical
- postbird project postbirdPostbird 0.8.4 allows stored XSS via the onerror attribute of an IMG element in any PostgreSQL...5.4 Medium
- gnome libgrsslibgrss through 0.7.0 fails to perform TLS certificate verification when downloading feeds,...7.5 High
- ffmpeg, debian linux +1 moreFFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aaccoder, which allows a remote...6.5 Medium
- nconf-toml project nconf-tomlPrototype pollution in nconf-toml9.8 Critical
- ffmpeg, debian linux +1 moreDenial of Service issue in FFmpeg 4.2 due to resource management errors via fftools/cmdutils.c.7.5 High
- Show moreLoading…