CVEs published in May 2021
2,381 vulnerabilities, 217 critical, 19 exploited.
- podofoA flaw was found in PoDoFo 0.9.7. A stack-based buffer overflow in PdfEncryptMD5Base:...7.8 High
- podofo, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in PoDoFo 0.9.7. An uncontrolled recursive call in PdfNamesTree::AddToDictionary...5.5 Medium
- podofo, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in PoDoFo 0.9.7. An uncontrolled recursive call among PdfTokenizer::ReadArray(),...5.5 Medium
- podofo, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in PoDoFo 0.9.7. An use-after-free in PoDoFo::PdfVecObjects::Clear() function...5.5 Medium
- redhat single sign-onAn insecure modification flaw in the /etc/passwd file was found in the redhat-sso-7 container. An...7.8 High
- glpi-project glpiGLPi 9.5.4 does not sanitize the metadata. This way its possible to insert XSS into plugins to execute JavaScript code.6.1 Medium
- fig2dev project fig2dev, debian linux, fedoraproject fedora +2 moreAn Out of Bounds flaw was found fig2dev version 3.2.8a. A flawed bounds check in read_objects()...7.1 High
- qemu, debian linux +1 moreA NULL pointer dereference flaw was found in the floppy disk emulator of QEMU. This issue occurs...6.5 Medium
- qemu, debian linux, redhat enterprise linux +2 moreA flaw was found in the USB redirector device (usb-redir) of QEMU. Small USB packets are combined...5.5 Medium
- gnome evolution, ytnef +1 moreMultiple directory traversal and buffer overflow vulnerabilities were discovered in yTNEF, and in...7.8 High
- redhat 3scale, 3scale api management +1 moreA flaw was found in Red Hat 3scale’s API docs URL, where it is accessible without credentials....5.4 Medium
- red hat resteasy, quarkus +1 moreUnsynchronized Access to Shared Data in a Multithreaded Context in RESTEasy4.3 Medium
- gnu binutilsAn out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could...7.1 High
- ffmpeg, debian linux +1 moreBuffer Overflow vulnerability exists in FFmpeg 4.2 in filter_vertically_8 at libavfilter...6.5 Medium
- dmg2img project dmg2imgA flaw was found in dmg2img through 20170502. dmg2img did not validate the size of the read...7.1 High
- ffmpeg, debian linux +1 moreBuffer Overflow vulnerability exists in FFmpeg 4.2 in the config_input function at libavfilter...6.5 Medium
- ffmpegBuffer Overflow vulnerability in FFmpeg 4.2 at the lagfun_frame16 function in libavfilter...6.5 Medium
- couchbase serverAn issue was discovered in Couchbase Server 5.x and 6.x before 6.5.2 and 6.6.x before 6.6.2....4.9 Medium
json-ptrnpmArbitrary Code Execution in json-ptrNo score- ffmpeg, debian linux +1 moreBuffer Overflow vulnerability in FFmpeg 4.2 at filter_edges function in libavfilter/vf_yadif.c,...6.5 Medium
- schneider-electric tcm 4351b firmware, triconex model 3009 mp firmware +1 moreImproper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009...3.9 Low
- schneider-electric tcm 4351b firmware, triconex model 3009 mp firmware +1 moreImproper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009...3.9 Low
- schneider-electric tcm 4351b firmware, triconex model 3009 mp firmware +1 moreImproper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009...3.9 Low
- schneider-electric tcm 4351b firmware, triconex model 3009 mp firmware +1 moreImproper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009...3.9 Low
- schneider-electric tcm 4351b firmware, triconex model 3009 mp firmware +1 moreImproper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex TCM 4351B...3.9 Low
- schneider-electric tcm 4351b firmware, triconex model 3009 mp firmware +1 moreImproper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009...3.9 Low
- schneider-electric clearscada, ecostruxure geo scada expert 2019, ecostruxure geo scada expert 2020 +2 moreUse of Password Hash with Insufficient Computational Effort vulnerability exists in ClearSCADA ...6.7 Medium
- schneider-electric homelynk firmware, spacelynk firmware +1 moreInformation Exposure vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and...6.5 Medium
- schneider-electric homelynk firmware, spacelynk firmware +1 moreInformation Exposure vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and...5.9 Medium
- schneider-electric homelynk firmware, spacelynk firmware +1 moreUse of a Broken or Risky Cryptographic Algorithm vulnerability exists in homeLYnk (Wiser For KNX)...9.8 Critical
- schneider-electric homelynk firmware, spacelynk firmware +1 moreImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability...7.5 High
- schneider-electric homelynk firmware, spacelynk firmware +1 moreImproper Verification of Cryptographic Signature vulnerability exists inhomeLYnk (Wiser For KNX)...7.2 High
- schneider-electric homelynk firmware, spacelynk firmware +1 moreImproper Verification of Cryptographic Signature vulnerability exists in homeLYnk (Wiser For KNX)...7.2 High
- schneider-electric homelynk firmware, spacelynk firmware +1 moreImproper Privilege Management vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2...7.8 High
- schneider-electric homelynk firmware, spacelynk firmware +1 moreImproper Privilege Management vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2...7.8 High
- schneider-electric mcsesm043f23f0 firmware, mcsesm053f1cs0 firmware, mcsesm053f1cu0 firmware +13 more +15 moreWeak Password Recovery Mechanism for Forgotten Password vulnerability exists on Modicon Managed...9.8 Critical
- schneider-electric ecostruxure machine expert, vijeo designer +1 moreImproper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that...7.8 High
- schneider-electric modicon m241 firmware, modicon m251 firmware +1 moreImproper Input Validation vulnerability exists in Modicon M241/M251 logic controllers firmware...7.5 High
- ffmpeg, debian linux +1 moreBuffer Overflow vulnerability in FFmpeg 4.2 at convolution_y_10bit in libavfilter/vf_vmafmotion.c...6.5 Medium
- ffmpeg, debian linux +1 moreBuffer Overflow vulnerability in FFmpeg 4.2 in the build_diff_map function in libavfilter...6.5 Medium
- versa-networks versa operating systemIn VOS and overly permissive "umask" may allow for authorized users of the server to gain...8.8 High
- versa-networks versa operating systemIn VOS user session identifier (authentication token) is issued to the browser prior to...8.8 High
- versa networks director, versa-networks versa director +1 moreIn Versa Director, the un-authentication request found.5.3 Medium
- versa-networks versa analyticsIn Versa Analytics, the cron jobs are used for scheduling tasks by executing commands at specific...7.8 High
- versa networks director, versa-networks versa director +1 moreIn Versa Director, the unencrypted backup files stored on the Versa deployment contain...5.5 Medium
- versa-networks versa operating systemIn VOS compromised, an attacker at network endpoints can possibly view communications between an...5.9 Medium
- versa-networks versa analytics, versa director, versa operating system +2 moreIn Versa Director, Versa Analytics and VOS, Passwords are not hashed using an adaptive...5.5 Medium
- versa networks director, versa-networks versa director +1 moreIn Versa Director, the command injection is an attack in which the goal is execution of arbitrary...9.8 Critical
- ckeditor, debian linux, drupal +1 more +3 moreckeditor4 vulnerable to cross-site scripting6.1 Medium
- openvpn private tunnelPrivate Tunnel installer for macOS version 3.0.1 and older versions may corrupt system critical...7.8 High
- Show moreLoading…