CVEs published in May 2021
2,381 vulnerabilities, 217 critical, 19 exploited.
- phpmywindCross Site Scripting (XSS) in PHPMyWind v5.5 allows remote attackers to execute arbitrary code by...4.8 Medium
- vmware spring framework, netapp hci, management services for element software +29 more +31 moreImproper Privilege Management in Spring Framework7.8 High
- project quay quayA flaw was found in Red Hat Quay, where it has a persistent Cross-site Scripting (XSS)...9.0 Critical
- squid-cache squid, fedoraproject fedora, netapp cloud manager +2 moreAn issue was discovered in Squid before 4.15 and 5.x before 5.0.6. An integer overflow problem...6.5 Medium
- huawei usg9500, usg9500 firmware +1 moreThere is a resource management error vulnerability in the verisions V500R001C60SPC500,...4.9 Medium
- huawei mate 30 5g firmware, mate 30 firmware +1 moreThere is a denial of service vulnerability in the versions 10.1.0.126(C00E125R5P3) of HUAWEI Mate...5.5 Medium
- huawei s5700 firmware, s6700 firmware +1 moreThere is a denial of service vulnerability in the verisions V200R005C00SPC500 of S5700 and...7.5 High
- huawei fusioncomputeThere is an insufficient input validation vulnerability in FusionCompute 8.0.0. Due to the input...4.3 Medium
- linux kernelMounting /proc filesystem via chroot command silently mounts it in read-write mode. The user...5.5 Medium
- huawei cloudengine 12800 firmware, cloudengine 5800 firmware, cloudengine 6800 firmware +1 more +3 moreThere is an out of bounds write vulnerability in some Huawei products. An attacker can exploit...5.3 Medium
- golang go, fedoraproject fedora +1 moregolang.org/x/net/http/httpguts vulnerable to Uncontrolled Recursion5.9 Medium
- huawei ngfw module firmware, secospace usg6300 firmware, secospace usg6500 firmware +2 more +4 moreThere is an out-of-bounds write vulnerability in some Huawei products. The code of a module have...6.5 Medium
- apache fineractdisabled hostname verificiation7.4 High
- umask project umaskPermissions bypass in pleaser7.8 High
- pleaseedit project pleaseeditPermissions bypass in pleaser7.8 High
- please project pleaseFile exposure in pleaser3.3 Low
- ivanti connect secure, pulse connect secure +1 moreA vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4...7.2 High
- ivanti connect secure, pulse connect secure +1 moreA command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote...8.8 High
- citrix sharefile storage zones controller, sharefile storagezones controller +1 moreA missing authorization vulnerability exists in Citrix ShareFile Storage Zones Controller before...9.8 Critical
- ivanti connect secure, pulse connect secure +1 moreA buffer overflow vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote...8.8 High
- rocket.chatAn information disclosure vulnerability exists in the Rocket.Chat server fixed v3.13, v3.12.2 &...7.5 High
- rocket.chatA improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that...9.8 Critical
- ui edgemax edgerouter firmwareA vulnerability found in EdgeMAX EdgeRouter V2.0.9 and earlier could allow a malicious actor to...7.5 High
- ivanti connect secure, pulsesecure pulse connect secure +1 moreA buffer overflow vulnerability exists in Windows File Resource Profiles in 9.X allows a remote...8.8 High
- citrix workspace app for windows, workspace +1 moreAn improper access control vulnerability exists in Citrix Workspace App for Windows potentially...7.8 High
- labapart gattlibGattLib 0.3-rc1 has a stack-based buffer over-read in get_device_path_from_mac in dbus/gattlib.c.9.8 Critical
- trend micro home network securityA hard-coded password vulnerability exists in the SFTP Log Collection Server function of Trend...6.5 Medium
- trend micro home network securityA privilege escalation vulnerability exists in the tdts.ko chrdev_ioctl_handle functionality of...7.8 High
- hendrik erz zettlrCross-site scripting vulnerability in Zettlr from 0.20.0 to 1.8.8 allows an attacker to execute...6.1 Medium
- inspircdInspIRCd 3.8.0 through 3.9.x before 3.10.0 allows any user (able to connect to the server) to...4.3 Medium
- istioIstio Authorization Bypass Vulnerability6.5 Medium
serenityOSS-FuzzHeap-use-after-free in AK::NonnullOwnPtr<JS::IndexedPropertyStorage>::operator->No scoreghostscriptOSS-FuzzHeap-buffer-overflow in sampled_data_finishNo scoreespeak-ngOSS-FuzzStack-buffer-overflow in InterpretConditionNo scoreperfettoOSS-FuzzUNKNOWN READ in std::__1::__tree<std::__1::__value_type<Json::Value::CZString, Json::Value>, stdNo scoremrubyOSS-FuzzUNKNOWN READ in mrb_ary_shift_mNo score- boaBoa 0.94.13 allows remote attackers to obtain sensitive information via a misconfiguration...7.5 High
- linux kernel, fedoraproject fedora, netapp cloud backup +9 more +11 morekernel/bpf/verifier.c in the Linux kernel through 5.12.7 enforces incorrect limits for pointer...7.8 High
- squid-cache squid, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to an input-validation bug...6.5 Medium
- squid-cache squid, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to a memory-management bug...6.5 Medium
- squid-cache squid, debian linux, fedoraproject fedora +2 moreModerate: squid:4 security, bug fix, and enhancement update6.5 Medium
- squid-cache squid, debian linux, fedoraproject fedora +2 moreModerate: squid:4 security, bug fix, and enhancement update4.9 Medium
- squid-cache squid, debian linux, fedoraproject fedora +1 more +3 moreModerate: squid:4 security, bug fix, and enhancement update7.5 High
- redhat ceph storageA flaw was found in Red Hat Ceph Storage 4, in the Dashboard component. In response to CVE-2020...6.1 Medium
- upx, fedoraproject fedora, redhat enterprise linux +2 moreAn assertion abort was found in upx MemBuffer::alloc() in mem.cpp, in version UPX 4.0.0. The flow...5.5 Medium
- upx, fedoraproject fedora, redhat enterprise linux +2 moreNull pointer dereference was found in upx PackLinuxElf::canUnpack() in p_lx_elf.cpp,in version...7.8 High
- cacalabs libcaca, fedoraproject fedora +1 moreA flaw was found in libcaca. A buffer overflow of export.c in function export_troff might lead to...7.8 High
- project quay quayA flaw was found in Red Hat Quay, where it does not properly protect the authorization token when...4.3 Medium
- eclipse jakarta expression language, the eclipse foundation jakarta expression language implementation, oracle communications cloud native core policy +2 more +4 moreImproper Input Validation in Jakarta Expression Language5.3 Medium
- dmg2img project dmg2imgA flaw was found in dmg2img through 20170502. fill_mishblk() does not check the length of the...7.1 High
- Show moreLoading…