CVEs published in May 2021
2,381 vulnerabilities, 217 critical, 19 exploited.
- sysjust cts webSysJust CTS Web - Broken Authentication6.5 Medium
- sysjust cts webSysJust CTS Web - Reflected XSS4.7 Medium
- sysjust cts webSysJust CTS Web - Broken Access Control5.3 Medium
- hundred plus 101eipHundred Plus 101EIP - Stored XSS-25.4 Medium
- hundred plus 101eipHundred Plus 101EIP - Stored XSS-15.4 Medium
espeak-ngOSS-FuzzGlobal-buffer-overflow in DoEmbedded2No scorewolfsslOSS-FuzzStack-buffer-overflow in DecodeSingleResponseNo score- redhat 389 directory serverWhen using a sync_repl client in 389-ds-base, an authenticated attacker can cause a NULL pointer...6.5 Medium
- trim-newlines project trim-newlines, debian linux, netapp e-series performance analyzer +2 moreUncontrolled Resource Consumption in trim-newlines7.5 High
- squid-cache squid, debian linux, fedoraproject fedora +2 moreSquid before 4.15 and 5.x before 5.0.6 allows remote servers to cause a denial of service ...6.5 Medium
- css-what project css-what, netapp e-series performance analyzer +1 moreDenial of service in css-what7.5 High
- abinitio control\>centerLocal File Inclusion vulnerability in Ab Initio Control>Center before 4.0.2.6 allows remote...6.5 Medium
- checkbox surveyDeserialization of Untrusted Data vulnerability in CheckboxWeb.dll of Checkbox Survey allows an...9.8 Critical
- adobe coldfusionThe Adobe ColdFusion installer fails to set a secure access-control list (ACL) on the default...7.8 High
- redhat openshiftA flaw was found in the OpenShift web console, where the access token is stored in the browser's...6.1 Medium
- kubevirtPermissions bypass in KubeVirt6.5 Medium
- samba rsyncA flaw was found in rsync in versions since 3.2.0pre1. Rsync improperly validates certificate...7.4 High
- red hat tower, redhat ansible tower +1 moreA data exposure flaw was found in Ansible Tower in versions before 3.7.2, where sensitive data...3.3 Low
- red hat tower, redhat ansible tower +1 moreA flaw was found in Ansible Tower in versions before 3.7.2. A Server Side Request Forgery flaw...3.3 Low
- red hat tower, redhat ansible tower +1 moreA Server-side request forgery (SSRF) flaw was found in Ansible Tower in versions before 3.6.5 and...5.5 Medium
- sonicwall nsm on-prem, network security manager +1 moreA vulnerability in the SonicWall NSM On-Prem product allows an authenticated attacker to perform...8.8 High
- ffmpeg, debian linux +1 moreA heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 atlibavfilter/vf_floodfill.c, which...8.8 High
- redhat satellite, satellite capsule, theforeman foreman ansible +2 moreA flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not...6.5 Medium
- red hat tower, redhat ansible tower +1 moreA security flaw was found in Ansible Tower when requesting an OAuth2 token with an OAuth2...7.1 High
- redhat libvirtA missing authorization flaw was found in the libvirt API responsible for changing the QEMU agent...6.5 Medium
- red hat tower, redhat ansible tower +1 moreA flaw was found in Ansible Tower when running jobs. This flaw allows an attacker to access the...3.3 Low
- red hat tower, redhat ansible tower +1 moreA flaw was found in Ansible Tower when running Openshift. Tower runs a memcached, which is...4.4 Medium
- red hat resteasy, redhat fuse, jboss enterprise application platform +1 more +3 moreCross-site scripting in RESTEasy6.1 Medium
- ffmpeg, debian linux +1 moreA heap-based Buffer Overflow Vulnerability exists FFmpeg 4.2 at libavfilter/vf_vmafmotion.c in...6.5 Medium
github.com/ThomasLeister/prosody-filerGoListing of upload directory contents possibleNo score- ffmpeg, debian linux +1 moreA heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 at libavfilter/vf_edgedetect.c in...8.8 High
- dpgaspar flask-appbuilder, apache airflow +1 moreObservable Response Discrepancy in Flask-AppBuilder5.3 Medium
- ffmpeg, debian linux +1 moreA heap-based Buffer Overflow vulnerability in FFmpeg 4.2 at libavcodec/get_bits.h when writing ...8.8 High
- ffmpeg, debian linux +1 moreA heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at ff_fill_rectangle in...8.8 High
- cubecartCubecart 6.4.2 allows Session Fixation. The application does not generate a new session cookie...5.4 Medium
- ffmpeg, debian linux +1 moreA heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_frame at libavfilter...8.8 High
- ffmpeg, debian linux +1 moreA heap-based Buffer Overflow vulnerabililty exists in FFmpeg 4.2 in filter_frame at libavfilter...8.8 High
- debian linux, ffmpeg +1 moreA heap-based Buffer Overflow vulnerability exists in gaussian_blur at libavfilter/vf_edgedetect.c...8.8 High
- ffmpeg, debian linux +1 moreA heap-based Buffer Overflow vulnerability exits in FFmpeg 4.2 in deflate16 at libavfilter...8.8 High
- ffmpeg, debian linux +1 moreA heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/af_afade.c in...8.8 High
- ffmpeg, debian linux +1 moreA heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vf_colorconstancy...8.8 High
- ffmpeg, debian linux +1 moreA Heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vf_w3fdif.c in...8.8 High
- http4sStaticFile.fromUrl can leak presence of a directory5.8 Medium
- tenancy multi-tenantOpen Redirect in tenancy4.3 Medium
- luxion keyshot, datakit crosscadware, siemens solid edge se2020 firmware +1 more +3 moreDatakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr...7.8 High
- luxion keyshot, datakit crosscadware, siemens solid edge se2020 firmware +1 more +3 moreWhen opening a specially crafted 3DXML file, the application containing Datakit Software...5.5 Medium
- luxion keyshot, datakit crosscadware, siemens solid edge se2020 firmware +1 more +3 moreDatakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr...7.8 High
- luxion keyshot, datakit crosscadware, siemens solid edge se2020 firmware +1 more +3 moreDatakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr...7.8 High
- luxion keyshot, datakit crosscadware, siemens solid edge se2020 firmware +1 more +3 moreDatakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr...7.8 High
- phpmywindCross Site Scripting (XSS) in PHPMyWind v5.5 allows remote attackers to execute arbitrary code by...4.8 Medium
- Show moreLoading…