CVEs published in May 2021
2,381 vulnerabilities, 217 critical, 19 exploited.
- cesanta mjsStack overflow vulnerability in parse_equality Cesanta MJS 1.20.1, allows remote attackers to...5.5 Medium
- cesanta mjsStack overflow vulnerability in parse_shifts Cesanta MJS 1.20.1, allows remote attackers to cause...5.5 Medium
- cesanta mjsStack overflow vulnerability in parse_comparison Cesanta MJS 1.20.1, allows remote attackers to...5.5 Medium
- cesanta mjsStack overflow vulnerability in parse_statement_list Cesanta MJS 1.20.1, allows remote attackers...5.5 Medium
- cesanta mjsStack overflow vulnerability in parse_plus_minus Cesanta MJS 1.20.1, allows remote attackers to...5.5 Medium
- cesanta mjsStack overflow vulnerability in parse_block Cesanta MJS 1.20.1, allows remote attackers to cause...5.5 Medium
- cesanta mjsStack overflow vulnerability in parse_statement Cesanta MJS 1.20.1, allows remote attackers to...5.5 Medium
- cesanta mjsStack overflow vulnerability in parse_unary Cesanta MJS 1.20.1, allows remote attackers to cause...5.5 Medium
- cesanta mjsStack overflow vulnerability in parse_array Cesanta MJS 1.20.1, allows remote attackers to cause...5.5 Medium
- cesanta mjsStack overflow vulnerability in parse_mul_div_rem Cesanta MJS 1.20.1, allows remote attackers to...5.5 Medium
- cesanta mjsStack overflow vulnerability in parse_value Cesanta MJS 1.20.1, allows remote attackers to cause...5.5 Medium
- gnu gamaA NULL-pointer deference issue was discovered in GNU_gama::set() in ellipsoid.h in Gama 2.04...7.5 High
- 1cdn project 1cdn, onedotprojects cdn +1 moreImproper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in 1CDN8.1 High
- sylabs singularityAction Commands (run/shell/exec) Against Library URIs Ignore Configured Remote Endpoint6.3 Medium
- idreamsoft icmsA Cross Site Request Forgery (CSRF) vulnerability was discovered in iCMS 7.0.16 which can allow...8.8 High
- seacmsA cross-site scripting (XSS) vulnerability has been discovered in the login page of SeaCMS...6.1 Medium
- kubernetesValidating Admission Webhook does not observe some previous fields6.5 Medium
- hewlett packard enterprise sitescopeExecute arbitrary code vulnerability in Micro Focus SiteScope product, affecting versions 11.40...9.8 Critical
- tinymceTinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements6.1 Medium
- tinymceTinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option6.1 Medium
- tiny tinymceTinyMCE Cross-Site Scripting (XSS) vulnerability in handling external SVG files through Object or Embed elements4.3 Medium
- tiny tinymceTinyMCE Cross-Site Scripting (XSS) vulnerability in handling iframes4.3 Medium
- tiny tinymceCross-site scripting vulnerability in TinyMCE plugins6.1 Medium
- tiny tinymceCross-site scripting vulnerability in TinyMCE6.1 Medium
- tiny tinymceSpecial characters in unescaped text nodes can trigger mXSS in TinyMCE6.1 Medium
- tiny tinymceCross-site Scripting vulnerability in TinyMCE notificationManager.open API6.1 Medium
- tiny tinymceCross-site Scripting vulnerability in TinyMCE undo/redo, getContent API, resetContent API, and Autosave plugin6.1 Medium
- tiny tinymceCross-site scripting vulnerability in TinyMCE alerts5.4 Medium
@worker-tools/stripe-webhooknpmconstructEvent does not verify headerNo score- openstack neutron, the openstack project openstack-neutron, redhat openstack platform +2 moreOpenstack Neutron has Insufficient Verification of IPv6 addresses7.1 High
- dav-cogs project dav-cogsEscalation of permissions in roomer5.3 Medium
- autheliaAuthentication bypassed with malformed request URI10.0 Critical
- radsecproxy, fedoraproject fedora +1 moreMissing input validation in dynamic discovery example scripts.7.0 High
- siemens simatic drive controller family, simatic et 200sp open controller cpu 1515sp pc (incl. siplus variants), simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants) +12 more +14 moreA vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2),...9.8 Critical
@floffah/buildnpmImproper Neutralization of Special Elements used in a Command ('Command Injection') in @floffah/buildNo score- freebsdIn FreeBSD 13.0-STABLE before n245765-bec0d2c9c841, 12.2-STABLE before r369859, 11.4-STABLE...7.5 High
- freebsdIn FreeBSD 13.0-STABLE before n245764-876ffe28796c, 12.2-STABLE before r369857, 13.0-RELEASE...7.5 High
- redhat smallrye configPermissions bypass in SmallRye4.4 Medium
- ettercap-project ettercapThe gtkui_conf_read function in src/interfaces/gtk/ec_gtk_conf.c in Ettercap 0.7.3, when the GTK...7.8 High
- zte zxa10 f809 firmware, zxa10 f819 firmware, zxa10 f821 firmware +5 more +7 moreSome PON MDU devices of ZTE stored sensitive information in plaintext, and users with login...6.5 Medium
- autodesk licensing servicesAutodesk Licensing Services was found to be vulnerable to privilege escalation issues. A limited...7.8 High
- naver comic viewerAn exposed remote debugging port in Naver Comic Viewer prior to 1.0.15.0 allowed a remote...8.8 High
- kialiKiali Authentication Bypass vulnerability6.5 Medium
- microsoft zeromq, zeromq libzmq +1 moreAn uncontrolled resource consumption (memory leak) flaw was found in ZeroMQ's src/xpub.cpp in...7.5 High
- microsoft zeromq, fedoraproject fedora, redhat ceph storage +1 more +3 moreA flaw was found in the ZeroMQ server in versions before 4.3.3. This flaw allows a malicious...9.8 Critical
- keycloakkeycloak Self Stored Cross-site Scripting vulnerability9.6 Critical
- qemuA use-after-free vulnerability was found in the am53c974 SCSI host bus adapter emulation of QEMU...6.7 Medium
- qemu, debian linux +1 moreA NULL pointer dereference flaw was found in the am53c974 SCSI host bus adapter emulation of QEMU...4.4 Medium
- qemu, debian linux, fedoraproject fedora +2 moreA NULL pointer dereference flaw was found in the SCSI emulation support of QEMU in versions...6.0 Medium
- keycloak, redhat single sign-on +1 moreAuthentication Bypass in keycloak4.2 Medium
- Show moreLoading…