Archive

11 May 2021

Vulnerabilities first published on this day (UTC), newest first.

← April 2021 2021 / May /11 June 2021 →

All Critical High Medium Low Exploited only Public exploit

141 results · Feed

Unscored —

CVE-2021-20311

A flaw was found in ImageMagick in versions before 7.0.11, where a division by zero in sRGBTransformImage() in the Magi…

imagemagick imagemagick Debian Alpine

May 11, 2021
Unscored —

CVE-2021-20310

A flaw was found in ImageMagick in versions before 7.0.11, where a division by zero ConvertXYZToJzazbz() of MagickCore/…

imagemagick Alpine

May 11, 2021
Unscored —

CVE-2021-3504

A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the …

hivex hivex hivex Debian Ubuntu Alpine

May 11, 2021
Unscored —

CVE-2021-32605

zzzcms zzzphp before 2.0.4 allows remote attackers to execute arbitrary OS commands by placing them in the keys paramet…

May 11, 2021
Unscored —

CVE-2021-32604

Share/IncomingWizard.htm in SolarWinds Serv-U before 15.2.3 mishandles the user-supplied SenderEmail parameter, aka "Sh…

May 11, 2021
Unscored —

CVE-2021-32089

An issue was discovered on Zebra (formerly Motorola Solutions) Fixed RFID Reader FX9500 devices. An unauthenticated att…

May 11, 2021
Unscored —

CVE-2020-26141

An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verif…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

May 11, 2021
Unscored —

CVE-2020-26142

An issue was discovered in the kernel in OpenBSD 6.6. The WEP, WPA, WPA2, and WPA3 implementations treat fragmented fra…

linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu

May 11, 2021
Unscored —

CVE-2020-26147

An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments ev…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

May 11, 2021
Medium 5.3

CVE-2020-26146

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WPA, WPA2, and WPA3 implementations reassemble fr…

linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu

May 11, 2021
Unscored —

CVE-2020-26139

An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even t…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

May 11, 2021
Unscored —

CVE-2020-26143

An issue was discovered in the ALFA Windows 10 driver 1030.36.604 for AWUS036ACH. The WEP, WPA, WPA2, and WPA3 implemen…

linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu

May 11, 2021
Unscored —

CVE-2020-26145

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept s…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

May 11, 2021
Unscored —

CVE-2020-26140

An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementa…

linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu

May 11, 2021
Unscored —

CVE-2020-26144

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept p…

linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu

May 11, 2021
High 7.8

CVE-2021-31214

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Microsoft Visual Studio Code

May 11, 2021
High 7.4

CVE-2021-31936

Microsoft Accessibility Insights for Web Information Disclosure Vulnerability

Microsoft Accessibility Insights for Web Information Disclosure Vulnerability

Microsoft Microsoft Accessibility Insights for Web

May 11, 2021
High 7.8

CVE-2021-31213 EPSS 53%

Visual Studio Code Remote Containers Extension Remote Code Execution Vulnerability

Visual Studio Code Remote Containers Extension Remote Code Execution Vulnerability

Microsoft Visual Studio Code Remote - Containers Extension

May 11, 2021
High 7.8

CVE-2021-31211

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Microsoft Visual Studio Code

May 11, 2021
Medium 6.5

CVE-2021-31209

Microsoft Exchange Server Spoofing Vulnerability

Microsoft Exchange Server Spoofing Vulnerability

Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 19 Microsoft Exchange Server 2019 Cumulative Update 8

May 11, 2021
High 7.8

CVE-2021-31208

Windows Container Manager Service Elevation of Privilege Vulnerability

Windows Container Manager Service Elevation of Privilege Vulnerability

Microsoft Windows 10 Version 20H2 Windows Server version 20H2 Windows 10 Version 2004 Windows

May 11, 2021
Medium 6.6

CVE-2021-31207 Exploited · Ransomware Public exploit EPSS 100%

Microsoft Exchange Server Security Feature Bypass Vulnerability

Microsoft Exchange Server Security Feature Bypass Vulnerability

Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 19 Microsoft Exchange Server 2019 Cumulative Update 8

May 11, 2021
KEV Nov 3, 2021
High 7.3

CVE-2021-31204

.NET and Visual Studio Elevation of Privilege Vulnerability

.NET and Visual Studio Elevation of Privilege Vulnerability

Microsoft Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3) Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8) Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)

May 11, 2021
Medium 6.5

CVE-2021-31205

Windows SMB Client Security Feature Bypass Vulnerability

Windows SMB Client Security Feature Bypass Vulnerability

Microsoft Windows 10 Version 20H2 Windows Server version 20H2 Windows 10 Version 2004 Windows

May 11, 2021
High 7.8

CVE-2021-31198

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 8 Microsoft Exchange Server 2016 Cumulative Update 19

May 11, 2021
High 7.2

CVE-2021-31200

Common Utilities Remote Code Execution Vulnerability

Common Utilities Remote Code Execution Vulnerability

Microsoft common_utils.py

May 11, 2021
Medium 6.5

CVE-2021-31195 EPSS 74%

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 8 Microsoft Exchange Server 2016 Cumulative Update 19

May 11, 2021
High 8.8

CVE-2021-31194

OLE Automation Remote Code Execution Vulnerability

OLE Automation Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

May 11, 2021
High 7.8

CVE-2021-31193

Windows SSDP Service Elevation of Privilege Vulnerability

Windows SSDP Service Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

May 11, 2021
High 7.8

CVE-2021-31192

Windows Media Foundation Core Remote Code Execution Vulnerability

Windows Media Foundation Core Remote Code Execution Vulnerability

Microsoft Windows 10 Version 20H2 Windows 10 Version 2004 Windows

May 11, 2021
Medium 5.5

CVE-2021-31191

Windows Projected File System FS Filter Driver Information Disclosure Vulnerability

Windows Projected File System FS Filter Driver Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

May 11, 2021
High 7.8

CVE-2021-31190

Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability

Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

May 11, 2021
High 7.8

CVE-2021-31188

Windows Graphics Component Elevation of Privilege Vulnerability

Windows Graphics Component Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

May 11, 2021
High 7.8

CVE-2021-31187

Windows WalletService Elevation of Privilege Vulnerability

Windows WalletService Elevation of Privilege Vulnerability

Microsoft Windows 10 Version 1809 Windows 10 Version 1607 Windows 10 Version 1507 Windows

May 11, 2021
Medium 5.5

CVE-2021-31185

Windows Desktop Bridge Denial of Service Vulnerability

Windows Desktop Bridge Denial of Service Vulnerability

Microsoft Windows 10 Version 20H2 Windows Server version 20H2 Windows 10 Version 2004 Windows

May 11, 2021
High 7.4

CVE-2021-31186

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

May 11, 2021
Medium 5.5

CVE-2021-31184 Public exploit

Microsoft Windows Infrared Data Association (IrDA) Information Disclosure Vulnerability

Microsoft Windows Infrared Data Association (IrDA) Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

May 11, 2021
High 7.1

CVE-2021-31182

Microsoft Bluetooth Driver Spoofing Vulnerability

Microsoft Bluetooth Driver Spoofing Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

May 11, 2021
High 8.8

CVE-2021-31181 Public exploit EPSS 29%

Microsoft SharePoint Remote Code Execution Vulnerability

Microsoft SharePoint Remote Code Execution Vulnerability

Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Foundation 2013 Service Pack 1

May 11, 2021
High 7.8

CVE-2021-31180

Microsoft Office Graphics Remote Code Execution Vulnerability

Microsoft Office Graphics Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2019 Microsoft Word 2016

May 11, 2021