Archive
May 2021
Vulnerabilities first published in this month (UTC), newest first.
1,521 results · Feed
-
Unscored —
An Arbitrary File Upload vulnerability was discovered in the Golo Laravel theme v 1.1.5.
-
Unscored —
A NULL pointer dereference vulnerability exists in eXcall_api.c in Antisip eXosip2 through 5.2.0 when handling certain …
-
Unscored —
An incorrect permission vulnerability in the product installer folders for Trend Micro HouseCall for Home Networks vers…
-
Unscored —
An incorrect permission vulnerability in the product installer for Trend Micro HouseCall for Home Networks version 5.3.…
-
Unscored —CVE-2021-32607 EPSS 33%
An issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1. Views/PrivateMessages/View.cshtml does not cal…
-
Unscored —CVE-2021-32608 EPSS 33%
An issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1. Views/Boards/Partials/_ForumPost.cshtml does n…
-
High 7.3
Temporary Directory Hijacking Vulnerability in Keycloak
A flaw was found in keycloak. Directories can be created prior to the Java process creating them in the temporary directory, but with wider user permissions, allowing the attacker to have access to the contents that keycloak stores in this directory. The high…
-
Unscored —
An improper authorization handling flaw was found in Foreman. The Shellhooks plugin for the smart-proxy allows Foreman …
-
Unscored —
A flaw was found in samba. Spaces used in a string around a domain name (DN), while supposed to be ignored, can cause i…
-
Unscored —
A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bou…
-
Unscored —
Uploading a table mapping using a manipulated XML file results in an exception that could expose information about the …
-
Unscored —
A vulnerability has been identified in Mendix Excel Importer Module (All versions < V9.0.3). Uploading a manipulated XM…
-
High 7.5
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All v…
-
High 7.5
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All v…
-
Unscored —
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The PlantSimCore.dll libra…
-
Unscored —
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The PlantSimCore.dll libra…
-
Unscored —
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The PlantSimCore.dll libra…
-
Unscored —
An unauthenticated remote attacker could create a permanent denial-of-service condition by sending specially crafted OS…
-
Unscored —
A vulnerability has been identified in SIMATIC NET CP 343-1 Advanced (incl. SIPLUS variants) (All versions), SIMATIC NE…
-
High 7.5
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All v…
-
Critical 9.8
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All v…
-
High 7.5
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All v…
-
High 7.5
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All v…
-
High 7.5
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All v…
-
Unscored —
A vulnerability has been identified in SIMATIC HMI Comfort Panels 1st Generation (incl. SIPLUS variants) (All versions …
-
Unscored —
A SQL Injection vulnerability in get_topic_info() in sys/CODOF/Forum/Topic.php in Codoforum before 4.9 allows remote at…
-
Unscored —
An issue was discovered in Wind River VxWorks 7. The memory allocator has a possible integer overflow in calculating a …
-
High 8.2
By exploiting a time of check to time of use (TOCTOU) race condition during the Endpoint Security for Linux Threat Prev…
-
High 7.8
Privilege Escalation vulnerability in McAfee Total Protection (MTP)
Privilege Escalation vulnerability in the File Lock component of McAfee Total Protection (MTP) prior to 16.0.32 allows a local user to gain elevated privileges by manipulating a symbolic link in the IOCTL interface.
-
High 7.8
Privilege Escalation vulnerability in McAfee Total Protection (MTP)
Privilege Escalation vulnerability in McAfee Total Protection (MTP) prior to 16.0.32 allows a local user to gain elevated privileges by impersonating a client token which could lead to the bypassing of MTP self-defense.
-
Medium 5.3
Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Info…
-
Unscored —
A flaw was found in ImageMagick in versions before 7.0.11, where a division by zero in sRGBTransformImage() in the Magi…
-
Unscored —
A flaw was found in ImageMagick in versions before 7.0.11, where a division by zero ConvertXYZToJzazbz() of MagickCore/…
-
Unscored —
A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the …
-
Unscored —
zzzcms zzzphp before 2.0.4 allows remote attackers to execute arbitrary OS commands by placing them in the keys paramet…
-
Unscored —
Share/IncomingWizard.htm in SolarWinds Serv-U before 15.2.3 mishandles the user-supplied SenderEmail parameter, aka "Sh…
-
Unscored —
An issue was discovered on Zebra (formerly Motorola Solutions) Fixed RFID Reader FX9500 devices. An unauthenticated att…
-
Unscored —
An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verif…
-
Unscored —
An issue was discovered in the kernel in OpenBSD 6.6. The WEP, WPA, WPA2, and WPA3 implementations treat fragmented fra…
-
Unscored —
An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments ev…