CVEs published May 3, 2021
19 CVEs were published on May 3, 2021: 0 critical, 1 high.
- Published
- 19
- Critical
- 0
- High
- 1
- Medium
- 1
- Low
- 0
- Unrated
- 17
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- @rkesters/gnuplot
- 1
- algorithmica
- 1
- mixme
- 1
- octobercms october · october/cms
- 1
- The Document Foundation LibreOffice
- 1
High 1
Medium, low and unrated 18
- CVE-2020-23015An open redirect issue was discovered in OPNsense through 20.1.5.
- CVE-2021-32020The kernel in Amazon Web Services FreeRTOS before 10.4.3 has insufficient bounds checking during management of heap memory.
- CVE-2020-23083Unrestricted File Upload in JEECG v4.0 and earlier allows remote attackers to execute arbitrary code or gain privileges by uploading a craft
- CVE-2020-35758An issue was discovered on Libre Wireless LS9 LS1.5/p7040 devices.
- CVE-2020-35757An issue was discovered on Libre Wireless LS9 LS1.5/p7040 devices.
- CVE-2020-35756An issue was discovered on Libre Wireless LS9 LS1.5/p7040 devices.
- CVE-2020-35755An issue was discovered on Libre Wireless LS9 LS1.5/p7040 devices.
- CVE-2020-28945OX App Suite 7.10.4 and earlier allows XSS via crafted content to reach an undocumented feature, such as  suffers from a memory corruption vulnerability in the /nova/bin/traceroute process.
- CVE-2020-20247Mikrotik RouterOs before 6.46.5 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/traceroute process.
- CVE-2021-29242CODESYS Control Runtime system before 3.5.17.0 has improper input validation.
- CVE-2021-29239CODESYS Development System 3 before 3.5.17.0 displays or executes malicious documents or files embedded in libraries without first checking
- CVE-2021-29238CODESYS Automation Server before 1.16.0 allows cross-site request forgery (CSRF).
- CVE-2021-28860In Node.js mixme, prior to v0.5.1, an attacker can add or alter properties of an object via '__proto__' through the mutate() and merge() funmixme
- CVE-2021-29369The gnuplot package prior to version 0.1.0 for Node.js allows code execution via shell metacharacters in Gnuplot commands.@rkesters/gnuplot
- CVE-2021-25631denylist of executable filename extensions possible to bypass under windowsThe Document Foundation LibreOffice
- CVE-2021-31996An issue was discovered in the algorithmica crate through 2021-03-07 for Rust.algorithmica