CVEs published May 4, 2021
13 CVEs were published on May 4, 2021: 0 critical, 3 high. 1 is now in CISA KEV.
- Published
- 13
- Critical
- 0
- High
- 3
- Medium
- 4
- Low
- 0
- Unrated
- 6
- Now in CISA KEV
- 1
- Fix available
- 5
Most affected products
- redis
- 2
- Apache Software Foundation Apache Unomi · org.apache.unomi:…
- 1
- Dell dbutil
- 1
- Google Cloud IoT Device SDK for Embedded C
- 1
- handlebars
- 1
- IBM FlashSystem
- 1
- path-parse
- 1
High 3
Medium, low and unrated 10
- CVE-2021-26804Insecure Permissions in Centreon Web versions 19.10.18, 20.04.8, and 20.10.2 allows remote attackers to bypass validation by changing any fi
- CVE-2020-4987The IBM FlashSystem 900 user management GUI is vulnerable to stored cross-site scripting in code versions 1.5.2.8 and prior and 1.6.1.2 and IBM FlashSystem
- CVE-2020-21999iWT Ltd FaceSentry Access Control System 6.4.8 suffers from an authenticated OS command injection vulnerability using default credentials.
- CVE-2020-27518All versions of Windscribe VPN for Mac and Windows <= v2.02.10 contain a local privilege escalation vulnerability in the WindscribeService c
- CVE-2021-22547Buffer overrun in Google Cloud IoT Device SDK for Embedded CGoogle Cloud IoT Device SDK for Embedded C
- CVE-2021-3154An issue was discovered in SolarWinds Serv-U before 15.2.2.
- CVE-2021-29240The Package Manager of CODESYS Development System 3 before 3.5.17.0 does not check the validity of packages before installation and may be u
- CVE-2021-23383Prototype Pollutionhandlebars
- CVE-2021-23343Regular Expression Denial of Service (ReDoS)path-parse
- CVE-2021-31164Apache Unomi log injectionApache Software Foundation Apache Unomi · org.apache.unomi:…