CVEs published May 12, 2021
44 CVEs were published on May 12, 2021: 1 critical, 10 high.
- Published
- 44
- Critical
- 1
- High
- 10
- Medium
- 3
- Low
- 0
- Unrated
- 30
- Now in CISA KEV
- 0
- Fix available
- 8
Most affected products
- Siemens SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15… +13
- 4
- Siemens SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\… +5
- 3
- Siemens Tecnomatix Plant Simulation
- 3
- McAfee Total Protection
- 2
- samba
- 2
- Trend Micro HouseCall for Home Networks
- 2
- Argo CD
- 1
- Atlassian Jira Server · Atlassian Jira Data Center
- 1
- keycloak · org.keycloak:keycloak-core
- 1
- Linux Kernel
- 1
Critical 1
High 10
- CVE-2021-23134Linux kernel llcp_sock_bind/connect use-after-freeLinux Kernel
- CVE-2021-27385A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl.Siemens SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15… +13
- CVE-2021-27386A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl.Siemens SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15… +13
- CVE-2021-25660A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl.Siemens SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\… +5
- CVE-2021-25661A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl.Siemens SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\… +5
- CVE-2021-25662A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl.Siemens SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\… +5
- CVE-2021-27383A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl.Siemens SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15… +13
- CVE-2021-23892By exploiting a time of check to time of use (TOCTOU) race condition during the Endpoint Security for Linux Threat Prevention and Firewall (McAfee Endpoint Security (ENS) for Linux
- CVE-2021-23872Privilege Escalation vulnerability in McAfee Total Protection (MTP)McAfee Total Protection
- CVE-2021-23891Privilege Escalation vulnerability in McAfee Total Protection (MTP)McAfee Total Protection
Medium, low and unrated 33
- CVE-2021-22155An Authentication Bypass vulnerability in the SAML Authentication component of BlackBerry Workspaces Server (deployed with Appliance-X) vers
- CVE-2021-23135Argo CD leaked secret data into error messages and logs on invalid edits via UIArgo CD
- CVE-2020-28722Deskpro Cloud Platform and on-premise 2020.2.3.48207 from 2020-07-30 contains a cross-site scripting (XSS) vulnerability that can lead to an
- CVE-2020-18165Cross Site Scripting (XSS) in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands into the "Website SEO K
- CVE-2021-29511Memory over-allocation in evm craterust-blockchain evm · evm +1
- CVE-2020-19275An Information Disclosure vulnerability exists in dhcms 2017-09-18 when entering invalid characters after the normal interface, which causes
- CVE-2020-19274A Cross SIte Scripting (XSS) vulnerability exists in Dhcms 2017-09-18 in guestbook via the message board, which could let a remote malicious
- CVE-2021-30213Knowage Suite 7.3 is vulnerable to unauthenticated reflected cross-site scripting (XSS).
- CVE-2021-30214Knowage Suite 7.3 is vulnerable to Stored Client-Side Template Injection in '/knowage/restful-services/signup/update' via the 'name' paramet
- CVE-2021-30212Knowage Suite 7.3 is vulnerable to Stored Cross-Site Scripting (XSS).
- CVE-2021-30211Knowage Suite 7.3 is vulnerable to Stored Cross-Site Scripting (XSS).
- CVE-2021-32572Speco Web Viewer through 2021-05-12 allows Directory Traversal via GET request for a URI with /..
- CVE-2020-23790An Arbitrary File Upload vulnerability was discovered in the Golo Laravel theme v 1.1.5.
- CVE-2021-32611A NULL pointer dereference vulnerability exists in eXcall_api.c in Antisip eXosip2 through 5.2.0 when handling certain 3xx redirect response
- CVE-2021-31519An incorrect permission vulnerability in the product installer folders for Trend Micro HouseCall for Home Networks version 5.3.1179 and beloTrend Micro HouseCall for Home Networks
- CVE-2021-28649An incorrect permission vulnerability in the product installer for Trend Micro HouseCall for Home Networks version 5.3.1179 and below could Trend Micro HouseCall for Home Networks
- CVE-2021-32607An issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1.
- CVE-2021-32608An issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1.
- CVE-2021-20202A flaw was found in keycloak.keycloak · org.keycloak:keycloak-core
- CVE-2021-3457An improper authorization handling flaw was found in Foreman.smart_proxy_shellhooks
- CVE-2020-27840A flaw was found in samba.samba
- CVE-2021-20277A flaw was found in Samba's libldb.samba
- CVE-2021-27396A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5).Siemens Tecnomatix Plant Simulation
- CVE-2021-27397A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5).Siemens Tecnomatix Plant Simulation
- CVE-2021-27398A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5).Siemens Tecnomatix Plant Simulation
- CVE-2021-31339A vulnerability has been identified in Mendix Excel Importer Module (All versions < V9.0.3).Siemens Mendix Excel Importer Module
- CVE-2021-31341Uploading a table mapping using a manipulated XML file results in an exception that could expose information about the application-server anMendix Database Replication Module
- CVE-2020-25242A vulnerability has been identified in SIMATIC NET CP 343-1 Advanced (incl.Siemens SIMATIC NET CP 343-1 Advanced · Siemens SIMATIC… +1
- CVE-2020-28393An unauthenticated remote attacker could create a permanent denial-of-service condition by sending specially crafted OSPF packets.SCALANCE XM-400, XR-500
- CVE-2019-19276A vulnerability has been identified in SIMATIC HMI Comfort Panels 1st Generation (incl.Siemens SIMATIC HMI Comfort Panels 1st Generation · Siemens…
- CVE-2020-13873A SQL Injection vulnerability in get_topic_info() in sys/CODOF/Forum/Topic.php in Codoforum before 4.9 allows remote attackers (pre-authenti
- CVE-2020-35198An issue was discovered in Wind River VxWorks 7.
- CVE-2020-36289Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Information Disclosure vuAtlassian Jira Server · Atlassian Jira Data Center