# CVEs published 2021-05-12

44 CVEs were published on May 12, 2021: 1 critical, 10 high. Days are UTC.

- [CVE-2021-22155](https://cve.now/CVE-2021-22155.md): An Authentication Bypass vulnerability in the SAML Authentication component of BlackBerry Workspaces Server (deployed with Appliance-X) vers (no CVSS)
- [CVE-2021-23135](https://cve.now/CVE-2021-23135.md): Argo CD leaked secret data into error messages and logs on invalid edits via UI (CVSS 5.9, Argo CD)
- [CVE-2021-23134](https://cve.now/CVE-2021-23134.md): Linux kernel llcp\_sock\_bind/connect use-after-free (CVSS 7.8, Linux Kernel)
- [CVE-2020-28722](https://cve.now/CVE-2020-28722.md): Deskpro Cloud Platform and on-premise 2020.2.3.48207 from 2020-07-30 contains a cross-site scripting (XSS) vulnerability that can lead to an (no CVSS)
- [CVE-2020-18165](https://cve.now/CVE-2020-18165.md): Cross Site Scripting (XSS) in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands into the "Website SEO K (no CVSS)
- [CVE-2021-29511](https://cve.now/CVE-2021-29511.md): Memory over-allocation in evm crate (CVSS 6.5, rust-blockchain evm · evm +1)
- [CVE-2020-19275](https://cve.now/CVE-2020-19275.md): An Information Disclosure vulnerability exists in dhcms 2017-09-18 when entering invalid characters after the normal interface, which causes (no CVSS)
- [CVE-2020-19274](https://cve.now/CVE-2020-19274.md): A Cross SIte Scripting (XSS) vulnerability exists in Dhcms 2017-09-18 in guestbook via the message board, which could let a remote malicious (no CVSS)
- [CVE-2021-30213](https://cve.now/CVE-2021-30213.md): Knowage Suite 7.3 is vulnerable to unauthenticated reflected cross-site scripting (XSS). (no CVSS)
- [CVE-2021-30214](https://cve.now/CVE-2021-30214.md): Knowage Suite 7.3 is vulnerable to Stored Client-Side Template Injection in '/knowage/restful-services/signup/update' via the 'name' paramet (no CVSS)
- [CVE-2021-30212](https://cve.now/CVE-2021-30212.md): Knowage Suite 7.3 is vulnerable to Stored Cross-Site Scripting (XSS). (no CVSS)
- [CVE-2021-30211](https://cve.now/CVE-2021-30211.md): Knowage Suite 7.3 is vulnerable to Stored Cross-Site Scripting (XSS). (no CVSS)
- [CVE-2021-32572](https://cve.now/CVE-2021-32572.md): Speco Web Viewer through 2021-05-12 allows Directory Traversal via GET request for a URI with /.. (no CVSS)
- [CVE-2020-23790](https://cve.now/CVE-2020-23790.md): An Arbitrary File Upload vulnerability was discovered in the Golo Laravel theme v 1.1.5. (no CVSS)
- [CVE-2021-32611](https://cve.now/CVE-2021-32611.md): A NULL pointer dereference vulnerability exists in eXcall\_api.c in Antisip eXosip2 through 5.2.0 when handling certain 3xx redirect response (no CVSS)
- [CVE-2021-31519](https://cve.now/CVE-2021-31519.md): An incorrect permission vulnerability in the product installer folders for Trend Micro HouseCall for Home Networks version 5.3.1179 and belo (no CVSS, Trend Micro HouseCall for Home Networks)
- [CVE-2021-28649](https://cve.now/CVE-2021-28649.md): An incorrect permission vulnerability in the product installer for Trend Micro HouseCall for Home Networks version 5.3.1179 and below could (no CVSS, Trend Micro HouseCall for Home Networks)
- [CVE-2021-32607](https://cve.now/CVE-2021-32607.md): An issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1. (no CVSS)
- [CVE-2021-32608](https://cve.now/CVE-2021-32608.md): An issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1. (no CVSS)
- [CVE-2021-20202](https://cve.now/CVE-2021-20202.md): A flaw was found in keycloak. (no CVSS, keycloak · org.keycloak:keycloak-core)
- [CVE-2021-3457](https://cve.now/CVE-2021-3457.md): An improper authorization handling flaw was found in Foreman. (no CVSS, smart\_proxy\_shellhooks)
- [CVE-2020-27840](https://cve.now/CVE-2020-27840.md): A flaw was found in samba. (no CVSS, samba)
- [CVE-2021-20277](https://cve.now/CVE-2021-20277.md): A flaw was found in Samba's libldb. (no CVSS, samba)
- [CVE-2021-27385](https://cve.now/CVE-2021-27385.md): A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\\" & 15\\" (incl. (CVSS 7.5, Siemens SIMATIC HMI Comfort Outdoor Panels V15 7\\" & 15… +13)
- [CVE-2021-27386](https://cve.now/CVE-2021-27386.md): A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\\" & 15\\" (incl. (CVSS 7.5, Siemens SIMATIC HMI Comfort Outdoor Panels V15 7\\" & 15… +13)
- [CVE-2021-27396](https://cve.now/CVE-2021-27396.md): A vulnerability has been identified in Tecnomatix Plant Simulation (All versions \< V16.0.5). (no CVSS, Siemens Tecnomatix Plant Simulation)
- [CVE-2021-27397](https://cve.now/CVE-2021-27397.md): A vulnerability has been identified in Tecnomatix Plant Simulation (All versions \< V16.0.5). (no CVSS, Siemens Tecnomatix Plant Simulation)
- [CVE-2021-27398](https://cve.now/CVE-2021-27398.md): A vulnerability has been identified in Tecnomatix Plant Simulation (All versions \< V16.0.5). (no CVSS, Siemens Tecnomatix Plant Simulation)
- [CVE-2021-31339](https://cve.now/CVE-2021-31339.md): A vulnerability has been identified in Mendix Excel Importer Module (All versions \< V9.0.3). (no CVSS, Siemens Mendix Excel Importer Module)
- [CVE-2021-31341](https://cve.now/CVE-2021-31341.md): Uploading a table mapping using a manipulated XML file results in an exception that could expose information about the application-server an (no CVSS, Mendix Database Replication Module)
- [CVE-2020-25242](https://cve.now/CVE-2020-25242.md): A vulnerability has been identified in SIMATIC NET CP 343-1 Advanced (incl. (no CVSS, Siemens SIMATIC NET CP 343-1 Advanced · Siemens SIMATIC… +1)
- [CVE-2020-28393](https://cve.now/CVE-2020-28393.md): An unauthenticated remote attacker could create a permanent denial-of-service condition by sending specially crafted OSPF packets. (no CVSS, SCALANCE XM-400, XR-500)
- [CVE-2021-25660](https://cve.now/CVE-2021-25660.md): A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\\" & 15\\" (incl. (CVSS 7.5, Siemens SIMATIC HMI Comfort Outdoor Panels V15 7\\" & 15\\… +5)
- [CVE-2021-25661](https://cve.now/CVE-2021-25661.md): A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\\" & 15\\" (incl. (CVSS 7.5, Siemens SIMATIC HMI Comfort Outdoor Panels V15 7\\" & 15\\… +5)
- [CVE-2021-25662](https://cve.now/CVE-2021-25662.md): A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\\" & 15\\" (incl. (CVSS 7.5, Siemens SIMATIC HMI Comfort Outdoor Panels V15 7\\" & 15\\… +5)
- [CVE-2021-27383](https://cve.now/CVE-2021-27383.md): A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\\" & 15\\" (incl. (CVSS 7.5, Siemens SIMATIC HMI Comfort Outdoor Panels V15 7\\" & 15… +13)
- [CVE-2021-27384](https://cve.now/CVE-2021-27384.md): A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\\" & 15\\" (incl. (CVSS 9.8, Siemens SIMATIC HMI Comfort Outdoor Panels V15 7\\" & 15… +13)
- [CVE-2019-19276](https://cve.now/CVE-2019-19276.md): A vulnerability has been identified in SIMATIC HMI Comfort Panels 1st Generation (incl. (no CVSS, Siemens SIMATIC HMI Comfort Panels 1st Generation · Siemens…)
- [CVE-2020-13873](https://cve.now/CVE-2020-13873.md): A SQL Injection vulnerability in get\_topic\_info() in sys/CODOF/Forum/Topic.php in Codoforum before 4.9 allows remote attackers (pre-authenti (no CVSS)
- [CVE-2020-35198](https://cve.now/CVE-2020-35198.md): An issue was discovered in Wind River VxWorks 7. (no CVSS)
- [CVE-2021-23892](https://cve.now/CVE-2021-23892.md): By exploiting a time of check to time of use (TOCTOU) race condition during the Endpoint Security for Linux Threat Prevention and Firewall ( (CVSS 8.2, McAfee Endpoint Security (ENS) for Linux)
- [CVE-2021-23872](https://cve.now/CVE-2021-23872.md): Privilege Escalation vulnerability in McAfee Total Protection (MTP) (CVSS 7.8, McAfee Total Protection)
- [CVE-2021-23891](https://cve.now/CVE-2021-23891.md): Privilege Escalation vulnerability in McAfee Total Protection (MTP) (CVSS 7.8, McAfee Total Protection)
- [CVE-2020-36289](https://cve.now/CVE-2020-36289.md): Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Information Disclosure vu (CVSS 5.3, Atlassian Jira Server · Atlassian Jira Data Center)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-05-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.