# CVEs published 2021-05-16

5 CVEs were published on May 16, 2021: 0 critical, 0 high. Days are UTC.

- [CVE-2021-29047](https://cve.now/CVE-2021-29047.md): The SimpleCaptcha implementation in Liferay Portal 7.3.4, 7.3.5 and Liferay DXP 7.3 before fix pack 1 does not invalidate CAPTCHA answers af (no CVSS, com.liferay.portal:release.portal.bom · com.liferay.portal:…)
- [CVE-2021-29041](https://cve.now/CVE-2021-29041.md): Denial-of-service (DoS) vulnerability in the Multi-Factor Authentication module in Liferay DXP 7.3 before fix pack 1 allows remote authentic (no CVSS, com.liferay.portal:release.dxp.bom)
- [CVE-2021-29040](https://cve.now/CVE-2021-29040.md): The JSON web services in Liferay Portal 7.3.4 and earlier, and Liferay DXP 7.0 before fix pack 97, 7.1 before fix pack 20 and 7.2 before fix (no CVSS, com.liferay.portal:release.portal.bom · com.liferay.portal:…)
- [CVE-2021-29039](https://cve.now/CVE-2021-29039.md): Cross-site scripting (XSS) vulnerability in the Asset module's categories administration page in Liferay Portal 7.3.4 allows remote attacker (no CVSS, com.liferay.portal:release.portal.bom)
- [CVE-2021-22668](https://cve.now/CVE-2021-22668.md): Delta Industrial Automation CNCSoft ScreenEditor Versions 1.01.28 (with ScreenEditor Version 1.01.2) and prior are vulnerable to an out-of-b (no CVSS, Delta Industrial Automation CNCSoft ScreenEditor)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-05-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.