CVEs published May 18, 2021
41 CVEs were published on May 18, 2021: 0 critical, 1 high.
- Published
- 41
- Critical
- 0
- High
- 1
- Medium
- 1
- Low
- 0
- Unrated
- 39
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- BItdefender GravityZone Business Security
- 1
- BItdefenderd Endpoint Security Tools for Windows
- 1
- ceph
- 1
- kernel
- 1
- libxml2 · nokogiri
- 1
- OpenLDAP
- 1
- RabbitMQ
- 1
High 1
Medium, low and unrated 40
- CVE-2021-31315Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Stack Based Overflow in the blit function of th
- CVE-2021-31316The unprivileged user portal part of CentOS Web Panel is affected by a SQL Injection via the 'idsession' HTTP POST parameter.
- CVE-2021-31317Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Type Confusion in the VDasher constructor of th
- CVE-2021-31318Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Type Confusion in the LOTCompLayerItem::LOTComp
- CVE-2021-31319Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by an Integer Overflow in the LOTGradient::populate
- CVE-2021-31320Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Heap Buffer Overflow in the VGradientCache::gen
- CVE-2021-31321Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Stack Based Overflow in the gray_split_cubic fu
- CVE-2021-31322Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Heap Buffer Overflow in the LOTGradient::popula
- CVE-2021-31323Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Heap Buffer Overflow in the LottieParserImpl::p
- CVE-2021-31324The unprivileged user portal part of CentOS Web Panel is affected by a Command Injection vulnerability leading to root Remote Code Execution
- CVE-2020-19924In Boostnote 0.12.1, exporting to PDF contains opportunities for XSS attacks.
- CVE-2020-20245Mikrotik RouterOs stable 6.46.3 suffers from a memory corruption vulnerability in the log process.
- CVE-2020-20246Mikrotik RouterOs stable 6.46.3 suffers from a memory corruption vulnerability in the mactel process.
- CVE-2020-20227Mikrotik RouterOs stable 6.47 suffers from a memory corruption vulnerability in the /nova/bin/diskd process.
- CVE-2020-20220Mikrotik RouterOs prior to stable 6.47 suffers from a memory corruption vulnerability in the /nova/bin/bfd process.
- CVE-2020-20237Mikrotik RouterOs 6.46.3 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/sniffer process.
- CVE-2020-20236Mikrotik RouterOs 6.46.3 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/sniffer process.
- CVE-2020-20222Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/sniffer process.
- CVE-2020-20214Mikrotik RouterOs 6.44.6 (long-term tree) suffers from an assertion failure vulnerability in the btest process.
- CVE-2020-18178Path Traversal in HongCMS v4.0.0 allows remote attackers to view, edit, and delete arbitrary files via a crafted POST request to the compone
- CVE-2021-3200Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool, FILE *fp, const char *testcase, Queue *job, c
- CVE-2021-32305WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search parameter.
- CVE-2020-20951In Pluck-4.7.10-dev2 admin background, a remote command execution vulnerability exists when uploading files.
- CVE-2020-24740An issue was discovered in Pluck 4.7.10-dev2.
- CVE-2020-23861A heap-based buffer overflow vulnerability exists in LibreDWG 0.10.1 via the read_system_page function at libredwg-0.10.1/src/decode_r2007.c
- CVE-2021-32238Epic Games / Psyonix Rocket League <=1.95 is affected by Buffer Overflow.
- CVE-2020-23856Use-after-Free vulnerability in cflow 1.6 in the void call(char *name, int line) function at src/parser.c, which could cause a denial of ser
- CVE-2020-24026TinyShop, a free and open source mall based on RageFrame2, has a stored XSS vulnerability that affects version 1.2.0.
- CVE-2020-23852A heap based buffer overflow vulnerability exists in ffjpeg through 2020-07-02 in the jfif_decode(void *ctxt, BMP *pb) function at ffjpeg/sr
- CVE-2020-23851A stack-based buffer overflow vulnerability exists in ffjpeg through 2020-07-02 in the jfif_decode(void *ctxt, BMP *pb) function at ffjpeg/s
- CVE-2020-20254Mikrotik RouterOs before 6.47 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/lcdstat process.
- CVE-2020-20253Mikrotik RouterOs before 6.47 (stable tree) suffers from a divison by zero vulnerability in the /nova/bin/lcdstat process.
- CVE-2021-30145A format string vulnerability in mpv through 0.33.0 allows user-assisted remote attackers to achieve code execution via a crafted m3u playli
- CVE-2021-22117RabbitMQ installers on Windows prior to version 3.8.16 do not harden plugin directory permissions, potentially allowing attackers with suffiRabbitMQ
- CVE-2020-25709A flaw was found in OpenLDAP.OpenLDAP
- CVE-2002-2438TCP firewalls could be circumvented by sending a SYN Packets with other flags (like e.g.kernel
- CVE-2021-3518There's a flaw in libxml2 in versions before 2.9.11.libxml2 · nokogiri
- CVE-2020-15279Scanning exclusion paths disclosure in BEST for WindowsBItdefenderd Endpoint Security Tools for Windows
- CVE-2021-31827In Progress MOVEit Transfer before 2021.0 (13.0), a SQL injection vulnerability has been found in the MOVEit Transfer web app that could all
- CVE-2021-3531A flaw was found in the Red Hat Ceph Storage RGW in versions before 14.2.21.ceph