CVEs published May 19, 2021
29 CVEs were published on May 19, 2021: 0 critical, 3 high.
- Published
- 29
- Critical
- 0
- High
- 3
- Medium
- 7
- Low
- 0
- Unrated
- 19
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- IBM Control Center
- 2
- <Axon 11 5G>
- 1
- <ZXCDN V7.01>
- 1
- fastify-csrf
- 1
- GOT2000 series; GOT SIMPLE series; GT SoftGOT2000; Tension…
- 1
- hedgedoc
- 1
- IBM Cloud Pak for Multicloud Management
- 1
- IBM Maximo Asset Management
- 1
- IBM Sterling B2B Integrator
- 1
- libdnf
- 1
High 3
Medium, low and unrated 26
- CVE-2021-29624Lack of protection against cookie tossing attacks in fastify-csrffastify-csrf
- CVE-2021-29622Arbitrary redirects under /new endpointprometheus
- CVE-2021-20529IBM Control Center 6.2.0.0 could allow a user to obtain sensitive version information that could be used in further attacks against the systIBM Control Center
- CVE-2021-20528IBM Control Center 6.2.0.0 is vulnerable to cross-site scripting.IBM Control Center
- CVE-2021-20374IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to stored cross-site scripting.IBM Maximo Asset Management
- CVE-2020-4765IBM Cloud Pak for Multicloud Management prior to 2.3 allows web pages to be stored locally which can be read by another user on the system.IBM Cloud Pak for Multicloud Management
- CVE-2020-4646IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5, 6.0.0.0 through 6.0.3.3, and 6.1.0.0 through 6.1.0.2 could allow an auIBM Sterling B2B Integrator
- CVE-2021-27924An issue was discovered in Couchbase Server 6.x through 6.6.1.
- CVE-2020-36365Smartstore (aka SmartStoreNET) before 4.1.0 allows CommonController.ClearCache, ClearDatabaseCache, RestartApplication, and ScheduleTaskCont
- CVE-2021-27925An issue was discovered in Couchbase Server 6.5.x and 6.6.x through 6.6.1.
- CVE-2020-36364An issue was discovered in Smartstore (aka SmartStoreNET) before 4.1.0.
- CVE-2021-25644An issue was discovered in Couchbase Server 5.x and 6.x through 6.6.1 and 7.0.0 Beta.
- CVE-2021-31158In the Query Engine in Couchbase Server 6.5.x and 6.6.x through 6.6.1, Common Table Expression queries were not correctly checking the user'
- CVE-2021-33204In the pg_partman (aka PG Partition Manager) extension before 4.5.1 for PostgreSQL, arbitrary code execution can be achieved via SECURITY DE
- CVE-2021-31930Persistent cross-site scripting (XSS) in the web interface of Concerto through 2.3.6 allows an unauthenticated remote attacker to introduce
- CVE-2021-3445A flaw was found in libdnf's signature verification functionality in versions before 0.60.1.libdnf
- CVE-2021-3421A flaw was found in the RPM package in the read functionality.rpm
- CVE-2017-17677BMC Remedy 9.1SP3 is affected by authenticated code execution.
- CVE-2017-17675BMC Remedy Mid Tier 9.1SP3 is affected by log hijacking.
- CVE-2017-17678BMC Remedy Mid Tier 9.1SP3 is affected by cross-site scripting (XSS).
- CVE-2017-17674BMC Remedy Mid Tier 9.1SP3 is affected by remote and local file inclusion.
- CVE-2020-20266Mikrotik RouterOs before 6.47 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/dot1x process.
- CVE-2020-20264Mikrotik RouterOs before 6.47 (stable tree) in the /ram/pckg/advanced-tools/nova/bin/netwatch process.
- CVE-2021-21733The management system of ZXCDN is impacted by the information leak vulnerability.<ZXCDN V7.01>
- CVE-2021-21732A mobile phone of ZTE is impacted by improper access control vulnerability.<Axon 11 5G>
- CVE-2021-20589Buffer access with incorrect length value vulnerability in GOT2000 series GT27 model communication driver versions 01.19.000 through 01.38.0GOT2000 series; GOT SIMPLE series; GT SoftGOT2000; Tension…