CVE-2021 records published in May 2021
Page two of two: records 1,001 to 1,050 of the 1,050 published in May 2021, newest first. The first page carries the figures for May 2021.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2021-25317 | SUSE Linux Enterprise Server 11-SP4-LTSS packaging of cups incorrect default permissions | 3.3CNA v3.1 | 0.3% | 2021-05-05 | Fix |
| CVE-2021-25179 | SolarWinds Serv-U File Server cross-site scripting | 6.1v3.1 | 1.4% | 2021-05-05 | Fix |
| CVE-2021-24293 | NextGEN Gallery Pro WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.9% | 2021-05-05 | Fix |
| CVE-2021-24276 | Contact Form by Supsystic WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 16.0% | 2021-05-05 | NucleiExploit codeFix |
| CVE-2021-24275 | Popup by Supsystic WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 18.2% | 2021-05-05 | NucleiExploit codeFix |
| CVE-2021-24274 | Ultimate Maps by Supsystic WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 17.6% | 2021-05-05 | NucleiExploit codeFix |
| CVE-2021-24273 | Clever Addons for Elementor WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2021-05-05 | Fix |
| CVE-2021-24272 | Fitness Calculators WordPress plugin cross-site request forgery to cross-site scripting (XSS) | 4.3NVD v3.1 | 1.8% | 2021-05-05 | Exploit codeFix |
| CVE-2021-24271 | Ultimate Addons for Elementor WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2021-05-05 | Fix |
| CVE-2021-24270 | DethemeKit For Elementor WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2021-05-05 | Fix |
| CVE-2021-24269 | Sina Extension for Elementor WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2021-05-05 | Fix |
| CVE-2021-24268 | JetWidgets For Elementor WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2021-05-05 | Fix |
| CVE-2021-24267 | All-in-One Addons for Elementor - WidgetKit WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.7% | 2021-05-05 | Fix |
| CVE-2021-24266 | The Plus Addons for Elementor Page Builder Lite WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2021-05-05 | Fix |
| CVE-2021-24265 | Rife Elementor Extensions and Templates WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2021-05-05 | Fix |
| CVE-2021-24264 | Image Hover Effects - Elementor Addon WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2021-05-05 | Fix |
| CVE-2021-24263 | PowerPack Addons for Elementor WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.7% | 2021-05-05 | Fix |
| CVE-2021-24262 | WooLentor - WooCommerce Elementor Addons + Builder WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2021-05-05 | Fix |
| CVE-2021-24261 | HT Mega - Absolute Addons for Elementor Page Builder WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.7% | 2021-05-05 | Fix |
| CVE-2021-24260 | Livemesh Addons for Elementor WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.7% | 2021-05-05 | Fix |
| CVE-2021-24259 | Elementor Addon Elements WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2021-05-05 | Fix |
| CVE-2021-24258 | ElementsKit and ElementsKit Pro WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2021-05-05 | Fix |
| CVE-2021-24257 | Premium Addons for Elementor WordPress plugin Contributor+ stored cross-site scripting (XSS) | 5.4NVD v3.1 | 0.6% | 2021-05-05 | Fix |
| CVE-2021-24256 | Elementor - Header, Footer and Blocks Template WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2021-05-05 | Fix |
| CVE-2021-24255 | Essential Addons for Elementor WordPress plugin Contributor+ stored cross-site scripting (XSS) | 5.4NVD v3.1 | 0.6% | 2021-05-05 | Fix |
| CVE-2021-20401 | IBM QRadar SIEM hard-coded credentials | 5.9CNA v3.0 | 0.2% | 2021-05-05 | Fix |
| CVE-2021-20397 | IBM QRadar SIEM cross-site scripting | 6.1CNA v3.0 | 0.7% | 2021-05-05 | Fix |
| CVE-2021-20254 | samba out-of-bounds read | 6.8NVD v3.1 | 1.6% | 2021-05-05 | Fix |
| CVE-2021-3501 | Linux Kernel out-of-bounds write | 7.1NVD v3.1 | 0.4% | 2021-05-05 | Fix |
| CVE-2021-31164 | Apache Unomi log injection | 7.5v3.1 | 2.3% | 2021-05-04 | Fix |
| CVE-2021-29478 | redis vulnerability in the COPY command for large intsets | 7.5CNA v3.1 | 3.6% | 2021-05-04 | Fix |
| CVE-2021-29477 | redis vulnerability in the STRALGO LCS command | 7.5CNA v3.1 | 4.0% | 2021-05-04 | Fix |
| CVE-2021-29240 | CODESYS Development System Package Manager vulnerability | 7.8v3.1 | 0.9% | 2021-05-04 | Fix |
| CVE-2021-26804 | Centreon web insecure permissions | 6.5v3.1 | 1.2% | 2021-05-04 | |
| CVE-2021-23383 | handlebars prototype pollution | 9.8NVD v3.1 | 4.5% | 2021-05-04 | Exploit codeFix |
| CVE-2021-23343 | path-parse regular expression denial of service (ReDoS) | 7.5v3.1 | 2.2% | 2021-05-04 | Fix |
| CVE-2021-22547 | Buffer overrun in Google Cloud IoT Device SDK for Embedded C | 6.3CNA v3.1 | 0.2% | 2021-05-04 | |
| CVE-2021-21551 | Dell dbutil Driver insufficient access control | 8.8CNA v3.1 | 80.1% | 2021-05-04 | KEVExploit codeFix |
| CVE-2021-3154 | SolarWinds Serv-U injection | 7.5v3.1 | 1.2% | 2021-05-04 | Fix |
| CVE-2021-32020 | Amazon FreeRTOS memory corruption | 9.8v3.1 | 1.3% | 2021-05-03 | |
| CVE-2021-31996 | Double free in Algorithmica | 7.5v3.1 | 1.0% | 2021-05-03 | Fix |
| CVE-2021-29369 | Code injection in @rkesters/Gnuplot | 9.8v3.1 | 1.8% | 2021-05-03 | Fix |
| CVE-2021-29242 | CODESYS Control improper input validation | 7.3v3.1 | 1.1% | 2021-05-03 | Fix |
| CVE-2021-29241 | CODESYS Gateway null pointer dereference | 7.5v3.1 | 1.4% | 2021-05-03 | Fix |
| CVE-2021-29239 | CODESYS Development System insufficient verification of data authenticity | 7.8v3.1 | 0.2% | 2021-05-03 | Fix |
| CVE-2021-29238 | CODESYS Automation Server cross-site request forgery | 8.8v3.1 | 0.5% | 2021-05-03 | Fix |
| CVE-2021-28860 | Prototype pollution in Mixme | 9.1v3.1 | 1.8% | 2021-05-03 | Fix |
| CVE-2021-25631 | The Document Foundation LibreOffice incomplete denylist | 8.8v3.1 | 5.0% | 2021-05-03 | Fix |
| CVE-2021-21264 | octobercms october bypass of fix for, Twig sandbox escape | 5.2CNA v3.1 | 0.3% | 2021-05-03 | Fix |
| CVE-2021-28359 | Apache Airflow reflected XSS via Origin Query argument in URL | 6.1v3.1 | 14.4% | 2021-05-02 | Fix |