CVEs published in May 2021
19 tracked CVEs from 6 vendors had their first vendor advisory published in May 2021: 1 critical, 12 high, 1 in CISA KEV. Newest first.
3 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2021-21985UnratedCISA KEV
VMware vCenter Server Improper Input Validation Vulnerability
VMware · 1 advisory - Added
CVE-2021-25216High
NetApp · 1 advisory - Added
CVE-2021-25215High
NetApp · 1 advisory - Added
CVE-2021-25214High
NetApp · 1 advisory - Added
CVE-2020-24755High
UniFi: In Ubiquiti UniFi Video v3.10.13, when the executable starts, its first library validation is in the current directory.
Ubiquiti · 1 advisory - Added
CVE-2021-25264Medium
In multiple versions of Sophos Endpoint products for MacOS, a local attacker
Sophos · 1 advisory - Added
CVE-2020-36289Medium
Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users
Atlassian · 1 advisory - Added
CVE-2021-23016Medium
On BIG-IP APM versions 15.1.x before 15.1.3, 14.1.x before 14.1.4.1, 13.1.x before 13.1.4, and all versions of 16.0.x, 12.1.x…
F5 · 1 advisory - Added
CVE-2021-23015High
On BIG-IP 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.0.8 through 13.1.3.6, and all versions of 16.0.x
F5 · 1 advisory - Added
CVE-2021-23014High
On versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, and 14.1.x before 14.1.4, BIG-IP Advanced WAF and ASM are missing…
F5 · 1 advisory - Added
CVE-2021-23012High
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, and 13.1.x before 13.1.4, lack of input…
F5 · 1 advisory - Added
CVE-2021-23010High
BIG-IP: On versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.5, and 12.1.x before…
F5 · 1 advisory - Added
CVE-2021-23009High
On BIG-IP version 16.0.x before 16.0.1.1 and 15.1.x before 15.1.3, malformed HTTP/2 requests may cause an infinite loop
F5 · 1 advisory - Added
CVE-2021-23013High
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before…
F5 · 1 advisory - Added
CVE-2021-23011High
BIG-IP: On versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, 12.1.x before 12.1.6, and…
F5 · 1 advisory - Added
CVE-2021-23008Critical
BIG-IP: On version 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, 12.1.x before 12.1.6, and all versions of 16.0.x…
F5 · 1 advisory - Added
CVE-2021-26077High
Broken Authentication in Atlassian Connect Spring Boot (ACSB) in version 1.1.0 before 2.1.3 and from version 2.1.4 before 2.1.5…
Atlassian · 1 advisory - Added
CVE-2020-29445Medium
Affected versions of Confluence Server before 7.4.8, and versions from 7.5.0 before 7.11.0
Atlassian · 1 advisory - Added
CVE-2020-29444Medium
Affected versions of Team Calendar in Confluence Server before 7.11.0 allow attackers to inject arbitrary HTML or Javascript
Atlassian · 1 advisory