Skip to content
OpenAdvisories

Archive

5 May 2021

Vulnerabilities first published on this day (UTC), newest first.

← April 2021 2021 / May /5 June 2021 →
  1. 1 
  2. 21
  3. 319
  4. 414
  5. 588
  6. 6106
  7. 7105
  8. 8 
  9. 91
  10. 1055
  11. 11141
  12. 1247
  13. 1363
  14. 14170
  15. 15 
  16. 165
  17. 1778
  18. 1841
  19. 1930
  20. 2061
  21. 2150
  22. 2218
  23. 23 
  24. 2493
  25. 2555
  26. 26105
  27. 2784
  28. 2865
  29. 296
  30. 30 
  31. 3120
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 5.8
    CVE-2021-29490 EPSS 70%

    Unauthenticated GET requests through Remote Image endpoints

    Jellyfin is a free software media system that provides media from a dedicated server to end-user devices via multiple apps. Verions prior to 10.7.3 vulnerable to unauthenticated Server-Side Request Forgery (SSRF) attacks via the imageUrl parameter. This issue…

    jellyfin jellyfin
  • Medium 6.3
    CVE-2021-31411

    Insecure temporary directory usage in frontend build functionality of Vaadin 14 and 15-19

    Insecure temporary directory usage in frontend build functionality of com.vaadin:flow-server versions 2.0.9 through 2.5.2 (Vaadin 14.0.3 through Vaadin 14.5.2), 3.0 prior to 6.0 (Vaadin 15 prior to 19), and 6.0.0 through 6.0.5 (Vaadin 19.0.0 through 19.0.4) a…

    vaadin vaadin flow-server com.vaadin:vaadin-bom Maven
  • Medium 5.9
    CVE-2021-20401

    IBM QRadar SIEM 7.3 and 7.4 contains hard-coded credentials, such as a password or cryptographic key, which it uses for…

    IBM QRadar SIEM
  • Medium 6.1
    CVE-2021-20397

    IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary J…

    IBM QRadar SIEM
  • Medium 4.9
    CVE-2020-4993

    IBM QRadar SIEM 7.3 and 7.4 when decompressing or verifying signature of zip files processes data in a way that may be …

    IBM QRadar SIEM
  • Medium 5.4
    CVE-2020-4929

    IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary J…

    IBM QRadar SIEM
  • Medium 6.2
    CVE-2020-4932

    IBM QRadar SIEM 7.3 and 7.4 contains hard-coded credentials, such as a password or cryptographic key, which it uses for…

    IBM QRadar SIEM
  • Medium 4.3
    CVE-2020-4883

    IBM QRadar SIEM 7.3 and 7.4 could disclose sensitive information about other domains which could be used in further att…

    IBM QRadar SIEM
  • Medium 6.1
    CVE-2020-13662

    Drupal Core Open Redirect vulnerability

    Open Redirect vulnerability in Drupal Core allows a user to be tricked into visiting a specially crafted link which would redirect them to an arbitrary external URL. This issue affects: Drupal Drupal Core 7 version 7.70 and prior versions.

    Drupal Drupal core drupal/core drupal/drupal Web / CMS Ubuntu Alpine Packagist
  • Medium 6.1
    CVE-2020-13666

    Drupal Core Cross-site scripting vulnerability

    Cross-site scripting vulnerability in Drupal Core. Drupal AJAX API does not disable JSONP by default, allowing for an XSS attack. This issue affects: Drupal Drupal Core 7.x versions prior to 7.73; 8.8.x versions prior to 8.8.10; 8.9.x versions prior to 8.9.6;…

    Drupal Drupal core drupal/core drupal/drupal Web / CMS Ubuntu Alpine Packagist