Skip to content
OpenAdvisories

Archive

10 May 2021

Vulnerabilities first published on this day (UTC), newest first.

← April 2021 2021 / May /10 June 2021 →
  1. 1 
  2. 21
  3. 319
  4. 414
  5. 588
  6. 6106
  7. 7105
  8. 8 
  9. 91
  10. 1055
  11. 11141
  12. 1247
  13. 1363
  14. 14170
  15. 15 
  16. 165
  17. 1778
  18. 1841
  19. 1930
  20. 2061
  21. 2150
  22. 2218
  23. 23 
  24. 2493
  25. 2555
  26. 26105
  27. 2784
  28. 2865
  29. 296
  30. 30 
  31. 3120
All Critical High Medium Low Exploited only Public exploit

55 results · Feed

  • Unscored —
    CVE-2021-26583

    A potential security vulnerability was identified in HPE iLO Amplifier Pack. The vulnerabilities could be remotely expl…

  • Unscored —
    CVE-2020-22809

    In Windscribe v1.83 Build 20, 'WindscribeService' has an Unquoted Service Path that facilitates privilege escalation.

  • Unscored —
    CVE-2021-22672

    Delta Electronics' CNCSoft ScreenEditor in versions prior to v1.01.30 could allow the corruption of data, a denial-of-s…

  • Medium 6.3
    CVE-2021-24011

    A privilege escalation vulnerability in FortiNAC version below 8.8.2 may allow an admin user to escalate the privileges…

    Fortinet Fortinet FortiNAC Network devices
  • Unscored —
    CVE-2021-31520

    A weak session token authentication bypass vulnerability in Trend Micro IM Security 1.6 and 1.6.5 could allow an remote…

    Trend Micro Trend Micro IM Security
  • Unscored —
    CVE-2021-25849

    An integer underflow was discovered in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, improper …

  • Unscored —
    CVE-2021-25846

    Improper validation of the ChassisID TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allo…

  • Unscored —
    CVE-2021-25845

    Improper validation of the ChassisID TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allo…

  • Unscored —
    CVE-2021-25847

    Improper validation of the length field of LLDP-MED TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, ve…

  • Unscored —
    CVE-2021-25848

    Improper validation of the length field of LLDP-MED TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, ve…

  • Medium 6.1
    CVE-2021-20717 Public exploit

    EC-CUBE Cross-site scripting vulnerability

    Cross-site scripting vulnerability in EC-CUBE 4.0.0 to 4.0.5 allows a remote attacker to inject a specially crafted script in the specific input field of the EC web site which is created using EC-CUBE. As a result, it may lead to an arbitrary script execution…

    EC-CUBE EC-CUBE ec-cube/ec-cube Packagist
  • Unscored —
    CVE-2021-3003

    Agenzia delle Entrate Desktop Telematico 1.0.0 contacts the jws.agenziaentrate.it server over cleartext HTTP, which all…

  • Unscored —
    CVE-2021-32471 Public exploit

    Insufficient input validation in the Marvin Minsky 1967 implementation of the Universal Turing Machine allows program u…

  • High 8.8
    CVE-2021-28664 Exploited Public exploit

    The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unpriv…

    KEV Nov 3, 2021
  • High 8.8
    CVE-2021-28663 Exploited Public exploit EPSS 12%

    The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are …

    KEV Nov 3, 2021