Skip to content
OpenAdvisories

Archive

11 May 2021

Vulnerabilities first published on this day (UTC), newest first.

← April 2021 2021 / May /11 June 2021 →
  1. 1 
  2. 21
  3. 319
  4. 414
  5. 588
  6. 6106
  7. 7105
  8. 8 
  9. 91
  10. 1055
  11. 11141
  12. 1247
  13. 1363
  14. 14170
  15. 15 
  16. 165
  17. 1778
  18. 1841
  19. 1930
  20. 2061
  21. 2150
  22. 2218
  23. 23 
  24. 2493
  25. 2555
  26. 26105
  27. 2784
  28. 2865
  29. 296
  30. 30 
  31. 3120
All Critical High Medium Low Exploited only Public exploit

141 results · Feed

  • Unscored —
    CVE-2021-31901

    In JetBrains Hub before 2021.1.13079, two-factor authentication wasn't enabled properly for the All Users group.

  • Unscored —
    CVE-2021-30504

    In JetBrains IntelliJ IDEA before 2021.1, DoS was possible because of unbounded resource allocation.

  • Unscored —
    CVE-2021-29263

    In JetBrains IntelliJ IDEA 2020.3.3, local code execution was possible because of insufficient checks when getting the …

  • Unscored —
    CVE-2021-30006

    In IntelliJ IDEA before 2020.3.3, XXE was possible, leading to information disclosure.

  • Unscored —
    CVE-2021-31900

    In JetBrains Code With Me bundled to the compatible IDE versions before 2021.1, a client could open a browser on a host.

  • Unscored —
    CVE-2021-31899

    In JetBrains Code With Me bundled to the compatible IDEs before version 2021.1, the client could execute code in read-o…

  • Medium 6.4
    CVE-2020-27246

    An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. Th…

  • Medium 6.4
    CVE-2020-27245

    An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. Th…

  • Medium 6.4
    CVE-2020-27244

    An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. Th…

  • Medium 6.4
    CVE-2020-27243

    An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. Th…

  • Medium 6.4
    CVE-2020-27242

    An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. Th…

  • Medium 5.4
    CVE-2021-32544

    Intelligent global technology Ltd, igt+ - DOM-based Cross-Site Scripting

    Special characters of IGT search function in igt+ are not filtered in specific fields, which allow remote authenticated attackers can inject malicious JavaScript and carry out DOM-based XSS (Cross-site scripting) attacks.

    Intelligent global technology igt+
  • Medium 5.4
    CVE-2021-30174

    RiyaLab Co., Ltd. CloudISO - Stored XSS

    RiyaLab CloudISO event item is added, special characters in specific field of time management page are not properly filtered, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS (Stored Cross-site scripting) att…

    RiyaLab CloudISO
  • Unscored —
    CVE-2020-24588

    The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) does…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2020-24587

    The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) does…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2020-24586

    The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) does…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2021-32563

    An issue was discovered in Thunar before 4.16.7 and 4.17.x before 4.17.2. When called with a regular file as a command-…

    thunar thunar Debian Ubuntu
  • Unscored —
    CVE-2021-32606

    In the Linux kernel 5.11 through 5.12.2, isotp_setsockopt in net/can/isotp.c allows privilege escalation to root by lev…

    linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu
  • Unscored —
    CVE-2021-20309

    A flaw was found in ImageMagick in versions before 7.0.11 and before 6.9.12, where a division by zero in WaveImage() of…

    imagemagick imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine
  • Unscored —
    CVE-2021-20313

    A flaw was found in ImageMagick in versions before 7.0.11. A potential cipher leak when the calculate signatures in Tra…

    imagemagick imagemagick imagemagick Debian Ubuntu Alpine
  • Unscored —
    CVE-2021-20312

    A flaw was found in ImageMagick in versions 7.0.11, where an integer overflow in WriteTHUMBNAILImage of coders/thumbnai…

    imagemagick imagemagick imagemagick Debian Ubuntu Alpine