Skip to content
OpenAdvisories

Archive

13 May 2021

Vulnerabilities first published on this day (UTC), newest first.

← April 2021 2021 / May /13 June 2021 →
  1. 1 
  2. 21
  3. 319
  4. 414
  5. 588
  6. 6106
  7. 7105
  8. 8 
  9. 91
  10. 1055
  11. 11141
  12. 1247
  13. 1363
  14. 14170
  15. 15 
  16. 165
  17. 1778
  18. 1841
  19. 1930
  20. 2061
  21. 2150
  22. 2218
  23. 23 
  24. 2493
  25. 2555
  26. 26105
  27. 2784
  28. 2865
  29. 296
  30. 30 
  31. 3120
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2021-33026 Public exploit

    Deserialization of Untrusted Data in Flask-Caching

    The Flask-Caching extension through 1.10.1 for Flask relies on Pickle for serialization, which may lead to remote code execution or local privilege escalation. If an attacker gains access to cache storage (e.g., filesystem, Memcached, Redis, etc.), they can c…

    flask-caching flask-caching Debian PyPI
  • Critical 9.4
    CVE-2021-20999

    WEIDMUELLER: Accidentally open network port in u-controls and IoT-Gateways

    In Weidmüller u-controls and IoT-Gateways in versions up to 1.12.1 a network port intended only for device-internal usage is accidentally accessible via external network interfaces. By exploiting this vulnerability the device may be manipulated or the operati…

    Weidmüller UC20-WL2000-IOT (No. 1334990000) IOT-GW30-4G-EU (No. 2682630000) UC20-WL2000-AC (No. 1334950000)
  • Critical 10.0
    CVE-2021-20998

    WAGO: Managed Switches: Unauthorized creation of user accounts

    In multiple managed switches by WAGO in different versions without authorization and with specially crafted packets it is possible to create users.

    WAGO 0852-0303 0852-1505 0852-1505/000-001 ICS / OT
  • Critical 10.0
    CVE-2021-28799 Exploited · Ransomware Scanner template EPSS 78%

    Improper Authorization Vulnerability in HBS 3 (Hybrid Backup Sync)

    An improper authorization vulnerability has been reported to affect QNAP NAS running HBS 3 (Hybrid Backup Sync. ) If exploited, the vulnerability allows remote attackers to log in to a device. This issue affects: QNAP Systems Inc. HBS 3 versions prior to v16.…

    QNAP Systems HBS 3 HBS 2 HBS 1.3
    KEV Mar 31, 2022