Skip to content
OpenAdvisories

Archive

14 May 2021

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Unscored —
    CVE-2021-33034 Public exploit

    In the Linux kernel before 5.12.4, net/bluetooth/hci_event.c has a use-after-free when destroying an hci_chan, aka CID-…

  • Unscored —
    CVE-2021-24286 Public exploit EPSS 13%

    Redirect 404 to Parent < 1.3.1 - Reflected Cross-Site Scripting (XSS)

    The settings page of the Redirect 404 to parent WordPress plugin before 1.3.1 did not properly sanitise the tab parameter before outputting it back, leading to a reflected Cross-Site Scripting issue

  • Unscored —
    CVE-2021-24287 Public exploit EPSS 10%

    Select All Categories and Taxonomies < 1.3.2 - Reflected Cross-Site Scripting (XSS)

    The settings page of the Select All Categories and Taxonomies, Change Checkbox to Radio Buttons WordPress plugin before 1.3.2 did not properly sanitise the tab parameter before outputting it back, leading to a reflected Cross-Site Scripting issue

  • High 8.0
    CVE-2021-32819 Public exploit EPSS 58%

    Remote code execution in squirrelly

    Squirrelly is a template engine implemented in JavaScript that works out of the box with ExpressJS. Squirrelly mixes pure template data with engine configuration options through the Express render API. By overwriting internal configuration options remote code…